$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: hPWDidSKlz6FCbsUH1td/fdKfdVLVUV2CWCuW8OP5BE= Subject key identifier: 7B:4E:36:6B:ED:72:12:76:6F:6B:FC:4E:18:67:D6:FD:57:F0:11:6A Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0D09 Signing time: Mon 22 Jun 2026 18:12:02 +0000 Manifest this update: Mon 22 Jun 2026 18:12:01 +0000 Manifest next update: Mon 29 Jun 2026 18:12:01 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: clO2Pf6xW8MBIdMqOgkxuvK6JZfus/3g/b0b8rr2lPM=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Jun 22 18:12:01 2026 GMT Not After : Jun 29 18:12:01 2026 GMT Subject: CN=6a397af1-75f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:6e:d4:0f:8d:99:a9:b3:46:96:24:a4:b6: 79:54:c2:69:89:2e:7e:86:b1:b7:fe:08:83:5c:1c: ea:74:28:5b:22:f9:76:db:4b:e9:1f:34:6e:00:0e: 5d:70:51:87:8d:ab:0b:01:db:48:c8:73:41:ae:c1: d1:d4:17:c6:7e:fb:ce:d9:c3:6b:6e:94:2c:d3:44: d6:6b:06:dc:40:2d:9c:1b:9c:cd:73:42:f6:bb:cb: 77:09:9f:e4:e2:02:0b:b6:78:eb:6d:5f:46:88:79: c7:27:e2:b8:e8:a5:1b:d2:ee:41:c7:d3:08:e8:d8: ff:30:dc:fd:50:e9:a1:0b:74:09:e3:8d:72:75:e0: 24:44:99:9e:2c:a3:93:e8:3c:cc:5c:b2:87:01:66: 18:d5:06:6c:bd:78:ee:c6:e5:6e:53:8b:64:15:60: 93:95:2a:b8:c5:99:a7:07:cd:f6:65:a9:24:ea:ff: d4:c4:11:1b:61:0e:69:34:b2:37:7b:da:0f:7a:af: d8:56:72:5d:c2:79:83:fb:25:ac:22:9c:ca:b9:cf: 95:71:14:61:fb:50:8b:c4:eb:98:ff:89:4f:80:5f: 96:4d:6d:6f:3c:7d:d8:5c:fa:ed:e6:ae:1a:dc:e3: 79:7f:10:d3:5a:58:1a:c4:d5:44:ef:b2:68:67:31: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:36:6B:ED:72:12:76:6F:6B:FC:4E:18:67:D6:FD:57:F0:11:6A X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:9c:3e:e4:a6:05:64:8b:60:2e:27:e7:c2:3f:68:68:b5: ab:0c:6a:64:bc:b5:ee:df:c2:5c:cc:9e:e9:d2:51:a3:b1:f9: c3:c2:4a:72:73:85:d1:d1:c7:cd:d3:d4:fe:4b:5a:5e:1c:3d: ae:96:3c:e4:19:07:75:60:1a:7d:d6:c1:2d:d1:b3:c5:93:c9: 33:89:4a:29:b7:74:1b:4c:22:d4:c8:b4:0f:e0:a7:33:64:e6: 27:da:56:00:fc:d8:5c:51:e3:0c:96:24:84:9a:20:f9:40:f6: 6a:f8:2e:36:3e:06:31:2c:43:fa:64:0b:ff:d4:ed:b7:07:26: b1:11:97:94:05:12:25:34:b0:0a:d8:cb:3b:e9:d1:e2:53:bd: d0:4e:6d:a8:0b:ba:ea:6f:1a:d3:c0:e0:78:97:46:e7:7b:16: a3:90:0d:e0:3d:2b:41:11:2b:59:53:b6:17:e1:94:20:18:c4: 0b:d9:90:b5:52:18:62:86:9b:0e:8b:cb:fa:07:7d:0d:28:b2: d3:2f:86:dd:6d:64:b1:12:94:1e:19:f6:1c:ba:b6:bd:20:91: f9:91:62:2f:7e:e8:75:3f:7d:ba:35:b8:da:51:b5:7a:4a:73: 83:c1:37:55:53:dc:9a:12:b9:00:23:34:bf:31:4c:ee:52:a7: dc:57:aa:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjYwNjIyMTgxMjAxWhcNMjYwNjI5MTgxMjAxWjAYMRYwFAYD VQQDEw02YTM5N2FmMS03NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy9u1A+NmamzRpYkpLZ5VMJpiS5+hrG3/giDXBzqdChbIvl220vpHzRuAA5d cFGHjasLAdtIyHNBrsHR1BfGfvvO2cNrbpQs00TWawbcQC2cG5zNc0L2u8t3CZ/k 4gILtnjrbV9GiHnHJ+K46KUb0u5Bx9MI6Nj/MNz9UOmhC3QJ441ydeAkRJmeLKOT 6DzMXLKHAWYY1QZsvXjuxuVuU4tkFWCTlSq4xZmnB832Zakk6v/UxBEbYQ5pNLI3 e9oPeq/YVnJdwnmD+yWsIpzKuc+VcRRh+1CLxOuY/4lPgF+WTW1vPH3YXPrt5q4a 3ON5fxDTWlgaxNVE77JoZzHTLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtONmvt chJ2b2v8Thhn1v1X8BFqMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5mcPuSmBWSLYC4n58I/aGi1qwxqZLy17t/CXMye6dJRo7H5w8JKcnOF0dHH zdPU/ktaXhw9rpY85BkHdWAafdbBLdGzxZPJM4lKKbd0G0wi1Mi0D+CnM2TmJ9pW APzYXFHjDJYkhJog+UD2avguNj4GMSxD+mQL/9TttwcmsRGXlAUSJTSwCtjLO+nR 4lO90E5tqAu66m8a08DgeJdG53sWo5AN4D0rQRErWVO2F+GUIBjEC9mQtVIYYoab DovL+gd9DSiy0y+G3W1ksRKUHhn2HLq2vSCR+ZFiL37odT99ujW42lG1ekpzg8E3 VVPcmhK5ACM0vzFM7lKn3FeqmQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:32 2026 by rpki-client