$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: zk27SKOsI8G4a3LbF6DorLZD1UeKHfPk41RRYXt6QJQ= Subject key identifier: 71:95:8D:AA:1C:D4:20:69:88:1D:5B:E8:35:9D:C2:8A:47:C3:BA:BF Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 041A Signing time: Sun 01 Mar 2026 23:25:13 +0000 Manifest this update: Sun 01 Mar 2026 23:25:12 +0000 Manifest next update: Sun 08 Mar 2026 23:25:12 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: He3Ao1+N2KWRnSLlvLXUdmylYBEP3npcq2gqXeKt63o=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: OnrJHjAaotCz5N5oezIxaMJXxP9Vqz9O52EXIcge9Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Mar 1 23:25:12 2026 GMT Not After : Mar 8 23:25:12 2026 GMT Subject: CN=69a4cad9-59d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:0d:6c:58:ab:58:e7:5b:e2:d8:55:28:be: 1c:70:7b:5d:b2:5f:e1:42:f8:76:47:b2:47:41:b4: be:1e:74:d6:95:59:a6:6a:4b:d9:28:c7:0c:56:42: 7f:92:3d:25:ad:d1:74:83:18:39:32:05:7c:36:50: da:08:6f:50:7e:ff:6b:db:dd:f2:d9:4c:41:7f:84: 56:91:8b:77:9d:5a:7b:7d:8b:56:95:5b:f8:65:52: 58:6c:01:e6:53:47:49:9b:69:5d:f2:6e:1b:11:a2: 67:9f:aa:ee:45:0b:b7:8e:a1:bc:12:e4:8b:e6:36: 4f:c1:31:8a:1e:8b:7b:6c:ac:eb:17:76:6f:e4:91: 65:e6:15:18:83:ad:9e:05:78:f1:4e:99:6e:73:16: 74:34:6d:ff:89:55:7c:fe:24:63:39:dc:87:a9:2a: be:ee:d7:f6:bb:a5:4e:c0:38:3b:97:d0:2d:eb:9c: cd:5b:e7:39:62:0f:1d:8f:e4:9e:59:48:01:41:44: 25:f8:07:40:d9:1f:bd:47:e3:0c:bb:44:3d:26:6e: 57:38:e3:30:62:81:7f:5e:cd:33:e7:44:a7:5d:8b: 3f:a9:19:84:d5:03:c0:0e:05:15:95:d5:30:ef:b1: 66:2b:0e:e9:15:28:1f:d2:b0:31:d7:9d:45:fd:0c: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:95:8D:AA:1C:D4:20:69:88:1D:5B:E8:35:9D:C2:8A:47:C3:BA:BF X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ef:43:67:b6:f6:6d:56:2c:2e:d0:33:c0:92:91:31:62:85: 82:0d:ea:23:99:33:b2:0a:79:8c:32:0a:e4:d5:e8:1b:e1:88: af:be:3f:ed:33:1c:35:51:64:d8:53:34:51:bc:a4:e3:0f:74: 35:09:f3:96:5f:65:87:9f:f1:36:76:47:73:02:8a:98:d0:df: 0b:3a:81:a0:67:98:4d:b6:3d:69:eb:13:d5:6e:c7:66:f4:d7: 96:75:28:f9:78:56:04:13:56:ba:da:ae:33:d8:8f:f7:1c:97: 0f:8d:3b:5b:97:9b:9f:0f:db:f0:6e:53:d8:72:5b:3a:2f:52: 28:db:a3:70:36:78:cb:5d:97:e3:db:83:59:6c:83:a3:22:47: 72:c0:61:9c:58:fa:d2:37:86:c3:92:06:b5:34:a6:b9:c4:2b: 94:44:a8:69:91:ed:56:eb:ff:45:ad:57:24:c5:95:11:a7:6d: b2:aa:be:19:0c:fd:b0:64:2d:3f:e3:a7:9f:43:32:66:72:9b: aa:fc:dd:38:cc:86:bf:ca:a4:85:02:09:47:81:48:30:80:2c: 0a:0d:39:70:e4:5b:42:63:94:b1:1a:a4:85:30:4c:7c:a8:10: 82:57:73:11:a3:eb:6c:e0:36:5b:f3:6c:62:a4:80:d1:24:37: 77:ae:71:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjYwMzAxMjMyNTEyWhcNMjYwMzA4MjMyNTEyWjAYMRYwFAYD VQQDEw02OWE0Y2FkOS01OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/MNbFirWOdb4thVKL4ccHtdsl/hQvh2R7JHQbS+HnTWlVmmakvZKMcMVkJ/ kj0lrdF0gxg5MgV8NlDaCG9Qfv9r293y2UxBf4RWkYt3nVp7fYtWlVv4ZVJYbAHm U0dJm2ld8m4bEaJnn6ruRQu3jqG8EuSL5jZPwTGKHot7bKzrF3Zv5JFl5hUYg62e BXjxTplucxZ0NG3/iVV8/iRjOdyHqSq+7tf2u6VOwDg7l9At65zNW+c5Yg8dj+Se WUgBQUQl+AdA2R+9R+MMu0Q9Jm5XOOMwYoF/Xs0z50SnXYs/qRmE1QPADgUVldUw 77FmKw7pFSgf0rAx151F/Qz+aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGVjaoc 1CBpiB1b6DWdwopHw7q/MB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAou9DZ7b2bVYsLtAzwJKRMWKFgg3qI5kzsgp5jDIK5NXoG+GIr74/7TMcNVFk 2FM0Ubyk4w90NQnzll9lh5/xNnZHcwKKmNDfCzqBoGeYTbY9aesT1W7HZvTXlnUo +XhWBBNWutquM9iP9xyXD407W5ebnw/b8G5T2HJbOi9SKNujcDZ4y12X49uDWWyD oyJHcsBhnFj60jeGw5IGtTSmucQrlESoaZHtVuv/Ra1XJMWVEadtsqq+GQz9sGQt P+Onn0MyZnKbqvzdOMyGv8qkhQIJR4FIMIAsCg05cORbQmOUsRqkhTBMfKgQgldz EaPrbOA2W/NsYqSA0SQ3d65xzw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:48 2026 by rpki-client