$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: FYffzpWtsUs54kw4d/X2eMT3MVFJ7ZEKvfRCu0Uj2+U= Subject key identifier: 8A:23:4B:44:49:AF:A4:9B:70:D5:86:E5:86:BC:54:16:3E:80:B0:C7 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 359E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 3563 Signing time: Tue 24 Mar 2026 14:45:20 +0000 Manifest this update: Tue 24 Mar 2026 14:45:19 +0000 Manifest next update: Tue 31 Mar 2026 14:45:19 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 7EuGfQV5Gx5kAgNWSz4wX0vsSD/6QiaZk8r+gDPqC2I=) 2: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=) 3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13726 (0x359e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Mar 24 14:45:19 2026 GMT Not After : Mar 31 14:45:19 2026 GMT Subject: CN=69c2a380-6e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:37:db:41:c5:bf:5e:9b:bd:04:27:7a:34:f0: 56:47:ae:dd:b6:a1:aa:2c:fb:41:05:1c:d8:6b:c5: dc:99:08:c3:90:19:32:d7:78:04:d1:0f:56:ed:a0: 12:12:65:b3:0e:3d:d1:95:e6:59:d4:d5:9d:b7:b7: ea:67:59:38:0b:7b:4e:cf:60:7f:63:17:4c:6f:e7: e1:53:21:34:69:bf:73:6c:02:7e:14:7b:06:b7:e0: d9:5c:19:b9:cc:2b:9d:ee:73:cb:22:4a:56:3b:d5: 06:d2:5a:00:df:9a:69:f1:79:96:fe:cc:2a:d8:05: bf:b6:66:4c:54:8e:e9:6a:e9:1d:57:58:05:9a:16: dd:43:1f:a3:ef:18:68:08:9a:c8:39:5f:b8:c1:6d: 8b:f0:7c:e5:a8:f9:85:93:bb:d6:7b:28:38:27:b0: 02:77:7a:6c:71:0c:24:47:e8:d2:d0:02:50:22:1a: ec:48:cf:31:e1:ae:cf:b9:0c:97:e1:44:fd:8d:3e: e6:e4:8a:31:b4:1b:09:fe:9b:e1:34:ee:53:a1:8e: 38:7e:cb:fe:e2:34:d4:46:6e:1d:02:09:99:fb:17: de:e2:29:94:d0:96:4d:9c:38:c5:e9:5d:0a:03:aa: e5:5f:14:8b:6b:6b:0c:36:07:1b:7e:08:04:e1:6c: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:4B:44:49:AF:A4:9B:70:D5:86:E5:86:BC:54:16:3E:80:B0:C7 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d6:0f:94:aa:43:b6:a8:3c:95:6c:14:02:c8:9c:a3:7f:28: 61:8a:9b:5e:12:8c:eb:99:af:2f:fa:6a:89:ec:84:55:a4:5f: 59:35:e6:64:8b:93:8e:2f:6f:89:d7:75:d1:a4:19:b7:1b:ca: a9:86:dc:ea:97:7a:a0:89:5d:8d:a4:21:1b:c6:e5:43:4d:9b: a7:2b:06:cf:ea:8b:65:1d:fa:e2:77:bd:1d:2f:02:6e:32:46: 4f:7f:1c:6a:0f:5f:69:6f:03:e7:b2:0e:a9:67:67:91:6b:64: 38:ee:7a:4f:25:15:f1:4e:df:04:5d:12:b6:2b:6a:3c:cd:64: f0:72:57:8f:81:6b:5a:dd:13:1a:94:4d:ab:69:be:06:5f:74: 35:3b:9f:4e:9c:1a:d5:1b:a5:5e:17:39:75:8c:57:55:07:62: a8:80:82:89:9f:a9:d1:e7:42:83:01:e8:3c:d6:e7:ad:8e:40: c4:5c:4e:62:79:b3:e8:f3:5c:2c:80:41:02:70:49:ec:91:a3: 39:b9:6d:1e:99:d2:4d:e1:43:aa:27:4e:b0:13:47:50:b8:34: 46:1c:4f:4f:d6:98:22:a5:cd:8d:10:ee:b0:49:6b:04:b1:d0: b6:22:2e:bf:a5:39:7e:51:73:12:77:f9:b7:31:33:63:df:88: 28:fd:76:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYwMzI0MTQ0NTE5WhcNMjYwMzMxMTQ0NTE5WjAYMRYwFAYD VQQDEw02OWMyYTM4MC02ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jfbQcW/Xpu9BCd6NPBWR67dtqGqLPtBBRzYa8XcmQjDkBky13gE0Q9W7aAS EmWzDj3RleZZ1NWdt7fqZ1k4C3tOz2B/YxdMb+fhUyE0ab9zbAJ+FHsGt+DZXBm5 zCud7nPLIkpWO9UG0loA35pp8XmW/swq2AW/tmZMVI7paukdV1gFmhbdQx+j7xho CJrIOV+4wW2L8HzlqPmFk7vWeyg4J7ACd3pscQwkR+jS0AJQIhrsSM8x4a7PuQyX 4UT9jT7m5IoxtBsJ/pvhNO5ToY44fsv+4jTURm4dAgmZ+xfe4imU0JZNnDjF6V0K A6rlXxSLa2sMNgcbfggE4WxoIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIojS0RJ r6SbcNWG5Ya8VBY+gLDHMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtYPlKpDtqg8lWwUAsico38oYYqbXhKM65mvL/pqieyEVaRfWTXmZIuTji9v idd10aQZtxvKqYbc6pd6oIldjaQhG8blQ02bpysGz+qLZR364ne9HS8CbjJGT38c ag9faW8D57IOqWdnkWtkOO56TyUV8U7fBF0StitqPM1k8HJXj4FrWt0TGpRNq2m+ Bl90NTufTpwa1RulXhc5dYxXVQdiqICCiZ+p0edCgwHoPNbnrY5AxFxOYnmz6PNc LIBBAnBJ7JGjObltHpnSTeFDqidOsBNHULg0RhxPT9aYIqXNjRDusElrBLHQtiIu v6U5flFzEnf5tzEzY9+IKP12ww== -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:04 2026 by rpki-client