$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json) Hash identifier: lq1AJNP59tWkVSYmPnEAKijjakv3fhuCTb9a+udJN1g= Subject key identifier: FC:21:4F:9A:1C:71:99:AF:60:0E:F6:89:4C:83:54:39:E2:BD:64:01 Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft Manifest number: 0B62 Signing time: Tue 24 Mar 2026 19:01:35 +0000 Manifest this update: Tue 24 Mar 2026 19:01:35 +0000 Manifest next update: Tue 31 Mar 2026 19:01:35 +0000 Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: 3zCRafHqW9KpXjjvG4DfiwMh5aNf9EwJaHYiUSop93E=) 2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Validity Not Before: Mar 24 19:01:35 2026 GMT Not After : Mar 31 19:01:35 2026 GMT Subject: CN=69c2df8f-5aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:01:2d:bc:79:c1:ae:8f:b2:cd:67:ac:59: 7a:e0:b0:43:2a:73:06:34:d9:98:aa:17:15:73:27: 35:d8:df:e4:d1:b7:ca:05:22:47:8c:f4:97:73:47: 69:b4:48:66:d4:f5:28:ec:7c:e3:cd:d4:bc:ab:c9: 02:8c:76:99:6f:b1:b4:25:90:ac:83:3b:7d:0c:ce: 5a:ce:a6:bb:d8:20:cc:6c:fd:92:73:7c:e2:08:f6: 72:94:6c:2d:a0:e0:c3:b7:96:38:bd:c0:96:6a:eb: fe:58:a8:18:10:4d:13:7d:9e:89:b7:2a:5d:b1:6e: cf:25:f7:04:a6:6b:68:2e:00:39:39:0c:e2:40:82: 96:ff:a0:06:5e:60:bd:2b:fd:5f:dd:63:55:4d:7b: c5:07:bf:63:94:1e:2c:d5:18:80:56:dd:9c:c0:e9: 8d:7a:ca:b7:86:f9:78:75:b0:fa:d6:61:0b:bf:49: f9:1e:d9:ff:b9:2f:28:e2:03:08:ed:75:e7:6d:c3: 8e:05:c2:33:8b:6e:bd:ce:dc:dd:5c:a3:67:49:5b: 65:a7:ba:af:c1:a1:24:18:6c:98:44:39:5c:d8:fa: 48:0d:65:ea:09:33:c9:d0:83:4c:a6:33:83:f8:7d: fd:20:35:a6:e7:c8:4c:62:a6:b3:ba:39:66:f3:e9: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:21:4F:9A:1C:71:99:AF:60:0E:F6:89:4C:83:54:39:E2:BD:64:01 X509v3 Authority Key Identifier: keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:2b:aa:71:08:42:9c:16:08:57:50:d9:10:a1:a9:56:7c:62: 93:ac:fe:ed:ab:d2:9c:f8:86:ee:c0:0e:2c:fb:66:bd:2f:ee: c5:3e:3e:c6:ce:d9:9a:d8:00:f4:15:ab:bc:1e:af:e6:4f:94: 64:24:a4:46:50:a5:6f:6b:5c:af:42:99:ae:14:a7:63:18:3c: 8b:ab:a9:ba:88:ca:cf:6f:b8:b5:8d:bf:d8:b7:b7:a7:09:90: 54:2d:30:73:af:d8:c1:55:02:22:ff:6f:fa:24:34:45:5d:64: 17:69:67:ac:25:61:fa:0b:ea:a1:ec:f8:17:e2:81:7c:18:50: 3e:fe:ff:a6:93:ec:90:73:55:0e:4c:39:44:01:ad:55:b4:3c: 70:6f:3c:4f:86:0b:97:dd:d3:f1:cd:5a:ea:4c:0c:0e:cf:b6: e2:39:fb:0b:cb:f6:7a:90:e0:68:08:47:1a:81:18:a0:e7:28: 24:ed:d0:b5:1a:e9:c0:02:84:40:a1:11:fa:af:4e:02:53:88: 26:08:3b:38:40:dc:b2:a5:c6:a6:75:e5:22:e8:66:88:f4:66: 7a:aa:c7:2b:77:48:b5:84:80:72:8d:df:76:5a:dc:75:1e:48: 79:90:ed:5c:34:c7:2c:f3:99:91:28:1a:d6:13:bc:5e:84:6e: 5e:17:b7:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE Q0E5ODQwOEUwHhcNMjYwMzI0MTkwMTM1WhcNMjYwMzMxMTkwMTM1WjAYMRYwFAYD VQQDEw02OWMyZGY4Zi01YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37wBLbx5wa6Pss1nrFl64LBDKnMGNNmYqhcVcyc12N/k0bfKBSJHjPSXc0dp tEhm1PUo7HzjzdS8q8kCjHaZb7G0JZCsgzt9DM5azqa72CDMbP2Sc3ziCPZylGwt oODDt5Y4vcCWauv+WKgYEE0TfZ6JtypdsW7PJfcEpmtoLgA5OQziQIKW/6AGXmC9 K/1f3WNVTXvFB79jlB4s1RiAVt2cwOmNesq3hvl4dbD61mELv0n5Htn/uS8o4gMI 7XXnbcOOBcIzi269ztzdXKNnSVtlp7qvwaEkGGyYRDlc2PpIDWXqCTPJ0INMpjOD +H39IDWm58hMYqazujlm8+mwoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwhT5oc cZmvYA72iUyDVDnivWQBMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG djFGSWhoVkctal9jcVlRSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACSuqcQhCnBYIV1DZEKGpVnxik6z+7avSnPiG7sAOLPtmvS/uxT4+xs7ZmtgA 9BWrvB6v5k+UZCSkRlClb2tcr0KZrhSnYxg8i6upuojKz2+4tY2/2Le3pwmQVC0w c6/YwVUCIv9v+iQ0RV1kF2lnrCVh+gvqoez4F+KBfBhQPv7/ppPskHNVDkw5RAGt VbQ8cG88T4YLl93T8c1a6kwMDs+24jn7C8v2epDgaAhHGoEYoOcoJO3QtRrpwAKE QKER+q9OAlOIJgg7OEDcsqXGpnXlIuhmiPRmeqrHK3dItYSAco3fdlrcdR5IeZDt XDTHLPOZkSga1hO8XoRuXhe34A== -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:28 2026 by rpki-client