$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: Bn4FGxQrdNCiGw0rcVWg19sn0ZzQi9d3QTknQUSZ32Y= Subject key identifier: E1:5F:87:B2:67:A3:55:80:46:83:8D:94:51:39:57:E1:C9:AC:4B:C6 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 0662 Signing time: Mon 02 Mar 2026 01:02:37 +0000 Manifest this update: Mon 02 Mar 2026 01:02:35 +0000 Manifest next update: Mon 09 Mar 2026 01:02:35 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: nYjKGVH9rFOpv0hoDy/bmHyQAOFgKmu4G5TZXuWQHh4=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: JO+d8NuOTb9wYoBccp8IkfsPm9nmyiRrw+YxiZ67s3Y=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: nImfMtz/srQcA0oWiVYBvuf5vgsja36HsnQeDt2zjak=) 4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: K+tI9J+L2JwBlkQcfmAhcA1QV02+CIn/FiHi1yjAo54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Mar 2 01:02:35 2026 GMT Not After : Mar 9 01:02:35 2026 GMT Subject: CN=69a4e1ac-4e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:2e:a1:11:78:a5:10:59:9a:e8:ee:04:05: 05:58:13:b8:cc:35:9c:ee:fa:4f:f0:e5:35:74:77: ff:44:a6:09:af:72:44:36:29:ce:8f:27:1d:6a:1f: 9c:80:f9:87:78:bc:c5:c9:df:61:b1:72:0a:08:ee: 94:91:d0:0d:7a:a3:95:cd:36:ec:bf:76:dd:e3:e0: 61:10:e9:e3:88:a3:ef:cc:d9:cf:be:71:84:cb:3b: d7:5e:a4:65:e0:50:5e:7d:86:1c:77:4a:37:18:41: bc:59:47:0b:16:db:8a:d4:65:0e:7d:a4:c9:7d:77: fd:8f:b2:e8:b9:f1:04:1a:42:7d:46:71:11:fe:86: bf:56:4d:74:4b:0a:7a:34:1a:17:57:12:95:05:41: e5:c9:c1:88:15:66:45:6b:b3:68:9d:da:dd:eb:11: ed:f3:b2:64:01:68:b2:0d:ce:68:55:4c:e1:9c:80: d6:56:83:97:fc:77:67:1f:ca:9b:8e:a9:1e:c0:3a: a5:b2:73:61:52:81:2e:b8:57:e0:66:40:0c:09:e5: 62:eb:ef:61:7f:8b:4c:1d:9d:14:5d:4a:fb:09:b1: e5:3a:bb:c7:df:8e:b3:81:86:d3:a5:32:99:7c:81: 80:7e:2f:39:dc:76:14:0b:01:b2:9f:37:f5:6b:21: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5F:87:B2:67:A3:55:80:46:83:8D:94:51:39:57:E1:C9:AC:4B:C6 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bb:35:1e:f6:50:87:15:5e:49:23:02:d5:c5:09:f8:28:9b: d9:3b:7a:ad:1c:d6:b0:f7:ca:ec:6d:b0:27:3a:90:dc:8a:55: 53:86:46:56:6f:8d:32:1c:1c:dc:33:8d:6b:12:f8:7c:5c:2f: a2:a2:ab:bf:50:15:a8:00:75:21:14:1a:5f:a5:35:da:4f:05: 00:2e:04:88:eb:91:29:fa:60:3c:27:71:5f:65:97:a1:60:61: fa:4f:7f:31:76:13:38:42:35:31:49:b7:90:74:d6:81:94:a2: c9:8e:6b:c9:b5:af:69:db:d8:2b:8e:c8:a7:d3:bd:d7:2d:2a: 67:a6:dd:cf:0d:6c:34:7f:d5:9f:08:d1:25:22:4c:b5:2b:44: 6e:ea:39:73:97:f0:6a:f6:9b:51:e5:fc:1b:f2:c4:76:d2:b0: 0e:6e:c3:37:7b:c5:76:45:cd:ab:37:3f:75:da:22:74:c8:87: f5:8f:1c:ea:f3:50:92:5b:a4:5c:85:89:e0:e6:60:1d:a3:65: 44:fb:0e:a7:24:38:3b:e3:96:98:d5:52:e8:57:3b:82:f5:51: f8:e9:52:88:40:fa:b1:74:43:50:9c:26:f9:f2:69:2e:c7:37: 83:d0:14:3d:2a:82:ad:93:d7:84:4b:b0:49:21:3f:09:41:07: b8:a5:70:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwMzAyMDEwMjM1WhcNMjYwMzA5MDEwMjM1WjAYMRYwFAYD VQQDEw02OWE0ZTFhYy00ZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl38uoRF4pRBZmujuBAUFWBO4zDWc7vpP8OU1dHf/RKYJr3JENinOjycdah+c gPmHeLzFyd9hsXIKCO6UkdANeqOVzTbsv3bd4+BhEOnjiKPvzNnPvnGEyzvXXqRl 4FBefYYcd0o3GEG8WUcLFtuK1GUOfaTJfXf9j7LoufEEGkJ9RnER/oa/Vk10Swp6 NBoXVxKVBUHlycGIFWZFa7Nondrd6xHt87JkAWiyDc5oVUzhnIDWVoOX/HdnH8qb jqkewDqlsnNhUoEuuFfgZkAMCeVi6+9hf4tMHZ0UXUr7CbHlOrvH346zgYbTpTKZ fIGAfi853HYUCwGynzf1ayEyiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFfh7Jn o1WARoONlFE5V+HJrEvGMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJbs1HvZQhxVeSSMC1cUJ+Cib2Tt6rRzWsPfK7G2wJzqQ3IpVU4ZGVm+NMhwc 3DONaxL4fFwvoqKrv1AVqAB1IRQaX6U12k8FAC4EiOuRKfpgPCdxX2WXoWBh+k9/ MXYTOEI1MUm3kHTWgZSiyY5rybWvadvYK47Ip9O91y0qZ6bdzw1sNH/VnwjRJSJM tStEbuo5c5fwavabUeX8G/LEdtKwDm7DN3vFdkXNqzc/ddoidMiH9Y8c6vNQkluk XIWJ4OZgHaNlRPsOpyQ4O+OWmNVS6Fc7gvVR+OlSiED6sXRDUJwm+fJpLsc3g9AU PSqCrZPXhEuwSSE/CUEHuKVw+w== -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:14 2026 by rpki-client