$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: o43qriy0nkcmuQr2B/bpKXAY8eR071zwwgwJvuPGV3Q= Subject key identifier: CC:7F:9C:05:3F:E0:B8:18:19:77:F3:A0:04:44:4E:86:04:F6:82:43 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0C01 Signing time: Tue 24 Mar 2026 18:41:18 +0000 Manifest this update: Tue 24 Mar 2026 18:41:18 +0000 Manifest next update: Tue 31 Mar 2026 18:41:18 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: DnRqjxD/2NJIS5hvIfIFzPxFHcPNFV8buwX42uJV2II=) 2: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=) 3: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=) 4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3103 (0xc1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Mar 24 18:41:18 2026 GMT Not After : Mar 31 18:41:18 2026 GMT Subject: CN=69c2dace-f719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:38:fc:d3:b6:19:33:b6:65:3c:d4:7e:cb: 63:5b:1f:1b:cf:29:7d:89:8c:72:95:72:13:79:a7: 6b:10:5d:87:9a:9d:d1:ba:f0:70:20:78:72:09:ff: 18:67:0f:bc:4e:59:be:ad:b8:12:52:44:bf:58:79: 84:6d:d9:80:96:43:91:b6:02:55:85:80:32:b9:2d: 7c:50:db:7a:90:9f:6f:7e:bc:a8:2f:cf:1b:f1:82: 12:5e:1a:16:8e:35:ce:72:3c:7b:6f:de:b7:bc:ae: 34:c4:64:4f:0a:4e:27:5a:3d:d4:0b:b6:01:fe:15: 0e:b5:49:6d:1b:b8:cd:3f:72:f7:4e:cd:d5:e7:24: 15:55:20:02:09:1f:da:40:42:00:85:75:e8:ab:49: 2c:85:61:11:2c:a2:63:a7:c2:55:2b:c6:74:db:a4: f4:a2:08:f6:91:e7:aa:af:70:28:93:83:70:e3:84: ca:8c:ef:cf:67:7e:7a:fd:1e:19:4e:af:16:42:36: 58:8c:80:d8:a4:2e:14:cf:3f:00:cc:f0:b5:ac:b0: d0:bc:a7:bd:94:90:59:cc:4e:c4:b5:f9:46:ac:63: 20:94:29:14:d9:6a:22:2b:d1:7e:d5:de:fe:1c:d0: 0a:54:88:73:78:43:22:f2:3a:64:9e:79:f2:1e:3a: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7F:9C:05:3F:E0:B8:18:19:77:F3:A0:04:44:4E:86:04:F6:82:43 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2e:67:94:12:53:94:4e:20:c5:36:4f:70:49:73:16:3b:90: 52:12:ad:9f:78:bb:69:52:eb:62:f4:82:8e:23:2f:6c:a5:c0: ae:45:df:3c:ac:9a:15:a2:23:f7:35:14:c3:a5:98:05:df:44: 4a:12:4f:9d:b8:05:4a:10:6d:34:05:f7:e3:27:48:3a:2f:be: d7:5b:1d:57:52:61:ef:26:bf:ed:74:db:f7:ab:fe:74:6e:42: 5e:f3:2d:dc:0a:9a:fe:90:b8:b6:d7:d8:c4:4e:34:14:3f:df: 2e:2b:71:30:26:04:b9:47:6f:8c:16:0f:8e:ac:04:a0:9d:c1: f6:c8:78:93:df:a0:65:17:ce:d4:c9:e7:cb:17:38:4d:29:97: 03:13:28:28:a2:af:56:5c:3a:a9:b7:13:b9:75:7c:6d:a4:57: 28:26:dc:4f:1a:4e:d7:0e:c0:72:82:37:b2:94:cd:bb:dd:de: 72:c7:fc:ad:3b:53:c9:29:eb:dd:86:8d:fe:da:15:dc:51:f3: 82:1e:84:1d:a6:d3:06:c5:a4:f0:1d:68:b3:ab:ff:4a:18:f6: f1:f7:e9:36:e6:75:08:c1:e6:09:86:ca:fd:05:df:3a:44:67: 2e:d7:bc:bd:b6:aa:34:b3:95:f1:37:08:2a:5a:76:12:ed:d3: 3d:ac:a9:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjYwMzI0MTg0MTE4WhcNMjYwMzMxMTg0MTE4WjAYMRYwFAYD VQQDEw02OWMyZGFjZS1mNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFo4/NO2GTO2ZTzUfstjWx8bzyl9iYxylXITeadrEF2Hmp3RuvBwIHhyCf8Y Zw+8Tlm+rbgSUkS/WHmEbdmAlkORtgJVhYAyuS18UNt6kJ9vfryoL88b8YISXhoW jjXOcjx7b963vK40xGRPCk4nWj3UC7YB/hUOtUltG7jNP3L3Ts3V5yQVVSACCR/a QEIAhXXoq0kshWERLKJjp8JVK8Z026T0ogj2keeqr3Aok4Nw44TKjO/PZ356/R4Z Tq8WQjZYjIDYpC4Uzz8AzPC1rLDQvKe9lJBZzE7EtflGrGMglCkU2WoiK9F+1d7+ HNAKVIhzeEMi8jpknnnyHjrQ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMx/nAU/ 4LgYGXfzoAREToYE9oJDMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABi5nlBJTlE4gxTZPcElzFjuQUhKtn3i7aVLrYvSCjiMvbKXArkXfPKyaFaIj 9zUUw6WYBd9EShJPnbgFShBtNAX34ydIOi++11sdV1Jh7ya/7XTb96v+dG5CXvMt 3Aqa/pC4ttfYxE40FD/fLitxMCYEuUdvjBYPjqwEoJ3B9sh4k9+gZRfO1Mnnyxc4 TSmXAxMoKKKvVlw6qbcTuXV8baRXKCbcTxpO1w7AcoI3spTNu93ecsf8rTtTySnr 3YaN/toV3FHzgh6EHabTBsWk8B1os6v/Shj28ffpNuZ1CMHmCYbK/QXfOkRnLte8 vbaqNLOV8TcIKlp2Eu3TPayp0w== -----END CERTIFICATE-----Generated at Thu Mar 26 05:39:23 2026 by rpki-client