$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: 9qpi1eupZ2D8rEyMUY62HL9LDknnFRKT98wmGmfWue8= Subject key identifier: 95:57:A3:52:78:69:4B:35:7C:CA:E9:92:27:AC:A6:C2:DF:2A:68:D3 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 065F Signing time: Sat 28 Feb 2026 23:11:03 +0000 Manifest this update: Sat 28 Feb 2026 23:11:03 +0000 Manifest next update: Sat 07 Mar 2026 23:11:03 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: OkAQQB/KSXwc1j/6AlE1CTCsBrb2QdcAml5D5n7UFF0=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: taOVx7nk0yJP7nOzPIUbOsf7C8xITqEbR1CM6ndaNjQ=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: aPH84FEP6ZN7kMoON0X2LyO7xuFcySH9Oy6iOBdgxYk=) 4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: QV6x7t1GNDY1enVK8NGqWm1qI1rxu4buJOSstDWJdT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Feb 28 23:11:03 2026 GMT Not After : Mar 7 23:11:03 2026 GMT Subject: CN=69a37607-66f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:d1:cc:ec:e1:8f:15:6f:e6:b0:dc:3c:aa: f1:3c:c7:91:a8:54:26:65:bc:96:66:4a:81:6e:34: 86:67:d7:d0:35:f2:5c:16:85:7b:88:44:f2:29:db: 95:b7:a9:9a:f8:b8:49:36:e6:5c:b5:f7:c2:f5:d6: 3b:9d:94:80:62:d5:09:e8:eb:bc:21:d7:11:ea:c2: b1:9b:a4:40:07:6d:26:2d:f6:fc:85:00:80:71:16: 5d:61:35:2c:19:0a:06:c2:2f:04:25:65:b2:6a:f0: 99:cf:7f:57:0f:41:21:df:18:aa:6b:2d:22:2d:0a: 70:c6:36:46:52:1e:fa:18:52:8b:a7:4d:e2:30:7e: 81:e8:65:4f:3c:35:a4:7c:9d:2d:a6:11:ba:7e:a4: 88:8a:2a:3e:a9:36:e7:00:f6:83:1b:90:7a:a5:d3: 0f:4f:14:70:2e:78:34:2b:9b:6e:03:f5:58:29:ff: a6:85:85:ba:9a:42:90:70:41:56:b2:54:f3:47:d9: 88:a8:7c:59:a0:45:6f:7f:6f:44:3d:fa:21:2c:03: 46:d9:b7:5c:b0:f6:86:70:bf:e2:cc:88:8a:27:62: 52:15:8c:7a:c9:7e:62:98:a4:61:d6:6a:03:7d:d5: f0:55:c0:69:18:ed:fb:88:be:e3:0a:4c:fc:80:a5: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:57:A3:52:78:69:4B:35:7C:CA:E9:92:27:AC:A6:C2:DF:2A:68:D3 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3a:a8:9c:0b:83:f6:5b:0d:2d:d1:1d:99:02:57:aa:99:0b: 96:db:c7:67:ad:1a:1d:6e:2f:12:98:8e:4b:12:48:c4:3c:1b: 80:7e:29:f4:7e:f7:3e:4b:8a:b8:ad:9e:92:49:d5:e5:e7:c4: 60:f9:f9:c6:22:d8:62:2b:84:a9:95:7b:4c:af:7c:2c:73:d2: 96:d0:b3:04:30:ba:8c:dc:24:f3:50:cf:f5:d1:dc:24:23:b4: 39:46:08:1e:ce:14:78:07:42:d8:94:ed:4d:68:95:6e:ce:0c: 13:b1:3a:b2:d7:ae:ab:f0:58:78:8c:03:44:82:c7:3c:50:74: 62:f7:1c:0f:77:07:a5:d5:94:f1:51:69:d7:73:c3:6c:f6:d1: a8:2b:0a:ae:f5:70:e7:fe:bc:57:54:60:c7:f8:c1:2c:29:fa: d6:2f:c3:6c:4a:b5:32:e4:43:d9:ac:91:62:ce:75:17:37:c8: 36:ef:58:74:84:4b:86:9e:36:af:9e:23:74:ce:5b:6a:88:62: ad:83:c1:df:f8:d8:e4:e1:4e:68:5e:bc:22:df:e6:71:a2:f2: dc:dd:ee:92:3e:9e:01:bc:fd:5b:f3:da:73:6d:02:3b:c4:90: e0:e5:61:95:91:f0:ac:54:89:cc:5e:d0:54:25:cc:1e:28:0d: c1:4e:dd:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwMjI4MjMxMTAzWhcNMjYwMzA3MjMxMTAzWjAYMRYwFAYD VQQDDA02OWEzNzYwNy02NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlx/RzOzhjxVv5rDcPKrxPMeRqFQmZbyWZkqBbjSGZ9fQNfJcFoV7iETyKduV t6ma+LhJNuZctffC9dY7nZSAYtUJ6Ou8IdcR6sKxm6RAB20mLfb8hQCAcRZdYTUs GQoGwi8EJWWyavCZz39XD0Eh3xiqay0iLQpwxjZGUh76GFKLp03iMH6B6GVPPDWk fJ0tphG6fqSIiio+qTbnAPaDG5B6pdMPTxRwLng0K5tuA/VYKf+mhYW6mkKQcEFW slTzR9mIqHxZoEVvf29EPfohLANG2bdcsPaGcL/izIiKJ2JSFYx6yX5imKRh1moD fdXwVcBpGO37iL7jCkz8gKX4gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVXo1J4 aUs1fMrpkiespsLfKmjTMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApTqonAuD9lsNLdEdmQJXqpkLltvHZ60aHW4vEpiOSxJIxDwbgH4p9H73PkuK uK2ekknV5efEYPn5xiLYYiuEqZV7TK98LHPSltCzBDC6jNwk81DP9dHcJCO0OUYI Hs4UeAdC2JTtTWiVbs4ME7E6steuq/BYeIwDRILHPFB0YvccD3cHpdWU8VFp13PD bPbRqCsKrvVw5/68V1Rgx/jBLCn61i/DbEq1MuRD2ayRYs51FzfINu9YdIRLhp42 r54jdM5baohirYPB3/jY5OFOaF68It/mcaLy3N3ukj6eAbz9W/Pac20CO8SQ4OVh lZHwrFSJzF7QVCXMHigNwU7dXw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:55 2026 by rpki-client