$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: d82ivpQA6atGOCimLs99DhBccsOl+Bo/U21IYaEwPPc= Subject key identifier: 83:23:00:38:F3:68:FF:17:A8:F1:9A:5D:C6:0A:7D:6D:46:C5:C2:F8 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0D04 Signing time: Fri 12 Jun 2026 18:11:59 +0000 Manifest this update: Fri 12 Jun 2026 18:11:58 +0000 Manifest next update: Fri 19 Jun 2026 18:11:58 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: G78KhYrPp98aRbitzyOGYTtIrH89xE7/3VSxacycHbs=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Jun 12 18:11:58 2026 GMT Not After : Jun 19 18:11:58 2026 GMT Subject: CN=6a2c4bef-f2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:41:b5:11:b6:3e:90:33:2d:9c:71:d8:86: 74:ac:20:92:f2:4c:2c:a7:6d:18:74:8d:50:a2:aa: 53:b2:b4:cd:1d:23:b4:4f:68:16:aa:64:a7:7b:0e: 55:e9:1a:74:b7:f6:ff:cc:1d:0a:d9:bf:22:43:65: 32:29:84:28:eb:9b:44:01:36:e3:a8:5a:ed:7b:8f: fe:b5:0c:52:75:a7:30:29:1f:3b:42:9c:ab:c8:5f: 10:1f:3a:f3:d1:6a:c4:4d:42:8b:84:f7:39:85:25: c4:59:e4:6f:4e:cc:19:79:63:20:77:57:f2:80:d1: d5:da:cb:b3:5a:27:92:e4:be:3e:c3:b2:12:26:d1: 4f:2a:cc:d2:22:ca:40:3d:7e:d1:7a:03:99:04:14: 80:27:f4:7d:92:9c:7c:82:78:30:1d:82:d3:0d:de: ec:9a:3a:7a:3d:0b:78:df:f7:ba:89:0d:01:48:c4: 16:43:c1:8a:e0:e4:46:70:6f:58:95:4b:6f:b4:4b: 8e:a9:30:4f:5e:0a:10:aa:aa:2a:0a:17:cd:7b:49: a2:63:9e:66:56:66:b6:e3:02:b8:b2:5d:37:74:b6: e4:16:78:35:e2:8d:72:4f:7c:3b:66:01:7a:b0:65: bb:18:10:5b:77:e1:95:6b:38:e4:b9:4c:83:97:31: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:00:38:F3:68:FF:17:A8:F1:9A:5D:C6:0A:7D:6D:46:C5:C2:F8 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:74:89:de:d6:05:44:44:16:ca:4a:bb:af:fa:6b:14:a5:cc: 64:86:31:4f:46:01:84:7c:e9:65:55:62:ba:e5:5e:93:b5:33: 26:37:90:32:4c:56:3e:16:78:5e:1c:70:3f:a9:29:61:63:4b: c1:fd:82:bf:4b:cd:d7:fc:58:27:43:1c:f9:a3:82:5d:bf:9f: 22:f9:07:c6:5e:2c:cd:d5:ca:ce:1d:39:14:aa:23:31:c7:95: e8:8b:99:79:ce:93:39:dc:0b:0f:46:01:3b:1d:30:b1:6c:0f: 19:a9:63:7b:e9:b6:64:d7:5a:88:76:5b:b2:aa:3b:b9:51:0b: 91:f1:05:b9:75:2c:4e:0b:f3:15:33:57:11:88:31:9b:87:a0: d4:87:12:73:df:24:da:c8:9c:78:fc:58:69:05:bf:38:44:23: d8:79:be:ba:8a:f6:6f:24:c3:43:9a:54:44:5d:cb:3c:04:4a: e8:0f:54:1c:4b:0e:2f:0e:43:12:09:e1:39:39:76:91:dc:af: 92:1c:8f:d5:06:8d:9e:6a:8c:7c:94:87:36:2f:cb:94:92:07: c6:79:5c:31:c0:6c:fa:90:5b:9a:5b:c2:70:af:4a:f2:78:02: 7e:2e:30:6f:ab:d6:0d:1f:4e:d7:5d:d2:c9:f2:6e:b8:e6:68: 96:3b:c4:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjYwNjEyMTgxMTU4WhcNMjYwNjE5MTgxMTU4WjAYMRYwFAYD VQQDEw02YTJjNGJlZi1mMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVpBtRG2PpAzLZxx2IZ0rCCS8kwsp20YdI1QoqpTsrTNHSO0T2gWqmSnew5V 6Rp0t/b/zB0K2b8iQ2UyKYQo65tEATbjqFrte4/+tQxSdacwKR87QpyryF8QHzrz 0WrETUKLhPc5hSXEWeRvTswZeWMgd1fygNHV2suzWieS5L4+w7ISJtFPKszSIspA PX7RegOZBBSAJ/R9kpx8gngwHYLTDd7smjp6PQt43/e6iQ0BSMQWQ8GK4ORGcG9Y lUtvtEuOqTBPXgoQqqoqChfNe0miY55mVma24wK4sl03dLbkFng14o1yT3w7ZgF6 sGW7GBBbd+GVazjkuUyDlzETEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMjADjz aP8XqPGaXcYKfW1GxcL4MB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXSJ3tYFREQWykq7r/prFKXMZIYxT0YBhHzpZVViuuVek7UzJjeQMkxWPhZ4 XhxwP6kpYWNLwf2Cv0vN1/xYJ0Mc+aOCXb+fIvkHxl4szdXKzh05FKojMceV6IuZ ec6TOdwLD0YBOx0wsWwPGalje+m2ZNdaiHZbsqo7uVELkfEFuXUsTgvzFTNXEYgx m4eg1IcSc98k2sicePxYaQW/OEQj2Hm+uor2byTDQ5pURF3LPARK6A9UHEsOLw5D EgnhOTl2kdyvkhyP1QaNnmqMfJSHNi/LlJIHxnlcMcBs+pBbmlvCcK9K8ngCfi4w b6vWDR9O113SyfJuuOZoljvEPA== -----END CERTIFICATE-----Generated at Sun Jun 14 01:03:17 2026 by rpki-client