$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: JVBu0os9DHWe78qoP8XrdKQQ+pDAxqH/GiR8repK8Pk= Subject key identifier: C0:02:33:5C:58:B0:C5:28:14:C9:0E:7D:FA:DC:64:E5:2B:04:CA:D7 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 01BF Signing time: Wed 25 Mar 2026 03:10:29 +0000 Manifest this update: Wed 25 Mar 2026 03:10:29 +0000 Manifest next update: Wed 01 Apr 2026 03:10:29 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: eWt4V+qN3bgFnS1NBJOtwuN0xBUHzd20m4tc4BrjJdM=) 2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) 3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Mar 25 03:10:29 2026 GMT Not After : Apr 1 03:10:29 2026 GMT Subject: CN=69c35225-f81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9e:99:f7:1f:85:bf:91:88:5c:93:3d:5a:62: 8f:40:5f:25:a8:47:1a:53:bf:4e:39:4c:4d:65:89: b7:7c:8a:65:f4:a2:bb:eb:7d:e9:e9:ac:36:ca:b5: 41:6e:87:67:c6:1f:6a:bb:a8:f9:e5:c4:9c:3e:05: 1f:b1:87:68:8b:8a:7d:cd:24:2c:f0:97:73:ec:99: 80:e2:bc:da:77:d6:4f:e7:d4:9c:9e:b4:1b:c7:0b: b3:90:9e:6c:04:3c:c4:63:05:53:6c:4c:45:7d:a4: c3:95:3d:40:90:bc:75:a6:ba:52:e0:10:8c:e5:0b: c0:87:95:e8:f4:12:21:08:eb:0a:48:c8:35:d0:bb: c9:9c:a5:d2:3a:de:fa:2e:ab:36:71:b6:f4:9a:df: 62:3c:a5:85:00:24:11:58:18:cf:2d:e2:24:f4:47: c3:de:5b:59:5a:88:c3:f6:e6:85:78:bf:87:b1:97: 4e:5a:eb:a1:41:53:8d:88:f4:26:ab:bb:30:a5:2f: 7f:ec:f9:f6:cb:ac:23:2a:05:b2:76:c4:ac:4d:03: ca:a0:7b:fe:f2:5f:24:ba:3d:f1:2b:3c:f8:20:71: 0c:47:a8:a9:4f:77:4e:35:78:04:5e:97:98:e0:d8: 30:9a:50:20:63:5b:20:07:96:01:52:0c:2f:a2:39: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:33:5C:58:B0:C5:28:14:C9:0E:7D:FA:DC:64:E5:2B:04:CA:D7 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5f:51:4f:30:2b:d3:6f:ff:4d:12:08:4d:3a:09:a2:9c:ee: 20:78:cc:ce:cc:4e:12:87:3b:7b:eb:db:6b:b5:9e:4d:3f:ea: a7:51:d1:f7:45:60:14:68:9c:6d:8b:f9:c6:cd:f6:c7:93:7c: a5:87:f8:25:44:71:c4:15:6f:a6:5e:b9:e9:a2:c8:a5:8c:87: 05:80:b5:ff:a0:a1:2b:f6:cc:a7:31:f2:9a:43:f2:6d:d4:34: 9c:dd:60:36:de:68:ea:ff:17:79:68:4c:2c:a1:04:6d:72:dc: 03:b3:a9:aa:9a:eb:2f:b3:60:51:35:2d:fd:5a:db:66:6a:dd: 10:ae:ba:00:25:18:98:b7:23:ce:0a:ef:4b:40:76:2c:a5:da: 0c:0a:f0:1b:c3:e2:98:1e:b9:8c:e2:e3:d7:b0:23:05:a7:15: 4a:bf:e4:22:77:cf:2b:41:50:11:a0:4c:1f:60:f1:5f:1b:6c: b0:b4:d3:08:65:28:30:4f:73:65:4c:55:68:6f:a9:c7:66:ed: 6a:85:b5:7b:fe:0c:23:7e:9e:c3:89:d7:72:17:8f:8e:ec:75: b7:30:1e:59:49:f2:19:0c:d6:f1:9e:57:cc:80:36:7f:9d:29: c6:e7:8d:4e:35:ba:ec:46:17:e5:6b:ca:da:77:71:44:da:64: cf:7f:5d:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYwMzI1MDMxMDI5WhcNMjYwNDAxMDMxMDI5WjAYMRYwFAYD VQQDEw02OWMzNTIyNS1mODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5J6Z9x+Fv5GIXJM9WmKPQF8lqEcaU79OOUxNZYm3fIpl9KK7633p6aw2yrVB bodnxh9qu6j55cScPgUfsYdoi4p9zSQs8Jdz7JmA4rzad9ZP59ScnrQbxwuzkJ5s BDzEYwVTbExFfaTDlT1AkLx1prpS4BCM5QvAh5Xo9BIhCOsKSMg10LvJnKXSOt76 Lqs2cbb0mt9iPKWFACQRWBjPLeIk9EfD3ltZWojD9uaFeL+HsZdOWuuhQVONiPQm q7swpS9/7Pn2y6wjKgWydsSsTQPKoHv+8l8kuj3xKzz4IHEMR6ipT3dONXgEXpeY 4NgwmlAgY1sgB5YBUgwvojnFaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMACM1xY sMUoFMkOffrcZOUrBMrXMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIF9RTzAr02//TRIITToJopzuIHjMzsxOEoc7e+vba7WeTT/qp1HR90VgFGic bYv5xs32x5N8pYf4JURxxBVvpl656aLIpYyHBYC1/6ChK/bMpzHymkPybdQ0nN1g Nt5o6v8XeWhMLKEEbXLcA7OpqprrL7NgUTUt/VrbZmrdEK66ACUYmLcjzgrvS0B2 LKXaDArwG8PimB65jOLj17AjBacVSr/kInfPK0FQEaBMH2DxXxtssLTTCGUoME9z ZUxVaG+px2btaoW1e/4MI36ew4nXchePjux1tzAeWUnyGQzW8Z5XzIA2f50pxueN TjW67EYX5WvK2ndxRNpkz39dmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:42:40 2026 by rpki-client