$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: e9cViD7qGNhgizaavE+4/FVImPrApmISdA0QB273Mms= Subject key identifier: 74:1C:D7:52:59:89:77:4E:8B:2F:50:C5:CD:61:AC:3F:4E:5F:D9:AF Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: 016D Signing time: Tue 03 Mar 2026 04:26:49 +0000 Manifest this update: Tue 03 Mar 2026 04:26:49 +0000 Manifest next update: Tue 10 Mar 2026 04:26:48 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: 3Ur31gGUJ6i5Aa33Taox3DIC6yGhhpOZlpVUfdlUxU0=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: hLHf0yHg07NxcBaia4emdp8wLJZ5yswiWeZpuukCb8M=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: 30l77jxXegJoF7jXMHGnkdZkivl7c3joIlWbA5gQlco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Mar 3 04:26:49 2026 GMT Not After : Mar 10 04:26:48 2026 GMT Subject: CN=69a66309-95e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:44:c4:2b:05:82:58:e6:31:29:b2:49:30: b6:e9:b5:f7:1f:4f:c9:33:16:13:a8:40:48:7b:6c: a8:b9:5a:de:3b:19:03:cb:b7:bc:88:65:91:9a:ff: 36:92:43:c6:e0:0b:85:9a:2b:1c:1c:83:56:0a:54: b7:90:3d:21:11:c7:90:e6:2c:5c:58:5f:24:68:df: 6c:f8:d2:bb:e8:ec:13:3d:27:d7:7f:65:a9:69:da: 57:30:f9:c7:50:e3:d9:2a:0a:32:2d:5f:6b:39:75: 9a:2f:88:5d:91:11:68:79:19:70:c6:4d:60:93:e8: c8:6b:20:b0:5c:45:8f:0c:33:df:de:0d:09:65:39: d9:8b:5a:00:ed:d2:55:b3:c2:f2:96:4d:b0:c9:84: 48:53:27:31:04:a5:28:29:f4:b0:4e:bd:c7:1f:dc: 72:e8:ff:8a:ab:be:ec:b0:4a:65:e9:87:19:c6:c1: 31:49:57:b0:de:6f:52:42:e1:b2:2e:92:ab:47:76: 5f:63:ef:82:0c:9e:09:2f:74:15:36:da:c1:54:3b: 4f:e4:a6:b8:41:a5:87:63:2a:46:e0:b9:94:e0:ee: b2:4b:41:ca:b2:1b:5a:27:25:f7:a5:76:6a:9a:c3: c9:00:82:39:c1:20:d6:c9:75:60:ef:10:00:b6:13: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1C:D7:52:59:89:77:4E:8B:2F:50:C5:CD:61:AC:3F:4E:5F:D9:AF X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bd:2f:59:7d:c6:8f:78:38:07:20:0f:34:08:27:ad:b3:05: f6:2f:9c:bf:f6:7b:bb:93:fb:44:45:16:bd:46:a9:56:79:a9: 81:09:4c:b8:a7:20:23:38:9f:7c:2b:ef:4f:db:76:53:e2:47: c0:e9:18:94:85:02:ce:4e:a2:d3:df:d0:b4:8e:fd:63:34:ea: 43:c6:5d:8b:e6:a2:4c:73:8d:1f:ae:33:07:01:2d:51:3e:81: 8a:c1:b7:63:1f:d2:1e:e3:9a:50:89:c4:ea:a6:dd:3b:9b:6b: 90:25:19:76:45:74:4d:81:1a:e8:74:9e:d7:a1:34:37:8c:1b: 11:ef:81:15:2a:7f:bd:89:ec:51:64:3e:56:1d:98:71:ba:df: a4:ab:65:39:4d:1d:ed:d2:bf:a2:95:b3:d2:26:b1:b0:e7:55: 31:f9:bf:aa:42:f2:11:9d:4e:a9:6b:60:a3:e7:5e:56:99:27: be:8b:b2:a7:71:f1:8f:90:86:ef:c1:c3:0b:7c:2a:27:70:73: 4d:29:f3:2a:53:b9:97:fe:7d:74:da:1b:e9:c8:0c:e8:fa:fb: 29:ff:15:35:01:c3:6c:07:0d:a3:ef:2c:89:fb:04:93:f9:52: f3:3a:96:3b:4c:f1:d9:d4:cc:ec:19:f7:fd:c4:ac:8f:9f:ad: 69:e7:37:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjYwMzAzMDQyNjQ5WhcNMjYwMzEwMDQyNjQ4WjAYMRYwFAYD VQQDEw02OWE2NjMwOS05NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApihExCsFgljmMSmySTC26bX3H0/JMxYTqEBIe2youVreOxkDy7e8iGWRmv82 kkPG4AuFmiscHINWClS3kD0hEceQ5ixcWF8kaN9s+NK76OwTPSfXf2WpadpXMPnH UOPZKgoyLV9rOXWaL4hdkRFoeRlwxk1gk+jIayCwXEWPDDPf3g0JZTnZi1oA7dJV s8Lylk2wyYRIUycxBKUoKfSwTr3HH9xy6P+Kq77ssEpl6YcZxsExSVew3m9SQuGy LpKrR3ZfY++CDJ4JL3QVNtrBVDtP5Ka4QaWHYypG4LmU4O6yS0HKshtaJyX3pXZq msPJAII5wSDWyXVg7xAAthNG+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQc11JZ iXdOiy9Qxc1hrD9OX9mvMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfb0vWX3Gj3g4ByAPNAgnrbMF9i+cv/Z7u5P7REUWvUapVnmpgQlMuKcgIzif fCvvT9t2U+JHwOkYlIUCzk6i09/QtI79YzTqQ8Zdi+aiTHONH64zBwEtUT6BisG3 Yx/SHuOaUInE6qbdO5trkCUZdkV0TYEa6HSe16E0N4wbEe+BFSp/vYnsUWQ+Vh2Y cbrfpKtlOU0d7dK/opWz0iaxsOdVMfm/qkLyEZ1OqWtgo+deVpknvouyp3Hxj5CG 78HDC3wqJ3BzTSnzKlO5l/59dNob6cgM6Pr7Kf8VNQHDbAcNo+8sifsEk/lS8zqW O0zx2dTM7Bn3/cSsj5+taec3KQ== -----END CERTIFICATE-----Generated at Wed Mar 4 08:42:50 2026 by rpki-client