$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: e19PK6++Isy6xAcpnK5cth5YTQtfo5M/NNTSkc/VpAY= Subject key identifier: 93:99:30:FF:8C:A6:60:A9:0E:75:72:22:9D:A7:57:85:EC:1F:34:5F Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0D3D Signing time: Thu 26 Mar 2026 17:59:15 +0000 Manifest this update: Thu 26 Mar 2026 17:59:15 +0000 Manifest next update: Thu 02 Apr 2026 17:59:15 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: lYgf31kOGMhm9vDw8RmDlCD5DsuoxGOrO9mF/r8dyGE=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Mar 26 17:59:15 2026 GMT Not After : Apr 2 17:59:15 2026 GMT Subject: CN=69c573f3-80df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:d3:73:a1:f0:1e:19:ed:65:05:5c:bb:96: 71:be:52:0f:3b:99:07:58:5a:c3:40:14:40:8b:82: 61:3c:87:81:cf:de:87:d5:2c:99:58:0d:16:eb:ca: ef:7b:f3:4a:31:7a:7c:b2:f0:a0:56:f2:9d:0b:95: 3d:5e:ca:b5:1f:ea:7d:78:65:cb:70:22:92:66:c4: 28:a2:9d:a8:50:45:63:93:2f:9b:bb:9d:d0:78:bc: b9:b1:40:39:49:fd:db:69:31:7f:00:cf:70:0d:8d: 1a:a8:91:94:94:d4:a6:c7:89:53:1e:37:d3:0f:0a: 44:14:1e:4b:bc:b5:26:5f:b3:f7:18:65:f2:ff:0f: 40:c8:3d:9e:16:a0:b9:83:8e:bf:e4:d0:17:dc:92: 44:ab:bd:8f:4e:61:89:50:28:9f:6f:13:c2:fb:c5: f8:10:d9:62:a7:0c:b1:43:06:a9:da:f5:6c:68:37: e2:90:96:97:8c:48:23:b3:7a:8e:93:c5:ab:ae:66: 12:6d:54:6e:30:f7:6b:7a:8f:f3:63:47:c6:59:54: 90:5b:39:13:70:33:a3:e1:69:42:09:e5:20:32:09: 66:bd:cc:7f:6c:ce:37:95:68:b3:e3:52:4e:56:ab: 01:5a:d6:35:67:6e:c7:77:41:d5:42:aa:29:cc:93: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:99:30:FF:8C:A6:60:A9:0E:75:72:22:9D:A7:57:85:EC:1F:34:5F X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:59:d9:f0:3e:26:45:5b:d2:50:67:0d:67:2f:39:a7:ab:3f: 17:a3:9d:b8:ff:60:59:28:4b:68:07:e6:42:94:e7:c4:53:68: 52:1b:2d:4c:dc:8f:13:9f:1e:29:d3:41:42:67:98:68:07:83: ba:0d:2c:47:b9:80:85:e5:4d:09:bc:62:26:a9:f8:80:71:32: e1:df:89:68:9c:23:d1:65:ee:db:b1:b0:68:5f:c3:51:0a:97: cd:4e:44:a6:61:96:9a:e1:ce:ec:b5:cd:d8:63:eb:67:b2:20: 4b:c2:0d:f5:3d:bc:16:1a:27:66:ab:1a:d1:88:9a:1e:bd:56: d1:f3:ad:5e:0c:52:07:7f:af:78:05:4a:e6:c0:2f:50:a3:bc: cb:b0:15:e3:92:b7:c5:79:73:f8:8e:ce:1f:c8:4a:91:89:8a: 62:ca:01:b4:15:3f:6d:8d:06:61:10:c9:67:53:10:95:6f:7b: e4:65:9d:43:54:c1:02:ec:a5:e2:98:63:3d:43:09:9c:dc:dc: a0:0b:ed:5a:7d:14:cd:8c:1b:89:91:50:80:87:b3:e4:35:c9: a5:76:01:10:d1:8e:0e:fa:58:13:4d:b9:5c:fc:d5:81:22:e9: 82:88:61:67:aa:1b:3a:ac:8d:4b:ec:1c:19:d5:fe:61:be:e6: d1:92:9b:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjYwMzI2MTc1OTE1WhcNMjYwNDAyMTc1OTE1WjAYMRYwFAYD VQQDEw02OWM1NzNmMy04MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XXTc6HwHhntZQVcu5ZxvlIPO5kHWFrDQBRAi4JhPIeBz96H1SyZWA0W68rv e/NKMXp8svCgVvKdC5U9Xsq1H+p9eGXLcCKSZsQoop2oUEVjky+bu53QeLy5sUA5 Sf3baTF/AM9wDY0aqJGUlNSmx4lTHjfTDwpEFB5LvLUmX7P3GGXy/w9AyD2eFqC5 g46/5NAX3JJEq72PTmGJUCifbxPC+8X4ENlipwyxQwap2vVsaDfikJaXjEgjs3qO k8WrrmYSbVRuMPdreo/zY0fGWVSQWzkTcDOj4WlCCeUgMglmvcx/bM43lWiz41JO VqsBWtY1Z27Hd0HVQqopzJO7PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOZMP+M pmCpDnVyIp2nV4XsHzRfMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFnZ8D4mRVvSUGcNZy85p6s/F6OduP9gWShLaAfmQpTnxFNoUhstTNyPE58e KdNBQmeYaAeDug0sR7mAheVNCbxiJqn4gHEy4d+JaJwj0WXu27GwaF/DUQqXzU5E pmGWmuHO7LXN2GPrZ7IgS8IN9T28FhonZqsa0YiaHr1W0fOtXgxSB3+veAVK5sAv UKO8y7AV45K3xXlz+I7OH8hKkYmKYsoBtBU/bY0GYRDJZ1MQlW975GWdQ1TBAuyl 4phjPUMJnNzcoAvtWn0UzYwbiZFQgIez5DXJpXYBENGODvpYE025XPzVgSLpgohh Z6obOqyNS+wcGdX+Yb7m0ZKbjA== -----END CERTIFICATE-----Generated at Sat Mar 28 08:42:39 2026 by rpki-client