$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: uU8kOcVjzfExv6xn8uZ0i3KnO9rzLi5k1g5GMwbIr7I= Subject key identifier: BF:DC:9D:43:3E:84:29:F0:3C:EF:D3:27:EF:99:5E:B1:9E:F9:F0:94 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2EA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E94 Signing time: Tue 24 Mar 2026 15:26:08 +0000 Manifest this update: Tue 24 Mar 2026 15:26:08 +0000 Manifest next update: Tue 31 Mar 2026 15:26:08 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: bntcBMwOZktLVSqfKDqbU2NqNt6qy1SL0Ecae+hweho=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11943 (0x2ea7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Mar 24 15:26:08 2026 GMT Not After : Mar 31 15:26:08 2026 GMT Subject: CN=69c2ad10-ed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:ba:56:ec:57:fe:5e:3a:0f:b3:2a:ab:d1: c2:59:8d:1b:d0:ea:44:52:78:76:0e:a1:14:f5:5e: f2:0b:c9:37:6d:65:f0:e2:4f:c2:f2:94:51:d0:d0: 7c:cf:36:01:aa:3d:ee:53:83:f1:84:86:4d:c3:c3: 37:b4:63:62:d7:2f:85:ad:3f:70:ce:47:17:4d:2b: 04:8a:37:db:da:40:de:83:82:14:44:e8:92:ca:80: b3:4b:07:d9:aa:62:df:84:a0:9c:fd:03:4c:8b:d5: 0d:0b:25:ba:05:82:57:a8:27:4b:9b:c6:68:2d:a2: 1c:49:bc:40:93:b4:6c:03:7e:6c:6e:f9:9c:43:fe: 6b:0e:01:bd:f7:32:18:2e:e6:b3:37:10:0f:b1:45: ab:6e:5d:98:27:75:bb:79:c7:4a:9b:2b:a0:1b:07: 47:72:c5:22:3a:2c:6d:10:30:a2:87:6d:45:40:08: f6:81:da:1d:be:b6:6a:a8:71:04:e0:16:15:15:79: a3:08:d4:c6:6a:ec:95:17:96:1b:15:4d:dc:69:ec: f1:92:7f:8b:1a:02:f8:18:f3:1b:85:5a:92:0f:78: 1f:18:60:80:0c:05:20:56:cf:ff:90:61:d6:ef:30: f3:4f:c0:a7:15:b0:b0:2b:8a:c0:0f:bb:94:b7:88: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:9D:43:3E:84:29:F0:3C:EF:D3:27:EF:99:5E:B1:9E:F9:F0:94 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5f:6d:48:58:e8:d6:cc:e4:8c:fd:1a:60:5a:9e:b6:84:b2: 25:8f:14:6e:6c:27:a7:ce:25:0b:47:a5:0f:72:24:48:e2:fa: f8:c7:a7:f4:00:82:03:58:2f:56:4d:c8:5a:54:92:b6:9e:f9: fd:ff:90:d3:be:ec:a7:15:c9:14:ea:62:49:2c:6e:81:72:c8: 1e:82:33:44:f8:49:cf:6b:d7:dc:d7:52:3a:65:a7:ab:f3:55: ba:c6:47:85:d7:de:74:fc:8d:3d:50:67:18:71:4d:ae:5d:a4: 99:da:30:36:38:be:76:4c:c6:40:fc:ef:66:63:82:77:4a:14: 1a:ae:d7:b4:0f:b0:be:91:f8:3f:f8:aa:b8:90:67:fb:ba:48: 71:b0:c3:85:a5:c5:49:1b:ba:69:86:1d:8e:59:aa:f6:f3:21: a7:dd:95:df:82:d6:3c:a1:8e:dd:86:2a:6d:d8:bc:2d:e9:1a: 28:9c:6c:a5:68:a8:d6:82:ab:70:85:47:9c:ae:e3:2c:46:ab: 62:16:f9:f4:e5:6d:70:1b:41:3a:70:85:26:11:b1:45:0c:73: e0:db:89:9a:e8:45:d5:32:bb:de:50:cb:7a:9a:e0:7e:d4:31: 6b:ce:8c:61:be:6f:87:95:01:0c:4f:9d:2e:99:33:4f:43:1d: c1:c9:37:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwMzI0MTUyNjA4WhcNMjYwMzMxMTUyNjA4WjAYMRYwFAYD VQQDEw02OWMyYWQxMC1lZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JK6VuxX/l46D7Mqq9HCWY0b0OpEUnh2DqEU9V7yC8k3bWXw4k/C8pRR0NB8 zzYBqj3uU4PxhIZNw8M3tGNi1y+FrT9wzkcXTSsEijfb2kDeg4IUROiSyoCzSwfZ qmLfhKCc/QNMi9UNCyW6BYJXqCdLm8ZoLaIcSbxAk7RsA35sbvmcQ/5rDgG99zIY LuazNxAPsUWrbl2YJ3W7ecdKmyugGwdHcsUiOixtEDCih21FQAj2gdodvrZqqHEE 4BYVFXmjCNTGauyVF5YbFU3caezxkn+LGgL4GPMbhVqSD3gfGGCADAUgVs//kGHW 7zDzT8CnFbCwK4rAD7uUt4hguwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/cnUM+ hCnwPO/TJ++ZXrGe+fCUMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQF9tSFjo1szkjP0aYFqetoSyJY8Ubmwnp84lC0elD3IkSOL6+Men9ACCA1gv Vk3IWlSStp75/f+Q077spxXJFOpiSSxugXLIHoIzRPhJz2vX3NdSOmWnq/NVusZH hdfedPyNPVBnGHFNrl2kmdowNji+dkzGQPzvZmOCd0oUGq7XtA+wvpH4P/iquJBn +7pIcbDDhaXFSRu6aYYdjlmq9vMhp92V34LWPKGO3YYqbdi8LekaKJxspWio1oKr cIVHnK7jLEarYhb59OVtcBtBOnCFJhGxRQxz4NuJmuhF1TK73lDLeprgftQxa86M Yb5vh5UBDE+dLpkzT0Mdwck3AA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:34 2026 by rpki-client