$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: a5lW/iaOzh6O9xFwwAJOzEFY9t8eHITNHT372XZrjPQ= Subject key identifier: FC:DC:21:DB:93:AD:02:FF:E0:11:4B:0C:E2:84:D3:1C:EF:B6:B5:40 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 066F Signing time: Tue 24 Mar 2026 22:19:06 +0000 Manifest this update: Tue 24 Mar 2026 22:19:06 +0000 Manifest next update: Tue 31 Mar 2026 22:19:06 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: 83pAbRvl9SDIoAm0u3kP6tgClgiAKDmeuGwTF86zDMQ=) 2: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=) 3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=) 4: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Mar 24 22:19:06 2026 GMT Not After : Mar 31 22:19:06 2026 GMT Subject: CN=69c30dda-ea8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c8:bc:d1:32:e9:08:71:9a:5e:76:af:d0:c9: 0d:0d:d0:56:42:11:55:e7:f6:48:1b:65:2f:40:70: 22:07:c5:2d:27:5a:43:3a:67:9f:fc:cf:08:08:c9: 96:d5:6c:2a:d7:ec:ad:6a:88:2e:19:eb:df:99:c9: e6:e4:e5:2f:97:5f:16:12:dc:7f:00:86:c7:ac:8c: 5d:58:b5:53:92:37:23:2b:70:81:27:9c:47:16:d7: 8b:5c:56:89:99:cf:e7:7b:5c:1c:d9:34:3e:b2:a3: 2b:d4:ce:a8:dd:40:5a:db:fd:94:95:60:04:01:04: 57:21:1c:63:3b:03:c2:fe:c9:8a:28:c8:31:c5:25: ec:9a:c1:de:4f:e6:ba:b5:81:8f:79:64:eb:0f:16: 2f:f1:ca:62:5d:c4:ef:0f:7e:92:88:0e:3c:7e:9f: e3:08:4f:9e:55:d1:01:95:8e:cc:91:63:6f:28:7e: 91:2f:2c:ee:0e:e0:c3:5f:af:46:b3:f8:f2:d4:f6: a8:fe:e7:30:bb:aa:55:38:d1:67:65:19:07:1d:8e: 1e:c2:8f:04:34:0d:76:b0:21:05:6b:00:cd:dd:b8: 3b:a0:a4:0e:37:57:35:fb:f3:79:bd:d3:01:45:73: e1:07:63:9c:09:55:36:49:81:3e:7e:36:e7:2c:bf: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:21:DB:93:AD:02:FF:E0:11:4B:0C:E2:84:D3:1C:EF:B6:B5:40 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a0:21:30:1c:96:69:9b:50:fa:70:fa:8b:36:0f:66:d3:6c: 29:96:62:e1:98:1c:ef:87:80:1a:2c:5f:ba:b4:c6:e2:ce:b5: b5:7e:57:5f:1e:c8:a9:8c:e3:bc:60:5c:2b:1d:b2:fc:98:00: e7:3d:ff:4d:12:0a:c2:99:c8:a0:55:75:e8:6a:c3:aa:a9:bb: e6:7a:f4:d1:f6:b9:8f:ed:ec:16:b8:40:14:ee:de:9b:1e:cd: e5:3a:07:25:77:5e:49:ee:41:69:41:8b:3e:2e:4f:23:56:ad: 28:53:ad:1c:8b:30:85:62:d0:2d:42:fb:79:eb:7c:8f:75:52: ab:8f:fe:74:69:d7:d2:d5:d3:eb:a3:af:4b:33:0e:a4:12:6f: 9d:e8:fd:d4:d7:56:44:86:6b:1f:4e:28:d2:7a:41:83:41:00: 02:9e:e1:53:90:d1:e4:5c:25:f4:d1:61:1f:71:fe:66:37:a6: 34:4d:9c:95:ec:b3:4a:a2:0f:3a:98:02:e8:89:16:9a:e3:66: 1b:77:6a:16:02:e4:b2:00:93:3d:52:6e:2b:44:ec:b9:e8:45: 40:a8:9b:fe:1e:2e:bd:31:f5:c9:e3:31:3f:f0:dd:c2:72:96: 5d:95:58:38:97:a6:f1:69:77:98:71:dd:3e:82:72:d0:36:f9: 82:20:b7:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwMzI0MjIxOTA2WhcNMjYwMzMxMjIxOTA2WjAYMRYwFAYD VQQDEw02OWMzMGRkYS1lYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58i80TLpCHGaXnav0MkNDdBWQhFV5/ZIG2UvQHAiB8UtJ1pDOmef/M8ICMmW 1Wwq1+ytaoguGevfmcnm5OUvl18WEtx/AIbHrIxdWLVTkjcjK3CBJ5xHFteLXFaJ mc/ne1wc2TQ+sqMr1M6o3UBa2/2UlWAEAQRXIRxjOwPC/smKKMgxxSXsmsHeT+a6 tYGPeWTrDxYv8cpiXcTvD36SiA48fp/jCE+eVdEBlY7MkWNvKH6RLyzuDuDDX69G s/jy1Pao/ucwu6pVONFnZRkHHY4ewo8ENA12sCEFawDN3bg7oKQON1c1+/N5vdMB RXPhB2OcCVU2SYE+fjbnLL+rmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzcIduT rQL/4BFLDOKE0xzvtrVAMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6AhMByWaZtQ+nD6izYPZtNsKZZi4Zgc74eAGixfurTG4s61tX5XXx7IqYzj vGBcKx2y/JgA5z3/TRIKwpnIoFV16GrDqqm75nr00fa5j+3sFrhAFO7emx7N5ToH JXdeSe5BaUGLPi5PI1atKFOtHIswhWLQLUL7eet8j3VSq4/+dGnX0tXT66OvSzMO pBJvnej91NdWRIZrH04o0npBg0EAAp7hU5DR5Fwl9NFhH3H+ZjemNE2cleyzSqIP OpgC6IkWmuNmG3dqFgLksgCTPVJuK0TsuehFQKib/h4uvTH1yeMxP/DdwnKWXZVY OJem8Wl3mHHdPoJy0Db5giC3qg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:00:41 2026 by rpki-client