$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: lneWHaGPjxoPCBOmaDlidCCEwQjHGgiZDIu8s75pQHE= Subject key identifier: BE:52:BF:AD:15:97:9D:12:69:31:09:BF:51:77:A3:77:23:97:77:F0 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0CE7 Signing time: Thu 16 Apr 2026 18:10:09 +0000 Manifest this update: Thu 16 Apr 2026 18:10:09 +0000 Manifest next update: Thu 23 Apr 2026 18:10:09 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: C6saUvnO/TdT9LOLNkt5s7n2IICFksK+69KnqQGe+bI=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Apr 16 18:10:09 2026 GMT Not After : Apr 23 18:10:09 2026 GMT Subject: CN=69e12601-0c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:17:08:e6:63:34:bd:30:c1:83:7b:8f:45: 26:e5:fc:b5:87:f0:3c:d9:04:ae:fe:e2:87:b7:af: c3:11:70:81:f3:35:1c:db:a5:0f:3a:35:92:1b:29: 95:4d:a0:5e:02:bd:85:2b:8b:74:f6:9b:cd:a1:d7: 06:3d:20:1f:23:f1:94:45:9e:93:88:0b:c7:0e:a2: 61:86:e5:26:11:94:aa:53:b8:97:10:30:2f:ab:b3: 98:40:64:08:94:14:d1:34:3c:7a:7f:5d:fa:f4:07: b6:42:3f:f4:1f:b6:ef:31:a8:30:6a:ca:17:9d:d1: cd:d1:b7:75:fb:80:2f:b8:a0:86:2e:85:b9:6b:8d: dc:b4:9e:23:1e:46:49:8d:56:57:f0:64:75:3e:21: 5e:fb:14:0a:3e:2b:78:55:ee:ae:84:68:d5:7f:9e: 97:59:77:57:b6:ec:3a:64:e0:98:2c:bf:f0:95:1d: b0:ff:a2:e6:34:1d:96:36:60:4e:44:a0:02:28:2c: 05:1e:5a:cf:03:6b:9e:f8:77:86:4c:c0:0a:85:f9: 18:c1:cc:89:b5:a0:47:98:b9:f5:f1:2e:40:0f:a5: 21:34:1c:0c:8a:1b:c4:62:be:1d:d3:2b:5e:d9:49: 90:0d:aa:97:ee:f7:96:9d:5d:e3:f1:e4:df:2b:5a: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:BF:AD:15:97:9D:12:69:31:09:BF:51:77:A3:77:23:97:77:F0 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:55:7f:1b:20:84:8b:65:93:a6:f9:bf:ed:48:64:3f:fd:2e: 25:cf:f9:ca:15:36:43:61:2c:ef:76:7a:37:7a:be:ed:47:9e: 7a:d4:84:a1:c1:33:11:64:06:c5:a6:ab:9d:f5:3f:0d:a3:db: 07:d0:f9:8a:11:19:91:06:59:3e:88:89:23:09:a3:17:02:92: 4f:dd:90:43:36:0f:e4:c6:f2:ba:b8:44:7d:b6:43:fb:81:19: 5c:a3:ca:52:d5:4a:72:ab:39:cd:a1:63:46:83:80:b3:3a:6b: 4d:d5:f4:96:94:0e:bd:b7:7f:b3:88:ab:8d:23:e0:c0:dd:fa: 37:22:57:93:e0:f0:81:07:21:98:b3:73:ab:77:91:ca:4b:2c: 5e:a5:46:5a:13:36:f1:bc:14:18:15:46:6b:ec:74:5a:e6:4a: d8:ec:f8:00:d7:3f:1b:30:91:cb:b8:5b:0e:5d:37:fa:3d:ca: f7:60:b8:e2:a5:80:5f:b1:e4:53:d0:18:4a:98:96:eb:c8:ec: 74:a5:0a:da:90:a6:2a:06:4d:38:5c:71:e7:c3:81:55:13:ad: 23:30:79:58:e7:0e:2d:41:ff:f9:6f:95:f9:db:eb:f1:91:54: 7b:d1:b6:63:1b:2f:3b:7b:0b:68:7f:95:51:b0:27:20:63:87: f2:e2:75:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjYwNDE2MTgxMDA5WhcNMjYwNDIzMTgxMDA5WjAYMRYwFAYD VQQDEw02OWUxMjYwMS0wYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEwXCOZjNL0wwYN7j0Um5fy1h/A82QSu/uKHt6/DEXCB8zUc26UPOjWSGymV TaBeAr2FK4t09pvNodcGPSAfI/GURZ6TiAvHDqJhhuUmEZSqU7iXEDAvq7OYQGQI lBTRNDx6f1369Ae2Qj/0H7bvMagwasoXndHN0bd1+4AvuKCGLoW5a43ctJ4jHkZJ jVZX8GR1PiFe+xQKPit4Ve6uhGjVf56XWXdXtuw6ZOCYLL/wlR2w/6LmNB2WNmBO RKACKCwFHlrPA2ue+HeGTMAKhfkYwcyJtaBHmLn18S5AD6UhNBwMihvEYr4d0yte 2UmQDaqX7veWnV3j8eTfK1pR2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5Sv60V l50SaTEJv1F3o3cjl3fwMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd1V/GyCEi2WTpvm/7UhkP/0uJc/5yhU2Q2Es73Z6N3q+7UeeetSEocEzEWQG xaarnfU/DaPbB9D5ihEZkQZZPoiJIwmjFwKST92QQzYP5MbyurhEfbZD+4EZXKPK UtVKcqs5zaFjRoOAszprTdX0lpQOvbd/s4irjSPgwN36NyJXk+DwgQchmLNzq3eR ykssXqVGWhM28bwUGBVGa+x0WuZK2Oz4ANc/GzCRy7hbDl03+j3K92C44qWAX7Hk U9AYSpiW68jsdKUK2pCmKgZNOFxx58OBVROtIzB5WOcOLUH/+W+V+dvr8ZFUe9G2 YxsvO3sLaH+VUbAnIGOH8uJ11w== -----END CERTIFICATE-----Generated at Sat Apr 18 04:41:21 2026 by rpki-client