$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft File: QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json) Hash identifier: n5EdXMdUs4ptdzetbZ2VQQTroNufFiH27FVEd3joEJs= Subject key identifier: FF:A3:E8:45:4C:FF:CA:D1:64:A3:D2:86:F6:EF:3D:97:79:3F:AA:7D Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft Manifest number: 0D87 Signing time: Wed 18 Mar 2026 20:49:48 +0000 Manifest this update: Wed 18 Mar 2026 20:49:48 +0000 Manifest next update: Wed 25 Mar 2026 20:49:48 +0000 Files and hashes: 1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: 5NxSIIe5fcy/ZFjareeQPexULNwggST6vUMVY6hJM+8=) 2: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: xmxOOOmRoSh+TiszmT8uvDU9UG3tb8C8zUPGk1dc3Yo=) 3: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: UBk250a9gXHO9ez4qLSlEuiZsLpkP12rAnXlTLR0TEs=) 4: A291634816B711ECBD752D47C4F9AE02.roa (hash: URyiGMrY2LwMKVOEbU+eXu56UFnP9xNvR4vUhX3bIHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 20:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Validity Not Before: Mar 18 20:49:48 2026 GMT Not After : Mar 25 20:49:48 2026 GMT Subject: CN=69bb0fec-271c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:c9:af:3b:65:ab:7a:3f:e1:f5:60:a4:67: cd:f3:aa:18:7b:be:58:ab:f9:b1:e7:16:d3:46:a4: 3a:50:f2:2e:0f:05:ac:d8:5d:0b:99:a0:39:5a:74: 0d:68:e3:13:2c:c6:c8:62:4a:2e:29:9f:34:5d:21: cd:61:3b:02:32:91:c4:80:0a:7a:d4:83:5c:7f:f2: 58:60:ad:1a:9e:ba:ab:a1:c8:3c:ca:80:95:2d:e6: 96:ee:15:10:6a:c6:10:04:a2:64:95:86:b6:4f:cd: 5c:2a:bf:ee:db:4d:4a:ba:cf:46:db:d0:c2:42:ae: 3d:d8:1a:e3:8f:48:b1:89:b4:ff:e7:2e:5a:b0:f5: 5d:52:45:9c:b0:50:8b:b9:ae:84:90:41:31:06:dc: 46:b1:5f:9a:d2:df:93:14:67:35:0a:3f:09:e7:fc: f7:3a:cf:76:6c:07:ae:96:0f:2d:7e:59:f4:cb:67: 91:0f:24:38:7e:25:f0:6b:c2:8c:8d:69:98:33:2f: 17:86:f2:19:e9:0e:7b:ff:36:18:51:c5:ff:d3:79: c4:b0:7e:a0:25:df:67:cc:06:8a:f0:00:c6:c0:f7: 63:e6:81:7e:f4:78:fa:49:b4:37:d2:0d:91:df:bb: 67:01:17:03:bb:3f:5a:49:c8:92:f5:0e:32:1e:d1: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:E8:45:4C:FF:CA:D1:64:A3:D2:86:F6:EF:3D:97:79:3F:AA:7D X509v3 Authority Key Identifier: keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:94:92:68:d0:1a:1f:58:77:6e:1c:2a:cb:91:64:c3:69:00: 06:dd:1e:9e:26:e5:df:e1:7f:90:2d:8e:1d:ec:fd:bc:af:30: 69:be:0d:35:d8:84:0f:51:2a:54:3f:e6:56:d5:24:c5:d6:96: eb:4f:54:b6:af:55:aa:dd:6b:44:0f:05:3e:c9:bd:b2:03:3f: 9c:de:3f:d7:29:51:e9:2b:dd:ed:d8:01:63:79:dd:9d:6f:27: 38:8c:82:a3:e9:01:c1:b4:ee:4d:e1:a3:e8:cf:31:d8:d7:18: 07:42:88:4d:a9:68:c0:10:c7:67:98:c8:18:ff:c5:2d:42:b6: 2a:97:dc:4a:72:17:e6:7a:bf:55:ac:24:7c:2d:67:2f:7f:39: d1:2b:c8:1d:58:1f:b1:3a:90:08:7d:db:89:e4:f5:5e:7c:0b: fd:47:7c:72:d3:80:f3:32:fa:c7:8a:93:0e:08:3b:78:97:cc: e8:42:66:16:f0:5a:13:f5:e7:b8:0e:c6:7e:51:8f:73:be:2b: b5:53:49:25:a1:e1:85:fe:11:cf:06:ce:e0:17:48:e0:36:bc: b5:28:ab:e3:a8:b9:ad:e9:76:aa:b9:ab:33:87:77:d8:ea:06: 9d:73:5a:6b:a4:58:76:15:ef:b5:cc:08:e1:04:57:fd:2c:b5: 00:1a:70:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz RkU4NTU1RjcwHhcNMjYwMzE4MjA0OTQ4WhcNMjYwMzI1MjA0OTQ4WjAYMRYwFAYD VQQDEw02OWJiMGZlYy0yNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUbJrztlq3o/4fVgpGfN86oYe75Yq/mx5xbTRqQ6UPIuDwWs2F0LmaA5WnQN aOMTLMbIYkouKZ80XSHNYTsCMpHEgAp61INcf/JYYK0anrqrocg8yoCVLeaW7hUQ asYQBKJklYa2T81cKr/u201Kus9G29DCQq492Brjj0ixibT/5y5asPVdUkWcsFCL ua6EkEExBtxGsV+a0t+TFGc1Cj8J5/z3Os92bAeulg8tfln0y2eRDyQ4fiXwa8KM jWmYMy8XhvIZ6Q57/zYYUcX/03nEsH6gJd9nzAaK8ADGwPdj5oF+9Hj6SbQ30g2R 37tnARcDuz9aSciS9Q4yHtE81wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP+j6EVM /8rRZKPShvbvPZd5P6p9MB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgt MTdGenQ0RGdGLTBfNkZWZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAApSSaNAaH1h3bhwqy5Fkw2kABt0enibl3+F/kC2OHez9vK8wab4NNdiED1Eq VD/mVtUkxdaW609Utq9Vqt1rRA8FPsm9sgM/nN4/1ylR6Svd7dgBY3ndnW8nOIyC o+kBwbTuTeGj6M8x2NcYB0KITalowBDHZ5jIGP/FLUK2KpfcSnIX5nq/VawkfC1n L3850SvIHVgfsTqQCH3bieT1XnwL/Ud8ctOA8zL6x4qTDgg7eJfM6EJmFvBaE/Xn uA7GflGPc74rtVNJJaHhhf4RzwbO4BdI4Da8tSir46i5rel2qrmrM4d32OoGnXNa a6RYdhXvtcwI4QRX/Sy1ABpwGA== -----END CERTIFICATE-----Generated at Fri Mar 20 14:30:01 2026 by rpki-client