$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft File: Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json) Hash identifier: xDtRXgr9pbT0W9REjcfltXSZLM9sMcuBcfd/GqEcMAM= Subject key identifier: AA:30:61:14:2C:A3:EB:74:BA:C2:4F:9D:A4:C4:8A:7D:CC:C8:FB:56 Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22 Certificate issuer: /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft Manifest number: 09 Signing time: Wed 25 Mar 2026 08:20:44 +0000 Manifest this update: Wed 25 Mar 2026 08:20:43 +0000 Manifest next update: Wed 01 Apr 2026 08:20:43 +0000 Files and hashes: 1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: 3LQLdohBWbWM+lUAK3V1dv6d9LVsxeEzOb2AIGyXzz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022 Validity Not Before: Mar 25 08:20:43 2026 GMT Not After : Apr 1 08:20:43 2026 GMT Subject: CN=69c39adc-cc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:13:0d:8a:c2:dc:8a:98:2d:e4:e4:8e:76: 1a:73:dc:32:78:c3:85:ce:6c:b2:fd:29:de:b0:ff: 03:ad:69:43:75:39:20:70:db:9d:0b:21:ca:0a:0f: 8e:19:03:90:62:c2:2f:aa:1b:ad:1e:21:39:9c:21: 52:8c:6c:31:d3:80:9b:dd:67:80:ab:06:f5:a4:0c: 15:92:a0:cb:f9:80:67:e9:bf:4b:be:b3:03:3a:59: 4f:a0:19:6e:aa:c1:89:1f:8c:92:cf:f6:82:fa:c3: 4f:18:50:de:eb:c4:64:75:34:a6:b1:b6:d5:67:34: 8e:c2:b2:90:4d:06:59:f4:0b:6a:d9:4e:4b:11:75: fd:d6:b8:34:74:58:c7:2b:78:0a:45:42:2c:ab:62: 01:ba:b2:7f:02:36:92:3f:38:67:cd:f2:e1:70:ad: e1:d5:20:ba:91:1d:9c:6a:b9:52:08:b0:81:74:0c: e2:34:3a:95:e3:96:de:43:77:3f:0c:af:b2:9d:c5: 2e:9b:1b:68:be:8c:d7:a0:d9:b3:ac:71:0a:a7:b3: 88:54:5a:d1:de:a6:53:2f:91:d0:7b:5e:e9:e2:2d: d8:d6:1b:75:90:a9:e5:7f:46:58:0c:22:10:a2:80: ba:8c:be:9e:42:4f:9e:ca:3f:28:33:a6:53:76:2e: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:30:61:14:2C:A3:EB:74:BA:C2:4F:9D:A4:C4:8A:7D:CC:C8:FB:56 X509v3 Authority Key Identifier: keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1f:28:35:f2:ca:cf:26:35:2e:a2:3a:6e:7f:ea:b3:95:a7: 04:b4:2e:f2:f1:06:0b:a8:64:78:a1:e8:02:d5:84:02:36:54: b7:0c:66:80:7e:03:70:09:67:5a:92:f0:d5:03:a9:25:d7:dd: 8a:26:38:26:c7:36:af:5e:e2:a2:75:d0:46:a3:8d:84:88:bb: be:4c:6f:1f:19:52:f8:73:f0:62:a1:93:6f:14:5e:ee:5c:8d: 45:5b:ee:15:a6:b9:7d:ed:84:de:d1:5d:d7:63:ac:cf:40:6f: af:d3:e5:92:a2:18:84:fd:88:52:f7:07:3a:eb:7d:54:67:ec: 98:db:37:f6:e2:5b:1d:cb:9d:e0:fa:d6:f3:e1:82:ed:02:c6: 63:74:87:54:c6:ef:be:b0:ce:25:0a:b5:93:c2:ad:e9:fc:84: 84:d3:12:9d:02:ae:9c:31:0f:d4:e2:a1:2d:f5:95:1d:80:fb: bd:f4:bb:1f:9b:7d:f8:7e:38:85:18:e3:bb:03:83:e6:f5:02: 5b:e6:1b:c5:46:15:64:fb:1c:57:48:8d:7a:90:ce:d9:e6:c5: e8:50:06:85:db:67:32:78:05:a8:f0:63:ad:bd:89:f2:a7:b5: 58:d9:84:46:4f:fe:2a:11:de:2c:2b:3c:1d:16:00:08:90:94: 85:46:62:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjAzOTExMC8GA1UEBRMoNjNDNDA0MkMyRTU4MzJFODM5NTFBMDU0NjVFODgxRDZB N0RERDAyMjAeFw0yNjAzMjUwODIwNDNaFw0yNjA0MDEwODIwNDNaMBgxFjAUBgNV BAMTDTY5YzM5YWRjLWNjNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSmxMNisLcipgt5OSOdhpz3DJ4w4XObLL9Kd6w/wOtaUN1OSBw250LIcoKD44Z A5Biwi+qG60eITmcIVKMbDHTgJvdZ4CrBvWkDBWSoMv5gGfpv0u+swM6WU+gGW6q wYkfjJLP9oL6w08YUN7rxGR1NKaxttVnNI7CspBNBln0C2rZTksRdf3WuDR0WMcr eApFQiyrYgG6sn8CNpI/OGfN8uFwreHVILqRHZxquVIIsIF0DOI0OpXjlt5Ddz8M r7KdxS6bG2i+jNeg2bOscQqns4hUWtHeplMvkdB7XuniLdjWG3WQqeV/RlgMIhCi gLqMvp5CT57KPygzplN2LgZFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqjBhFCyj 63S6wk+dpMSKfczI+1YwHwYDVR0jBBgwFoAUY8QELC5YMug5UaBUZeiB1qfd0CIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MDM5Lzg0MDc1MkYyMUQ1 NjExRjE5NjUzRjY1ODIzM0Q4QzY3L1k4UUVMQzVZTXVnNVVhQlVaZWlCMXFmZDBD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWThRRUxDNVlNdWc1VWFCVVplaUIxcWZkMENJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MDM5Lzg0MDc1MkYyMUQ1NjExRjE5NjUzRjY1ODIzM0Q4QzY3L1k4UUVMQzVZTXVn NVVhQlVaZWlCMXFmZDBDSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvHyg18srPJjUuojpuf+qzlacEtC7y8QYLqGR4oegC1YQCNlS3DGaAfgNwCWda kvDVA6kl192KJjgmxzavXuKiddBGo42EiLu+TG8fGVL4c/BioZNvFF7uXI1FW+4V prl97YTe0V3XY6zPQG+v0+WSohiE/YhS9wc6631UZ+yY2zf24lsdy53g+tbz4YLt AsZjdIdUxu++sM4lCrWTwq3p/ISE0xKdAq6cMQ/U4qEt9ZUdgPu99Lsfm334fjiF GOO7A4Pm9QJb5hvFRhVk+xxXSI16kM7Z5sXoUAaF22cyeAWo8GOtvYnyp7VY2YRG T/4qEd4sKzwdFgAIkJSFRmKt -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:55 2026 by rpki-client