$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: qdbyRVAjRfZ29UuTUneHeaSiuUue30U2Vv8rhygmYoE= Subject key identifier: 07:94:F6:8C:68:03:D3:F6:34:2A:D0:82:21:01:A0:16:F7:FE:DF:65 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 0669 Signing time: Thu 12 Mar 2026 22:14:49 +0000 Manifest this update: Thu 12 Mar 2026 22:14:48 +0000 Manifest next update: Thu 19 Mar 2026 22:14:48 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: B/3N2StEWRQDm4TKF7/+JwXeCjG8QOqLvlyAAgsNF5s=) 2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=) 4: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 21:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Mar 12 22:14:48 2026 GMT Not After : Mar 19 22:14:48 2026 GMT Subject: CN=69b33ad9-fabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:23:39:bf:80:25:17:32:7e:b9:0e:1b:d7: ef:86:52:4f:d8:4e:e3:a6:ad:10:ba:ca:3a:2b:5a: d4:ed:7d:78:0a:df:01:eb:30:31:84:a3:7a:17:28: ca:34:a2:ca:bc:42:1b:27:79:0e:ba:47:61:15:e7: 6d:08:2b:c2:e1:1f:94:82:d6:a4:24:15:2d:b1:d5: 96:4f:80:68:c2:08:26:74:74:67:49:44:a2:dd:fa: 10:bc:f2:99:10:4c:de:c1:16:af:57:f2:d1:14:96: 0c:20:d2:10:77:f7:43:40:8d:a3:fb:c8:b2:6c:d1: 5e:c9:4d:0a:3b:76:85:fc:55:c4:b0:15:e3:a8:22: 97:fd:fd:ad:de:44:cd:28:07:fb:f3:3d:b7:a6:88: 87:49:bc:41:05:ed:1b:9c:1f:f2:3b:d2:f2:5a:4d: 2d:ae:d3:c0:4b:fd:6d:1f:40:12:6f:47:70:f4:fc: f9:7b:ba:25:cf:8b:35:d9:b3:69:a0:0f:05:d0:d3: 13:d8:cf:22:2a:28:c4:38:4b:f1:72:87:e3:8f:87: 06:6a:8f:5a:87:86:35:fb:7a:c7:af:54:82:95:5d: d9:41:9f:6e:16:5b:57:8f:44:4e:47:15:a9:fd:1a: 3f:24:68:80:9f:ff:1c:a7:a9:d6:1b:85:4f:25:cf: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:94:F6:8C:68:03:D3:F6:34:2A:D0:82:21:01:A0:16:F7:FE:DF:65 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:29:e8:7b:c5:2e:66:6d:aa:8c:9d:c8:04:c0:4c:6b:93:db: c1:c9:da:63:17:56:70:1a:e2:6f:39:fb:5a:cd:59:49:93:ca: ce:26:21:00:84:29:9c:6e:a9:5c:df:b9:b0:a7:75:82:6e:54: 33:25:21:8b:80:5f:b6:d1:96:e8:b9:a6:9e:ce:84:33:5e:10: 30:4b:cc:65:c4:59:35:cc:88:78:8f:fd:56:5a:6d:af:b7:b7: 6c:49:b9:76:09:3b:27:b4:06:57:39:cf:44:87:62:d3:7e:70: 94:44:bc:21:1f:2f:1b:75:9f:c0:a9:f2:5f:50:81:3b:cf:56: ea:5a:60:1a:c6:da:b3:73:42:4a:bd:8d:79:43:9c:bd:3b:05: 7b:70:8b:29:7d:fe:2a:80:37:f4:a7:6c:6d:c6:7b:ae:70:3a: 89:22:e0:c0:26:88:6d:a1:d0:ec:79:66:5a:7f:0e:11:c3:08: 3c:71:64:dd:e2:27:61:a5:06:b6:3b:fc:33:17:90:ff:4e:5d: 77:9c:5e:74:ce:0d:67:79:06:91:4f:c3:89:8d:b7:2b:47:80: 18:d9:82:eb:18:b0:fc:26:25:d6:6a:d9:7b:73:3e:e4:7e:07: be:00:8c:31:3f:1f:cf:f8:17:a2:a6:50:5a:b8:e7:52:ad:b4: 54:95:50:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwMzEyMjIxNDQ4WhcNMjYwMzE5MjIxNDQ4WjAYMRYwFAYD VQQDEw02OWIzM2FkOS1mYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn0jOb+AJRcyfrkOG9fvhlJP2E7jpq0Quso6K1rU7X14Ct8B6zAxhKN6FyjK NKLKvEIbJ3kOukdhFedtCCvC4R+UgtakJBUtsdWWT4BowggmdHRnSUSi3foQvPKZ EEzewRavV/LRFJYMINIQd/dDQI2j+8iybNFeyU0KO3aF/FXEsBXjqCKX/f2t3kTN KAf78z23poiHSbxBBe0bnB/yO9LyWk0trtPAS/1tH0ASb0dw9Pz5e7olz4s12bNp oA8F0NMT2M8iKijEOEvxcofjj4cGao9ah4Y1+3rHr1SClV3ZQZ9uFltXj0RORxWp /Ro/JGiAn/8cp6nWG4VPJc+36wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeU9oxo A9P2NCrQgiEBoBb3/t9lMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxynoe8UuZm2qjJ3IBMBMa5PbwcnaYxdWcBribzn7Ws1ZSZPKziYhAIQpnG6p XN+5sKd1gm5UMyUhi4BfttGW6Lmmns6EM14QMEvMZcRZNcyIeI/9Vlptr7e3bEm5 dgk7J7QGVznPRIdi035wlES8IR8vG3WfwKnyX1CBO89W6lpgGsbas3NCSr2NeUOc vTsFe3CLKX3+KoA39KdsbcZ7rnA6iSLgwCaIbaHQ7HlmWn8OEcMIPHFk3eInYaUG tjv8MxeQ/05dd5xedM4NZ3kGkU/DiY23K0eAGNmC6xiw/CYl1mrZe3M+5H4HvgCM MT8fz/gXoqZQWrjnUq20VJVQLQ== -----END CERTIFICATE-----Generated at Fri Mar 13 00:17:51 2026 by rpki-client