$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: leOjc57FPFKh0W6e/Ol20gAdXVcpC92HQVHbbFbDBQQ= Subject key identifier: 5E:9D:53:FB:78:DA:EA:0A:D5:5C:17:26:4F:CC:E8:FB:AC:A3:E1:1A Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0ACE Signing time: Tue 24 Mar 2026 19:14:32 +0000 Manifest this update: Tue 24 Mar 2026 19:14:32 +0000 Manifest next update: Tue 31 Mar 2026 19:14:32 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: d5GxxN+mQlC/7bQpfGAT/0uWbOxehc38Ey5zcp1q+50=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: OzzisHqp9aMxr1INfPGQv4pLf3uDSdbaDwDpJkSYQh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: Mar 24 19:14:32 2026 GMT Not After : Mar 31 19:14:32 2026 GMT Subject: CN=69c2e298-d94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:bd:37:80:d0:10:41:d1:61:19:23:cf:ea: 2e:fa:72:cf:e9:39:67:dc:f5:1b:3c:f2:3e:3b:ed: 66:6e:08:ec:9d:3a:0f:f2:e8:08:99:c8:16:92:2b: 85:10:93:07:e8:18:14:08:8e:19:74:02:d2:dd:de: 0e:d9:11:be:8e:77:88:99:90:f9:7f:58:e4:99:f0: 46:d8:6b:1c:11:f0:42:cf:f9:19:59:39:f6:44:11: 7d:3b:ce:d4:18:ac:42:91:30:37:0b:1f:e9:d8:cf: 36:1d:e4:9a:e0:07:a6:2c:12:58:10:2b:ba:5a:b1: b2:a2:1a:a7:e6:44:16:fe:df:aa:f9:5d:80:19:7e: b2:c8:42:06:f9:a7:ef:f1:83:a9:1c:ee:90:63:a9: 03:c5:0e:76:98:8a:49:cb:cb:59:d2:5a:26:ed:a8: 88:41:77:28:3a:00:70:a9:c1:7c:15:2a:cc:de:ee: c3:e8:62:c0:e4:12:83:e4:8a:de:45:6e:c2:ce:18: 2b:dc:73:0d:6c:bf:5e:a8:1b:ff:8c:d2:e1:7f:d2: bd:04:0a:de:60:25:76:05:90:0e:56:b9:9c:fc:a6: 22:6f:17:68:96:13:62:a4:d3:1f:c6:6b:26:e3:66: ca:8b:d6:b6:fd:f1:cd:e3:9b:96:f9:65:e3:82:cb: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:53:FB:78:DA:EA:0A:D5:5C:17:26:4F:CC:E8:FB:AC:A3:E1:1A X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:77:ad:ed:ca:77:c8:4b:4c:3b:55:e8:4b:cb:c9:7d:d1:70: 2b:87:b9:bf:0d:e2:d4:33:e9:ca:75:f5:3b:87:36:52:39:ce: 04:64:b7:df:9b:40:a2:fd:5b:f6:89:ea:94:2f:29:74:7f:36: b8:9f:ad:bd:13:8e:c2:00:ac:92:ad:1f:38:2a:3b:f9:1f:00: 2a:4d:62:4d:db:8d:53:9c:f6:83:06:ea:bf:34:32:9e:9c:41: 87:ff:7a:b3:f8:60:5d:db:4c:a7:b4:7a:b3:a2:8a:1e:18:87: 44:f4:f6:90:23:86:68:54:a0:08:dd:44:92:2e:0c:4c:d0:11: 7c:a9:d3:fe:b5:11:e9:cb:95:df:5c:bd:74:a2:a5:7d:01:08: 1c:5e:2f:26:8e:68:83:17:b5:e7:aa:4b:c1:6a:0d:d3:1d:8f: 3a:a3:7b:ab:e4:ba:20:8f:c4:1e:39:64:cf:0d:e3:ce:61:2d: 53:c1:f5:56:7b:91:1e:5f:ec:d1:48:a9:7d:f0:d9:f4:ff:75: 86:1b:bf:be:36:26:83:b7:f8:6e:b4:20:29:ba:b4:b7:b0:cd: 2a:d4:5f:67:d7:b0:0b:b9:3c:c1:80:57:75:7f:c5:10:f1:6c: 35:88:b8:03:7a:52:5b:4f:44:19:f5:5b:a5:1e:ae:97:ac:5e: 59:f4:ab:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjYwMzI0MTkxNDMyWhcNMjYwMzMxMTkxNDMyWjAYMRYwFAYD VQQDEw02OWMyZTI5OC1kOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXm9N4DQEEHRYRkjz+ou+nLP6Tln3PUbPPI+O+1mbgjsnToP8ugImcgWkiuF EJMH6BgUCI4ZdALS3d4O2RG+jneImZD5f1jkmfBG2GscEfBCz/kZWTn2RBF9O87U GKxCkTA3Cx/p2M82HeSa4AemLBJYECu6WrGyohqn5kQW/t+q+V2AGX6yyEIG+afv 8YOpHO6QY6kDxQ52mIpJy8tZ0lom7aiIQXcoOgBwqcF8FSrM3u7D6GLA5BKD5Ire RW7Czhgr3HMNbL9eqBv/jNLhf9K9BAreYCV2BZAOVrmc/KYibxdolhNipNMfxmsm 42bKi9a2/fHN45uW+WXjgstsDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6dU/t4 2uoK1VwXJk/M6Puso+EaMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnXet7cp3yEtMO1XoS8vJfdFwK4e5vw3i1DPpynX1O4c2UjnOBGS335tAov1b 9onqlC8pdH82uJ+tvROOwgCskq0fOCo7+R8AKk1iTduNU5z2gwbqvzQynpxBh/96 s/hgXdtMp7R6s6KKHhiHRPT2kCOGaFSgCN1Eki4MTNARfKnT/rUR6cuV31y9dKKl fQEIHF4vJo5ogxe156pLwWoN0x2POqN7q+S6II/EHjlkzw3jzmEtU8H1VnuRHl/s 0UipffDZ9P91hhu/vjYmg7f4brQgKbq0t7DNKtRfZ9ewC7k8wYBXdX/FEPFsNYi4 A3pSW09EGfVbpR6ul6xeWfSrwQ== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:35 2026 by rpki-client