$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: AtOWvY/csh7HFAKTpDZzXrxw1+mHCeBZABcSN9l3tI0= Subject key identifier: 42:8B:D6:7B:51:90:CD:F0:F0:72:32:A2:17:FD:43:8F:F4:8C:A4:90 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2EFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2EEA Signing time: Tue 08 Sep 2026 15:30:34 +0000 Manifest this update: Tue 08 Sep 2026 15:30:33 +0000 Manifest next update: Tue 15 Sep 2026 15:30:33 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: XgbxYeG0b4mFRjIVIuA8MWXw7j2UUBgeLwPIdKOxijM=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 15:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12029 (0x2efd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Sep 8 15:30:33 2026 GMT Not After : Sep 15 15:30:33 2026 GMT Subject: CN=6aa02a1a-d8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:78:cf:5b:8f:65:49:73:c3:1f:2a:46:d2: 45:b9:69:18:1d:4f:61:87:51:63:b0:db:0b:ad:ab: 00:53:f2:3b:95:ff:d4:7e:c2:8a:40:1d:2f:36:3d: 27:31:1c:aa:59:4b:6b:88:2f:46:c0:5e:d9:93:0a: 4c:9c:15:f6:eb:9b:23:ab:a9:ad:1c:21:e9:78:ba: cd:13:04:60:c8:79:0d:99:25:1e:fc:0f:98:77:c6: 79:fe:3b:4f:56:cb:be:a3:a8:00:55:09:5b:d2:de: d3:68:91:71:64:a1:83:3f:de:07:50:52:96:93:79: c8:95:46:e3:62:dd:1e:70:55:0e:0f:9a:95:90:9a: 35:44:68:c2:0b:0d:66:50:a3:69:39:38:4b:d1:57: 1f:7e:36:cf:72:01:3d:f1:85:35:68:5b:20:e2:db: d5:d6:06:0c:60:de:43:c2:78:87:2e:af:55:38:ef: 3f:5b:da:8e:f0:41:9d:3d:67:d0:fe:7b:83:c8:93: 6f:1e:54:93:ac:f3:31:6d:e9:88:45:89:ca:5b:57: 90:93:67:fb:d9:b2:9a:7f:a5:e0:b9:3e:13:c7:4d: 79:7b:e7:90:76:08:b2:19:1c:cc:7e:99:9a:d2:19: 3b:33:a3:8a:df:b1:cc:19:45:ec:71:81:3e:96:f8: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8B:D6:7B:51:90:CD:F0:F0:72:32:A2:17:FD:43:8F:F4:8C:A4:90 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:f5:74:91:f5:1a:17:b3:17:ef:54:09:19:ec:d1:f5:2b: 03:10:82:7a:4d:f1:ec:53:56:4d:4a:4c:9a:e4:72:ef:ca:d6: b1:b2:a0:78:77:5a:08:13:fa:a1:78:75:09:5f:c6:93:e4:41: 93:ee:2c:68:1a:8d:16:78:97:c7:df:9c:b7:75:1b:2f:fe:84: 1a:35:ea:a2:f0:68:0a:40:a5:12:a5:2c:73:7d:d1:ff:b6:2f: 42:10:11:b1:df:13:26:fe:11:d3:a1:4b:32:63:04:37:1d:47: bc:be:1a:57:b2:e8:7e:a4:c6:aa:03:27:54:40:54:ed:4e:e0: 13:ba:e8:43:8a:b4:c8:78:31:b7:f4:71:f6:e9:05:91:cd:f9: f9:08:00:33:11:8f:32:14:b4:1c:a3:ca:91:c7:41:c9:fb:ba: 67:95:50:1c:13:0b:55:df:b6:5b:00:d7:6b:e1:89:5b:bc:ef: 0f:e8:c1:b9:0b:ca:37:e8:62:5f:55:3b:1f:92:9e:2f:21:a4: 40:68:3e:ba:ce:c0:b5:09:0f:53:45:b6:18:ef:be:f0:7a:89: 54:51:b8:fd:4e:84:0c:f2:1a:41:ad:77:d0:e5:f6:63:8f:5a: c4:16:30:e8:d4:e9:29:92:0a:6c:63:1a:22:b3:7d:a6:7b:f4: 29:73:8c:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwOTA4MTUzMDMzWhcNMjYwOTE1MTUzMDMzWjAYMRYwFAYD VQQDEw02YWEwMmExYS1kOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEh4z1uPZUlzwx8qRtJFuWkYHU9hh1FjsNsLrasAU/I7lf/UfsKKQB0vNj0n MRyqWUtriC9GwF7ZkwpMnBX265sjq6mtHCHpeLrNEwRgyHkNmSUe/A+Yd8Z5/jtP Vsu+o6gAVQlb0t7TaJFxZKGDP94HUFKWk3nIlUbjYt0ecFUOD5qVkJo1RGjCCw1m UKNpOThL0VcffjbPcgE98YU1aFsg4tvV1gYMYN5DwniHLq9VOO8/W9qO8EGdPWfQ /nuDyJNvHlSTrPMxbemIRYnKW1eQk2f72bKaf6XguT4Tx015e+eQdgiyGRzMfpma 0hk7M6OK37HMGUXscYE+lvjaeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKL1ntR kM3w8HIyohf9Q4/0jKSQMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7j1dJH1GhezF+9UCRns0fUrAxCCek3x7FNWTUpMmuRy78rWsbKgeHdaCBP6 oXh1CV/Gk+RBk+4saBqNFniXx9+ct3UbL/6EGjXqovBoCkClEqUsc33R/7YvQhAR sd8TJv4R06FLMmMENx1HvL4aV7LofqTGqgMnVEBU7U7gE7roQ4q0yHgxt/Rx9ukF kc35+QgAMxGPMhS0HKPKkcdByfu6Z5VQHBMLVd+2WwDXa+GJW7zvD+jBuQvKN+hi X1U7H5KeLyGkQGg+us7AtQkPU0W2GO++8HqJVFG4/U6EDPIaQa130OX2Y49axBYw 6NTpKZIKbGMaIrN9pnv0KXOMUA== -----END CERTIFICATE-----Generated at Thu Sep 10 14:04:09 2026 by rpki-client