$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: SdjhbUS47dE6BeeWNnlWA6DCONrEppq2K7mGjqppDr8= Subject key identifier: 3F:3C:D7:9E:BB:D7:10:25:7A:AD:0E:A5:78:42:B3:26:77:FA:49:8D Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 0725 Signing time: Tue 24 Mar 2026 21:32:43 +0000 Manifest this update: Tue 24 Mar 2026 21:32:42 +0000 Manifest next update: Tue 31 Mar 2026 21:32:42 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: JW5Uf4v+SKxMFvSyYYsBWo9b29vYMQrORLcJ4rfsY94=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: 1Chxn96nNA7oNUELmf6ynN2eqdlPAPSq53GJ8LyaxFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Mar 24 21:32:42 2026 GMT Not After : Mar 31 21:32:42 2026 GMT Subject: CN=69c302fb-7139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:8d:f4:e0:36:19:14:8f:b4:56:c2:6b:f8: 21:aa:e5:0f:99:3b:c2:6f:46:9d:1a:2b:34:ca:9f: 51:9c:60:f8:7b:c3:1b:6c:28:28:14:86:e6:aa:28: 84:fe:14:a4:78:e6:41:f9:cb:76:d6:a5:06:fd:72: 8c:0d:b1:11:3e:31:6b:5d:bd:2a:a3:25:f6:17:f4: 49:3b:c0:6b:3b:93:89:cd:e7:9e:bd:f3:1b:85:55: 31:25:58:e2:f8:3a:3c:fa:b4:0d:9a:25:9c:72:06: 3b:e9:84:13:64:f6:2d:ce:a8:0e:2b:6c:98:71:b0: 56:1c:a3:5c:72:d7:87:81:9d:49:50:a7:de:b7:56: 76:06:80:6a:da:b5:11:b7:cf:c6:53:b5:11:5c:05: 73:30:a5:4d:0c:37:c8:11:2e:3a:87:fe:75:6c:8d: 59:c0:42:16:13:09:3b:4c:3b:97:d2:96:19:a9:1d: 72:f8:c7:7b:84:01:8d:1a:e5:96:fe:14:09:0b:d9: 2d:e0:b6:df:65:79:5e:6c:a3:5c:e5:4a:60:64:d0: 8e:f3:c1:f5:da:31:45:01:4b:0c:20:6b:6b:f9:86: 58:f5:b7:52:bb:05:9f:d7:cb:c6:ba:db:1b:49:69: ab:51:d8:5d:10:a2:31:ab:c9:6c:27:c9:c2:bb:2a: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:D7:9E:BB:D7:10:25:7A:AD:0E:A5:78:42:B3:26:77:FA:49:8D X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3a:65:f6:ed:fb:2e:8c:f3:9c:31:bf:08:e0:d3:56:12:eb: 92:88:08:59:1f:5f:77:33:1e:4c:19:09:80:6d:86:1d:0b:92: 6c:35:77:9f:78:0e:6d:4c:1b:81:13:ca:bb:7e:d6:1f:3a:59: e4:4a:c6:22:90:41:92:63:9d:1d:21:94:6e:37:41:96:bd:64: b6:8c:ab:d0:08:e1:69:00:4c:e7:e8:51:ab:af:de:90:cc:ef: e6:14:fa:ca:3d:f3:77:02:5f:23:7a:57:4e:91:c8:ad:10:ea: ea:2b:e4:29:22:f0:43:f1:9b:af:2a:59:6e:ba:76:0b:16:17: 6d:d5:15:1e:ac:00:7b:11:ff:aa:65:68:d3:f1:5f:26:9c:74: 60:9c:47:28:a1:30:b7:6d:1f:66:28:66:e8:1c:f5:07:a3:b4: a6:75:72:f4:33:e7:1c:57:46:30:22:1c:fc:b9:33:00:1d:2f: 3b:a9:51:d1:2d:dd:b3:4b:f8:f4:59:0e:ac:8b:b6:4c:18:bf: 3a:a2:ff:42:c6:66:f2:28:1a:a9:2b:6a:93:52:65:1d:62:9e: 85:b1:18:df:41:d6:29:3e:4c:1d:d0:50:1a:bc:d9:cc:d2:54: 58:c1:ac:37:b6:01:8c:0f:40:b4:c9:a0:b9:ae:1e:93:a8:d1: 52:a3:40:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjYwMzI0MjEzMjQyWhcNMjYwMzMxMjEzMjQyWjAYMRYwFAYD VQQDEw02OWMzMDJmYi03MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIeN9OA2GRSPtFbCa/ghquUPmTvCb0adGis0yp9RnGD4e8MbbCgoFIbmqiiE /hSkeOZB+ct21qUG/XKMDbERPjFrXb0qoyX2F/RJO8BrO5OJzeeevfMbhVUxJVji +Do8+rQNmiWccgY76YQTZPYtzqgOK2yYcbBWHKNccteHgZ1JUKfet1Z2BoBq2rUR t8/GU7URXAVzMKVNDDfIES46h/51bI1ZwEIWEwk7TDuX0pYZqR1y+Md7hAGNGuWW /hQJC9kt4LbfZXlebKNc5UpgZNCO88H12jFFAUsMIGtr+YZY9bdSuwWf18vGutsb SWmrUdhdEKIxq8lsJ8nCuyrN1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD881567 1xAleq0OpXhCsyZ3+kmNMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGzpl9u37LozznDG/CODTVhLrkogIWR9fdzMeTBkJgG2GHQuSbDV3n3gObUwb gRPKu37WHzpZ5ErGIpBBkmOdHSGUbjdBlr1ktoyr0AjhaQBM5+hRq6/ekMzv5hT6 yj3zdwJfI3pXTpHIrRDq6ivkKSLwQ/GbrypZbrp2CxYXbdUVHqwAexH/qmVo0/Ff Jpx0YJxHKKEwt20fZihm6Bz1B6O0pnVy9DPnHFdGMCIc/LkzAB0vO6lR0S3ds0v4 9FkOrIu2TBi/OqL/QsZm8igaqStqk1JlHWKehbEY30HWKT5MHdBQGrzZzNJUWMGs N7YBjA9AtMmgua4ek6jRUqNAhg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:43 2026 by rpki-client