$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: D/y+b6PUtfQhwXMg6zoF3VqNL5iDEv7+RUyOokrfN5k= Subject key identifier: A9:C0:B4:13:C6:0E:EF:4A:1A:13:5A:F7:D7:30:7C:49:DF:12:37:43 Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 5C Signing time: Wed 25 Mar 2026 07:16:57 +0000 Manifest this update: Wed 25 Mar 2026 07:16:57 +0000 Manifest next update: Wed 01 Apr 2026 07:16:57 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: SPUk4yHyB9bEDscYJy03rc+tWn57ALx1qMw2nXuxGcw=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: LyWvvw+ErBjB7W8o/R8I1LcD7CF1lU/R94KhGen7GVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Mar 25 07:16:57 2026 GMT Not After : Apr 1 07:16:57 2026 GMT Subject: CN=69c38be9-757a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:0a:9d:95:6d:ec:7a:ce:8f:b5:49:67:97: 13:4a:2c:32:13:cc:fa:b0:cb:b2:a5:38:30:82:c9: d6:73:71:4a:20:fb:42:29:4e:f0:5c:4b:56:15:bb: 6e:66:0b:3e:8f:1a:e6:77:5f:de:48:30:cf:4f:b2: 33:b0:14:13:46:af:83:c4:a0:85:eb:0e:64:d2:70: 5e:db:eb:67:3d:ab:6f:f3:4a:88:b9:f0:f5:17:0a: a9:36:c1:74:7f:d1:77:29:64:fb:11:19:cd:f0:f9: 9f:51:da:36:59:62:75:46:0b:ca:08:08:7c:cd:df: b3:b5:0c:50:6d:2f:0a:22:a6:b1:36:76:0e:2b:7b: 9a:63:11:0e:cf:05:33:f6:5c:9c:e7:38:38:af:02: e3:04:0c:1d:1f:9a:4d:ac:e2:9c:7b:3e:3c:33:e5: c9:c6:d5:fd:3c:1d:91:33:96:22:db:88:58:bb:98: 91:e4:0e:eb:a7:3a:ee:7d:9c:8c:4f:34:c7:5e:43: 25:52:c9:13:38:b8:87:39:33:18:14:8a:90:40:f5: 3a:d0:95:00:58:ad:d6:b9:da:fa:45:4f:76:c1:5b: 43:31:55:01:5a:48:8e:19:b8:99:31:70:bb:31:b5: 1f:b4:e8:ee:de:fc:16:9e:ce:0a:07:e0:ef:e1:f9: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:B4:13:C6:0E:EF:4A:1A:13:5A:F7:D7:30:7C:49:DF:12:37:43 X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7e:14:21:d4:96:53:48:9f:56:9a:87:d4:e5:21:13:3b:85: c4:83:18:79:76:b3:b4:88:63:20:c9:12:69:e6:38:e2:0b:3e: 46:51:41:49:f1:20:82:5b:2f:2d:ca:11:a6:a6:38:ce:c2:75: aa:62:08:e9:a2:ee:18:c8:33:bb:9f:d7:18:09:14:86:20:a4: 3d:81:75:d8:f6:3e:c0:10:d8:93:9d:8c:8f:6e:26:19:55:75: 99:28:16:05:e1:75:28:14:c6:09:9b:0e:b3:c7:13:0f:86:44: a3:ab:f6:99:79:92:41:c2:ca:a9:bc:7b:dd:75:6a:f8:34:70: f6:1c:77:e3:e8:b3:18:6d:3a:d6:53:5c:d0:28:2a:34:c8:ea: 76:ea:9b:d0:c3:25:a5:ea:4b:17:65:38:bf:e0:93:5d:e9:2a: 83:11:66:c7:8c:4b:66:80:63:9a:82:7c:ec:d7:f1:19:6a:b6: 6f:ad:3f:11:11:f1:ef:dc:f6:4a:84:af:12:93:63:ff:94:17: ca:bf:91:55:df:6f:3b:16:d4:9d:42:97:6b:11:d6:dc:f9:cb: a9:46:97:75:df:5c:b6:cf:83:3c:7a:e1:54:8e:09:87:ce:29: 47:6e:fe:e9:9a:81:56:09:94:57:20:96:6c:d2:7c:1a:a4:5e: 3e:4f:d0:8a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNjAzMjUwNzE2NTdaFw0yNjA0MDEwNzE2NTdaMBgxFjAUBgNV BAMTDTY5YzM4YmU5LTc1N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqvwqdlW3ses6PtUlnlxNKLDITzPqwy7KlODCCydZzcUog+0IpTvBcS1YVu25m Cz6PGuZ3X95IMM9PsjOwFBNGr4PEoIXrDmTScF7b62c9q2/zSoi58PUXCqk2wXR/ 0XcpZPsRGc3w+Z9R2jZZYnVGC8oICHzN37O1DFBtLwoiprE2dg4re5pjEQ7PBTP2 XJznODivAuMEDB0fmk2s4px7Pjwz5cnG1f08HZEzliLbiFi7mJHkDuunOu59nIxP NMdeQyVSyRM4uIc5MxgUipBA9TrQlQBYrda52vpFT3bBW0MxVQFaSI4ZuJkxcLsx tR+06O7e/BaezgoH4O/h+X+BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqcC0E8YO 70oaE1r31zB8Sd8SN0MwHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDFGLzE0RDA5QzAyOURBQjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3 OXdhN2JrUEYyZHl0X3gzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBefhQh1JZTSJ9WmofU5SETO4XEgxh5drO0iGMgyRJp5jjiCz5GUUFJ8SCCWy8t yhGmpjjOwnWqYgjpou4YyDO7n9cYCRSGIKQ9gXXY9j7AENiTnYyPbiYZVXWZKBYF 4XUoFMYJmw6zxxMPhkSjq/aZeZJBwsqpvHvddWr4NHD2HHfj6LMYbTrWU1zQKCo0 yOp26pvQwyWl6ksXZTi/4JNd6SqDEWbHjEtmgGOagnzs1/EZarZvrT8REfHv3PZK hK8Sk2P/lBfKv5FV3287FtSdQpdrEdbc+cupRpd131y2z4M8euFUjgmHzilHbv7p moFWCZRXIJZs0nwapF4+T9CK -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:05 2026 by rpki-client