$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json) Hash identifier: sKvvrKgSu33SoA05JZ9qqM/dlMWD0E+mZ3r+t2fXArs= Subject key identifier: 6B:31:27:C0:BE:8D:A8:7C:4D:69:C7:5C:D2:C6:C6:6A:E1:C4:91:05 Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft Manifest number: 1C Signing time: Sun 01 Mar 2026 10:25:14 +0000 Manifest this update: Sun 01 Mar 2026 10:25:14 +0000 Manifest next update: Sun 08 Mar 2026 10:25:14 +0000 Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: WUZWVYOFVTgkbhDG7GZRNPsWSoc+ANaUMVPdwDiTMz8=) 2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: Mar 1 10:25:14 2026 GMT Not After : Mar 8 10:25:14 2026 GMT Subject: CN=69a4140a-d8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:4a:44:96:9e:c3:4a:a0:01:7f:9b:69:c8: 5e:01:0a:36:8f:04:22:85:46:80:7f:d7:1c:65:80: a4:83:f6:02:94:3f:64:8c:d9:24:4c:89:dd:b9:ed: 07:dc:3b:03:7f:af:1e:c2:7e:f0:6c:0f:a4:8d:38: b8:3e:b6:60:04:46:2a:61:36:7c:8d:26:53:f6:25: 75:53:bd:8b:6a:db:f8:cb:ae:22:52:4a:69:11:20: 9c:64:4e:7a:2c:87:46:56:e9:50:9b:50:ab:9e:d4: 40:d7:7c:6f:9b:06:8b:b7:1d:f3:e4:27:94:b1:8d: 8c:9e:15:49:80:f8:32:dc:f6:25:ac:78:b3:0d:2b: 23:8c:c3:8a:f4:84:d1:d4:be:b2:bb:7a:a4:11:b4: a3:6f:0c:55:0f:ca:d0:3c:b2:79:68:ff:fc:9f:d6: 16:ee:d4:b6:79:8f:93:6b:61:a5:1f:2f:25:e8:b9: dd:47:e7:73:7e:5d:b6:b7:d3:02:21:78:05:4c:7b: 35:ed:a6:ef:75:c3:68:ab:22:70:62:00:b7:e5:99: f5:42:f6:63:6d:4d:b6:f3:e3:bf:fc:1d:d4:14:32: a1:38:ae:94:5b:fa:f5:ba:b0:e6:3e:e8:6d:c8:51: 2a:cf:34:1e:fa:e1:f8:2c:03:08:19:19:6f:32:f1: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:31:27:C0:BE:8D:A8:7C:4D:69:C7:5C:D2:C6:C6:6A:E1:C4:91:05 X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:67:34:e3:62:c8:1f:b2:b6:c8:91:5e:01:a5:97:f8:7b:83: f7:ac:9a:b1:fa:86:56:31:b3:2b:59:70:d2:e9:50:2d:f8:23: 1a:31:6a:15:d2:d2:c9:d8:3a:04:81:e5:71:de:e5:45:e5:1a: a7:94:36:1b:6c:7e:9c:8f:4c:72:67:05:8f:1b:23:e4:fb:d5: f0:f6:ab:57:01:44:e7:f8:f7:0e:b9:c5:d0:49:82:74:ed:43: ce:71:0c:61:d8:a4:51:06:15:09:d3:6a:a5:88:85:73:66:ac: 50:3f:44:67:be:55:c6:d1:0e:84:b5:92:fe:96:1c:bc:5e:a8: 3a:21:d6:fc:2a:65:9f:6a:91:96:9b:e0:72:22:5c:3e:09:e3: eb:b9:60:3b:f9:12:c6:48:fd:54:f2:46:03:bc:bb:2b:8d:b0: 6c:ba:9e:86:a7:e9:e0:0e:a4:e0:29:0b:fa:74:0e:91:70:f8: d6:6f:96:d0:df:93:fa:6a:cf:84:53:31:fb:da:df:eb:a4:2a: cc:70:8a:45:16:1a:35:7c:02:72:0f:ad:22:42:6f:d4:4f:ec: 08:a1:a0:78:ad:01:20:9e:3e:62:22:e0:7e:ac:2e:7f:ea:21: 29:bd:f9:9e:19:7e:04:32:2c:dd:ff:10:05:1d:22:0e:67:43: f2:a6:0d:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoNDMwOTY0MzlBRDQ1Mzc4REM1RTcxMjIzRjg3MjYxMjdC MTE5NjVFRDAeFw0yNjAzMDExMDI1MTRaFw0yNjAzMDgxMDI1MTRaMBgxFjAUBgNV BAMTDTY5YTQxNDBhLWQ4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClv0pElp7DSqABf5tpyF4BCjaPBCKFRoB/1xxlgKSD9gKUP2SM2SRMid257Qfc OwN/rx7CfvBsD6SNOLg+tmAERiphNnyNJlP2JXVTvYtq2/jLriJSSmkRIJxkTnos h0ZW6VCbUKue1EDXfG+bBou3HfPkJ5SxjYyeFUmA+DLc9iWseLMNKyOMw4r0hNHU vrK7eqQRtKNvDFUPytA8snlo//yf1hbu1LZ5j5NrYaUfLyXoud1H53N+Xba30wIh eAVMezXtpu91w2irInBiALflmfVC9mNtTbbz47/8HdQUMqE4rpRb+vW6sOY+6G3I USrPNB764fgsAwgZGW8y8W+PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUazEnwL6N qHxNacdc0sbGauHEkQUwHwYDVR0jBBgwFoAUQwlkOa1FN43F5xIj+HJhJ7EZZe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1LzU5OTY3MTJDRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlpl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdsa09hMUZONDNGNXhJai1ISmhKN0VaWmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1LzU5OTY3MTJDRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQz RjV4SWotSEpoSjdFWlplMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADZzTjYsgfsrbIkV4BpZf4e4P3rJqx+oZWMbMrWXDS6VAt+CMaMWoV0tLJ2DoE geVx3uVF5RqnlDYbbH6cj0xyZwWPGyPk+9Xw9qtXAUTn+PcOucXQSYJ07UPOcQxh 2KRRBhUJ02qliIVzZqxQP0RnvlXG0Q6EtZL+lhy8Xqg6Idb8KmWfapGWm+ByIlw+ CePruWA7+RLGSP1U8kYDvLsrjbBsup6Gp+ngDqTgKQv6dA6RcPjWb5bQ35P6as+E UzH72t/rpCrMcIpFFho1fAJyD60iQm/UT+wIoaB4rQEgnj5iIuB+rC5/6iEpvfme GX4EMizd/xAFHSIOZ0Pypg3R -----END CERTIFICATE-----Generated at Mon Mar 2 08:00:17 2026 by rpki-client