$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: oP4uDJzkGMcIn5C8ph/HrJ5blam25Qzo5m66/LDKPRo= Subject key identifier: 59:7C:DC:C8:F7:E4:EB:CF:4A:77:5B:4D:26:64:57:46:3C:24:E9:DA Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2EE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2ED3 Signing time: Sun 26 Jul 2026 15:32:48 +0000 Manifest this update: Sun 26 Jul 2026 15:32:47 +0000 Manifest next update: Sun 02 Aug 2026 15:32:47 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: +Emj4HDbuam4kBhFyXMBV/q1M8L75qlFGWZn1SlCh64=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12006 (0x2ee6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Jul 26 15:32:47 2026 GMT Not After : Aug 2 15:32:47 2026 GMT Subject: CN=6a6628a0-ff51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:7f:0f:61:65:4b:4c:44:a4:f3:f4:35:d6: ff:c3:f2:99:3a:75:12:60:cf:e1:b2:08:aa:c6:cc: fb:8e:c1:1a:bf:80:c1:a6:23:63:b9:d1:1e:32:58: af:4b:46:f1:4e:ff:9c:b5:9c:8c:70:fd:14:7e:0c: b9:ab:40:06:0e:18:67:38:26:00:77:6d:d0:6e:f9: 1f:4a:f8:d0:ae:ee:49:29:dc:00:d4:60:fc:1c:08: 20:29:37:ec:0b:86:65:57:56:15:26:f7:a0:8f:bb: 1a:d7:9a:33:c5:e7:41:e5:1f:ee:ed:76:f5:65:42: d0:8e:44:a0:51:b4:2b:b7:17:78:05:42:f4:bd:6b: 45:6c:b1:fb:6a:b5:f1:44:8e:7d:49:fa:82:c8:3f: fe:e5:48:cb:02:0c:65:d8:04:05:31:b8:78:1b:8c: a8:7b:6c:24:22:98:ad:dc:bf:72:5d:dc:8f:a1:fd: bb:3a:f8:f7:f1:d4:7a:ad:95:09:5b:bf:34:c5:0b: 63:59:88:67:aa:a3:81:ab:a7:29:a1:5e:b6:d2:ab: d1:9e:eb:53:36:51:d4:21:9a:f3:2c:f2:d6:80:5a: 06:e5:3c:c1:79:15:28:48:9e:a3:26:f5:85:d9:9f: 5a:f0:62:fe:db:69:d6:7b:c4:a2:c3:ed:c1:ea:26: d7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:DC:C8:F7:E4:EB:CF:4A:77:5B:4D:26:64:57:46:3C:24:E9:DA X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ad:d3:52:0d:72:11:c2:3d:04:77:6b:4d:44:99:f5:fe:f1: a0:e4:24:93:1a:3e:71:e0:74:75:79:60:b8:e2:5a:f7:3e:b9: 26:81:10:43:1a:aa:a9:52:ba:8d:1c:04:05:8e:e9:33:f4:4b: 29:60:7d:c6:1f:c9:33:d6:54:bb:1b:10:d4:bc:ee:1f:d5:95: 3a:29:d2:76:5e:58:a0:26:c3:dc:f5:b5:cc:05:95:5d:a7:dd: d1:47:9c:c2:a0:82:56:e3:78:68:ba:67:96:f5:3f:45:77:28: cb:7c:10:69:4b:d5:f9:88:74:a9:d7:f2:19:46:2f:f1:64:47: 7d:ac:ef:3c:ce:79:ab:30:2c:be:fd:89:f4:09:f3:a7:65:1b: 46:84:0d:c4:18:4d:be:a4:bf:8a:5c:5a:bf:52:3f:da:62:ae: 2f:5b:7a:af:97:13:d2:bd:49:09:45:76:37:59:c6:3e:c4:ac: 61:4e:6c:bc:51:31:92:1a:42:c4:1d:ed:06:3d:30:a8:8e:aa: 8a:68:bf:04:46:8c:ba:df:9b:b2:44:39:ab:63:6c:fe:cc:ef: 9e:f1:d1:f3:38:5e:e3:b4:97:c4:0f:70:1e:e9:8e:21:57:a3: 69:02:50:0e:00:68:83:bf:15:bc:ca:5d:2b:56:d2:6e:9c:f0: 55:ad:b4:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwNzI2MTUzMjQ3WhcNMjYwODAyMTUzMjQ3WjAYMRYwFAYD VQQDEw02YTY2MjhhMC1mZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n1/D2FlS0xEpPP0Ndb/w/KZOnUSYM/hsgiqxsz7jsEav4DBpiNjudEeMliv S0bxTv+ctZyMcP0Ufgy5q0AGDhhnOCYAd23QbvkfSvjQru5JKdwA1GD8HAggKTfs C4ZlV1YVJvegj7sa15ozxedB5R/u7Xb1ZULQjkSgUbQrtxd4BUL0vWtFbLH7arXx RI59SfqCyD/+5UjLAgxl2AQFMbh4G4yoe2wkIpit3L9yXdyPof27Ovj38dR6rZUJ W780xQtjWYhnqqOBq6cpoV620qvRnutTNlHUIZrzLPLWgFoG5TzBeRUoSJ6jJvWF 2Z9a8GL+22nWe8Siw+3B6ibX1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFl83Mj3 5OvPSndbTSZkV0Y8JOnaMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa63TUg1yEcI9BHdrTUSZ9f7xoOQkkxo+ceB0dXlguOJa9z65JoEQQxqqqVK6 jRwEBY7pM/RLKWB9xh/JM9ZUuxsQ1LzuH9WVOinSdl5YoCbD3PW1zAWVXafd0Uec wqCCVuN4aLpnlvU/RXcoy3wQaUvV+Yh0qdfyGUYv8WRHfazvPM55qzAsvv2J9Anz p2UbRoQNxBhNvqS/ilxav1I/2mKuL1t6r5cT0r1JCUV2N1nGPsSsYU5svFExkhpC xB3tBj0wqI6qimi/BEaMut+bskQ5q2Ns/szvnvHR8zhe47SXxA9wHumOIVejaQJQ DgBog78VvMpdK1bSbpzwVa20vQ== -----END CERTIFICATE-----Generated at Mon Jul 27 11:03:58 2026 by rpki-client