$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: 4WemNl16T4p3UsMBDzbJuoZSUIjJoHWpCFG1dpae7xM= Subject key identifier: C5:A9:D9:77:97:4B:7C:9F:4A:5A:A8:97:78:4D:45:1E:8C:8F:15:C1 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 04A6 Signing time: Tue 24 Mar 2026 23:38:22 +0000 Manifest this update: Tue 24 Mar 2026 23:38:21 +0000 Manifest next update: Tue 31 Mar 2026 23:38:21 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: nxuRNly/ZvpSve4xukwSp7nfme6MzECzUfys4yPGPC0=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NKpHZuQ/N0jLaQzAiOuAL4/fFnsnoJjcA6Dbue2XBI4=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: P6yrox/YyLpm+oDoNWNTBLiNb1B32zelHzp9aiWiXkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: Mar 24 23:38:21 2026 GMT Not After : Mar 31 23:38:21 2026 GMT Subject: CN=69c3206d-6e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:52:d9:f5:9f:23:b2:8c:bc:82:07:f2:eb: f3:65:92:69:05:cb:62:55:1c:e2:74:10:02:21:e9: cd:fc:7d:51:32:81:a9:e1:61:41:88:76:0c:5b:b6: dd:55:b5:a6:ca:11:1c:5f:9e:67:cf:2e:32:4c:83: 49:7a:56:d9:1b:a1:3e:d2:3a:e9:00:f7:7c:ab:c5: 7a:0b:7c:c9:19:ef:95:63:f3:f2:ee:83:6c:68:73: 5a:7c:b4:61:97:df:17:cf:d2:9f:c8:32:44:d2:d6: aa:ce:89:f7:6a:2e:0e:db:aa:fc:b6:6d:9f:4d:6a: 72:21:87:c5:ec:04:e6:27:28:b5:ee:d7:72:a1:e5: 4f:dd:df:40:49:10:5a:4e:06:61:99:68:ac:91:66: 3c:31:53:e3:45:05:42:bf:93:ee:89:a1:1a:0d:f9: 30:d2:36:54:f2:45:1b:6a:82:0f:ae:64:13:99:81: 8a:d5:38:55:0b:29:8e:e4:a8:6b:93:0c:72:0b:89: 30:f8:b0:c7:fa:b2:55:5f:97:7a:42:30:4c:41:63: 0c:5e:ab:54:27:79:2a:a5:45:8c:68:cf:0e:e4:55: 23:58:cd:a0:20:31:fd:e4:21:6b:9b:2e:e9:46:bb: 2c:01:5d:35:08:44:05:05:c2:68:99:2a:89:8d:6c: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:D9:77:97:4B:7C:9F:4A:5A:A8:97:78:4D:45:1E:8C:8F:15:C1 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:66:0d:2e:4f:ed:a5:c5:c5:d5:d5:df:e8:9a:c8:bf:3f:fa: 47:31:2c:48:bd:a0:d7:2e:82:31:2b:02:a9:43:c4:9d:3f:49: 35:16:e7:ad:a0:ea:f5:26:7f:40:c1:f1:a0:74:54:fe:4f:9b: 3e:e0:92:cc:ca:64:c1:b2:d0:b4:fc:00:87:f9:ee:7a:c7:a1: 47:9e:9e:4e:c5:ce:a7:69:2d:90:c8:bd:66:93:6b:28:1e:94: 68:b9:89:3c:51:2a:48:1b:0d:79:cb:77:5c:9c:98:bc:3f:0c: 2c:c5:1c:9f:36:91:69:ae:12:54:ee:0f:69:ea:1f:4a:3e:ce: 91:e8:6f:00:2b:9d:01:f0:16:bb:0b:d6:03:9d:05:42:c0:ca: ae:06:a3:aa:fb:7e:90:d2:86:85:08:39:63:dc:3c:b7:4c:44: c6:b1:cc:1d:ec:c8:72:d8:56:5e:6c:fc:92:ea:d2:dd:6d:94: 5e:ef:ef:5b:99:1f:d3:3f:8a:56:c3:ee:b0:7a:4f:f5:06:20: 28:c9:f1:be:bf:5c:7c:55:97:37:9d:79:86:3f:fb:f0:41:5a: 6f:a4:4c:17:07:76:2c:2e:2f:b3:b8:aa:4f:fd:26:58:54:f2: f7:36:43:ce:ff:0d:51:93:1d:a6:8f:e4:9e:9f:7f:af:42:b3: b2:8b:c5:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjYwMzI0MjMzODIxWhcNMjYwMzMxMjMzODIxWjAYMRYwFAYD VQQDEw02OWMzMjA2ZC02ZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ZS2fWfI7KMvIIH8uvzZZJpBctiVRzidBACIenN/H1RMoGp4WFBiHYMW7bd VbWmyhEcX55nzy4yTINJelbZG6E+0jrpAPd8q8V6C3zJGe+VY/Py7oNsaHNafLRh l98Xz9KfyDJE0taqzon3ai4O26r8tm2fTWpyIYfF7ATmJyi17tdyoeVP3d9ASRBa TgZhmWiskWY8MVPjRQVCv5PuiaEaDfkw0jZU8kUbaoIPrmQTmYGK1ThVCymO5Khr kwxyC4kw+LDH+rJVX5d6QjBMQWMMXqtUJ3kqpUWMaM8O5FUjWM2gIDH95CFrmy7p RrssAV01CEQFBcJomSqJjWwRawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWp2XeX S3yfSlqol3hNRR6MjxXBMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApWYNLk/tpcXF1dXf6JrIvz/6RzEsSL2g1y6CMSsCqUPEnT9JNRbnraDq9SZ/ QMHxoHRU/k+bPuCSzMpkwbLQtPwAh/nuesehR56eTsXOp2ktkMi9ZpNrKB6UaLmJ PFEqSBsNect3XJyYvD8MLMUcnzaRaa4SVO4PaeofSj7OkehvACudAfAWuwvWA50F QsDKrgajqvt+kNKGhQg5Y9w8t0xExrHMHezIcthWXmz8kurS3W2UXu/vW5kf0z+K VsPusHpP9QYgKMnxvr9cfFWXN515hj/78EFab6RMFwd2LC4vs7iqT/0mWFTy9zZD zv8NUZMdpo/knp9/r0KzsovFUQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:34:44 2026 by rpki-client