$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json) Hash identifier: TpmlBJgGlTcTTKfFCt8F0sm2Mi77TlkHJaVw1BeKg9A= Subject key identifier: 4E:A8:24:58:35:42:B1:2C:53:E1:1B:CA:B9:ED:CC:B9:48:E4:05:D7 Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft Manifest number: 46 Signing time: Tue 24 Mar 2026 14:53:19 +0000 Manifest this update: Tue 24 Mar 2026 14:53:18 +0000 Manifest next update: Tue 31 Mar 2026 14:53:18 +0000 Files and hashes: 1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: vp4LkGpGPN9HYyu+D7CF84TfZfk9jBacmFu73WNAimg=) 2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: fz0PyQO3dpe/zq5PphDn6te7WEMaib2lqFLapkHh2Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Validity Not Before: Mar 24 14:53:18 2026 GMT Not After : Mar 31 14:53:18 2026 GMT Subject: CN=69c2a55e-0084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:ec:b0:33:69:15:d1:c5:e4:17:f2:00:1e: 3d:e7:60:f4:e9:80:ff:0f:7c:3e:7c:d2:78:43:b7: af:52:82:b2:28:c5:8a:56:1c:22:15:c6:d3:b7:76: 4a:ed:b4:a8:d4:99:91:21:de:d4:4c:a5:d3:d6:ba: 46:f9:ae:ac:40:99:b9:10:16:3c:a8:0a:4e:db:28: 86:e2:23:78:54:42:62:05:1f:36:09:5a:f2:fd:ad: 45:b7:a6:b8:64:2f:3a:06:fd:d6:38:8f:2e:ff:20: ef:65:70:dc:8c:2e:8d:e4:08:b0:65:44:69:0f:da: 16:f7:ea:2e:77:5f:66:49:dc:37:78:54:c5:b6:99: a9:d3:8c:4a:e1:a7:ec:c7:31:61:bf:09:52:60:ad: f8:e9:1d:fd:9f:06:bc:69:66:71:d3:92:3e:d7:00: 8b:2e:76:a3:6e:06:d5:de:b0:5a:55:0e:e4:a3:b3: fa:13:70:99:99:3b:97:2a:66:3e:95:ae:90:b3:52: af:25:af:34:b2:dc:93:9f:6f:e5:73:5c:57:78:a9: 9f:5f:53:00:b7:c1:c2:23:7d:e8:7d:8d:f7:81:8a: a8:f6:d1:f6:fb:de:12:1b:09:ba:23:14:80:d4:96: 7e:15:f6:45:92:16:33:98:87:40:66:6e:06:a2:c1: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:24:58:35:42:B1:2C:53:E1:1B:CA:B9:ED:CC:B9:48:E4:05:D7 X509v3 Authority Key Identifier: keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:27:75:70:8b:4e:87:69:b4:67:f8:61:03:95:dd:e0:74: d2:2d:c0:8b:85:29:67:8a:41:ac:b9:62:24:0e:08:76:16:07: 7a:55:6f:20:d7:51:83:0e:63:f7:55:7e:84:c1:af:a9:73:03: 35:e0:64:8c:ea:cf:89:b7:07:0f:9a:8f:10:7d:4e:78:97:c2: c2:e1:ea:20:09:d6:57:a8:ab:a4:d9:66:37:d2:b1:1b:62:cb: 76:50:ae:05:f9:bb:c1:10:63:14:3d:3f:67:7a:e9:5c:4a:85: 8b:4b:f4:80:02:96:41:38:79:61:92:71:8f:cb:a1:5c:42:5d: aa:20:10:8d:21:28:f5:51:31:8f:c5:33:77:eb:a4:1f:c5:56: 15:c2:db:82:06:d5:5b:0c:b3:54:78:25:f5:d2:cf:3f:ee:46: a4:8e:2b:c5:d4:bf:f2:a9:1d:c7:ac:c5:17:37:8f:6c:34:f9: 16:54:f4:51:9d:2e:1b:c9:2e:4a:c0:0f:af:8c:d6:fb:b7:52: c0:6d:ac:37:10:23:85:4e:92:9a:9a:03:ce:bd:7c:b1:5b:ca: e7:ad:6f:56:1e:e9:4c:b2:56:35:7a:54:77:7d:85:03:46:63: b3:45:86:fd:e8:6f:01:3d:31:60:fb:e4:1f:0d:66:21:02:a0: 6d:35:5c:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEMyRjExMC8GA1UEBRMoNjNGMzU5QTY5RURDMzg2MzQ4NkY0NkQ2MTQxRjlCNUMw MTQzMjNGQjAeFw0yNjAzMjQxNDUzMThaFw0yNjAzMzExNDUzMThaMBgxFjAUBgNV BAMTDTY5YzJhNTVlLTAwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJMeywM2kV0cXkF/IAHj3nYPTpgP8PfD580nhDt69SgrIoxYpWHCIVxtO3dkrt tKjUmZEh3tRMpdPWukb5rqxAmbkQFjyoCk7bKIbiI3hUQmIFHzYJWvL9rUW3prhk LzoG/dY4jy7/IO9lcNyMLo3kCLBlRGkP2hb36i53X2ZJ3Dd4VMW2manTjErhp+zH MWG/CVJgrfjpHf2fBrxpZnHTkj7XAIsudqNuBtXesFpVDuSjs/oTcJmZO5cqZj6V rpCzUq8lrzSy3JOfb+VzXFd4qZ9fUwC3wcIjfeh9jfeBiqj20fb73hIbCbojFIDU ln4V9kWSFjOYh0BmbgaiweGBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTqgkWDVC sSxT4RvKue3MuUjkBdcwHwYDVR0jBBgwFoAUY/NZpp7cOGNIb0bWFB+bXAFDI/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzJGLzFBNkFFOTdDQzVB ODExRjA5M0E3RjAyQ0M0RjlBRTAyL1lfTlpwcDdjT0dOSWIwYldGQi1iWEFGRElf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWV9OWnBwN2NPR05JYjBiV0ZCLWJYQUZESV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw QzJGLzFBNkFFOTdDQzVBODExRjA5M0E3RjAyQ0M0RjlBRTAyL1lfTlpwcDdjT0dO SWIwYldGQi1iWEFGRElfcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbuCd1cItOh2m0Z/hhA5Xd4HTSLcCLhSlnikGsuWIkDgh2Fgd6VW8g11GDDmP3 VX6Ewa+pcwM14GSM6s+JtwcPmo8QfU54l8LC4eogCdZXqKuk2WY30rEbYst2UK4F +bvBEGMUPT9neulcSoWLS/SAApZBOHlhknGPy6FcQl2qIBCNISj1UTGPxTN366Qf xVYVwtuCBtVbDLNUeCX10s8/7kakjivF1L/yqR3HrMUXN49sNPkWVPRRnS4byS5K wA+vjNb7t1LAbaw3ECOFTpKamgPOvXyxW8rnrW9WHulMslY1elR3fYUDRmOzRYb9 6G8BPTFg++QfDWYhAqBtNVz+ -----END CERTIFICATE-----Generated at Thu Mar 26 12:35:48 2026 by rpki-client