$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: axdCwNOHK6mHh+y+pPsJiCg93yEUNWVy6OPLFo+elrc= Subject key identifier: DC:8C:B5:45:5F:7E:37:27:6F:72:DD:2C:7B:9C:B5:8A:FD:A8:46:5E Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0B03 Signing time: Tue 24 Mar 2026 19:10:51 +0000 Manifest this update: Tue 24 Mar 2026 19:10:50 +0000 Manifest next update: Tue 31 Mar 2026 19:10:50 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: oSPIdGdvLyhuT3flF7Mv0PqmbQH7QVtpWn/m7PH5AtI=) 2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: Q7p+Vr+s6fqUfDypnxwb8pNNEvIPoH0DeJoVihgWG1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Mar 24 19:10:50 2026 GMT Not After : Mar 31 19:10:50 2026 GMT Subject: CN=69c2e1bb-93ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:03:5e:45:fd:52:c1:4d:00:4a:e9:51:f8: 01:2a:70:36:e3:92:d2:47:0d:1e:f6:ae:65:d4:e2: 06:a0:0d:ab:56:b3:8a:eb:7f:a3:45:28:a4:1b:8e: 32:a7:cf:a5:b6:7b:cc:f4:1e:19:d8:35:2f:19:40: d9:94:c0:27:4c:18:54:e6:94:b1:b7:cb:ab:d1:49: a4:57:9b:e1:62:de:20:85:db:7b:6c:ac:7d:8f:0b: e9:23:d2:d1:ee:70:ce:cf:9f:7a:13:6d:0a:ad:01: 4b:ec:dd:23:3b:c4:4d:b9:ce:a8:3e:4a:76:d0:ac: 71:7d:3a:33:0a:5c:89:66:cf:ff:09:4a:88:67:1c: 0b:4c:bd:c6:1a:72:84:56:08:ae:17:d6:58:91:2e: d6:3e:8a:d7:35:42:3a:84:75:18:52:92:9d:98:44: 80:07:a5:d8:dd:19:c7:42:3b:ba:9f:4c:31:e4:eb: 7b:f7:68:89:fd:59:3d:a9:64:dc:ea:41:f3:47:6c: 34:43:a6:72:89:78:51:c7:91:06:a1:3d:d9:cb:db: 80:83:49:bb:b8:a2:08:6d:d5:a7:46:e0:10:ee:f3: 28:da:06:6f:e7:79:16:1d:db:b9:67:e9:92:bf:13: 79:c6:70:3b:e7:96:e4:cb:29:98:d1:17:c5:6c:eb: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8C:B5:45:5F:7E:37:27:6F:72:DD:2C:7B:9C:B5:8A:FD:A8:46:5E X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:a5:bb:a9:0b:f7:a3:50:5b:c7:1f:ea:c7:bd:8a:ed:97: 29:c5:57:a5:b4:01:d8:0c:ef:1a:67:fc:e1:b2:32:68:14:e3: c1:35:e8:ed:c0:e0:57:4a:9b:04:f2:5b:15:9e:27:c4:09:f0: 4a:65:33:85:33:61:19:b0:4c:19:75:91:30:19:48:63:dc:25: df:7b:08:9d:4c:9d:ed:23:b8:35:00:48:c4:13:be:24:43:cf: 53:a2:15:b6:7a:c7:17:ad:34:e8:65:31:cd:07:04:e5:01:b3: 03:12:6c:c1:6c:dd:b5:91:a6:f7:65:89:98:1f:4f:fa:b5:16: 85:c3:b0:0f:f8:51:33:56:25:5f:47:69:a9:8d:22:6e:f0:4f: ef:b9:de:43:98:59:b0:db:3f:c7:81:0d:61:6c:75:53:6d:49: 2d:f2:8a:cb:a4:c2:a0:56:1b:90:fd:92:58:65:90:41:93:08: 48:43:82:73:45:bc:e2:f9:d2:36:a1:d5:1e:6d:a3:5c:91:d2: 3f:dc:b9:e3:0d:aa:98:32:c6:73:f6:cc:b0:8e:74:db:31:f7: bd:69:05:5f:9e:c5:1b:67:ff:bc:9c:05:b2:f0:e6:9c:71:1f: ca:26:0c:4b:dc:fe:a8:20:ad:22:57:cd:d9:6b:84:0c:a0:b6: 73:61:2c:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjYwMzI0MTkxMDUwWhcNMjYwMzMxMTkxMDUwWjAYMRYwFAYD VQQDEw02OWMyZTFiYi05M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tIDXkX9UsFNAErpUfgBKnA245LSRw0e9q5l1OIGoA2rVrOK63+jRSikG44y p8+ltnvM9B4Z2DUvGUDZlMAnTBhU5pSxt8ur0UmkV5vhYt4ghdt7bKx9jwvpI9LR 7nDOz596E20KrQFL7N0jO8RNuc6oPkp20KxxfTozClyJZs//CUqIZxwLTL3GGnKE VgiuF9ZYkS7WPorXNUI6hHUYUpKdmESAB6XY3RnHQju6n0wx5Ot792iJ/Vk9qWTc 6kHzR2w0Q6ZyiXhRx5EGoT3Zy9uAg0m7uKIIbdWnRuAQ7vMo2gZv53kWHdu5Z+mS vxN5xnA755bkyymY0RfFbOsUuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyMtUVf fjcnb3LdLHuctYr9qEZeMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiomlu6kL96NQW8cf6se9iu2XKcVXpbQB2AzvGmf84bIyaBTjwTXo7cDgV0qb BPJbFZ4nxAnwSmUzhTNhGbBMGXWRMBlIY9wl33sInUyd7SO4NQBIxBO+JEPPU6IV tnrHF6006GUxzQcE5QGzAxJswWzdtZGm92WJmB9P+rUWhcOwD/hRM1YlX0dpqY0i bvBP77neQ5hZsNs/x4ENYWx1U21JLfKKy6TCoFYbkP2SWGWQQZMISEOCc0W84vnS NqHVHm2jXJHSP9y54w2qmDLGc/bMsI502zH3vWkFX57FG2f/vJwFsvDmnHEfyiYM S9z+qCCtIlfN2WuEDKC2c2EsRA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:44 2026 by rpki-client