$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: WQTSQutxzrDCmGu7WC1LxGusYMPDRe+o7GTQQIxthXk= Subject key identifier: A2:F2:A5:11:29:AD:83:38:87:E3:94:AC:00:06:8D:97:C3:A6:BA:BD Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 2578 Signing time: Tue 24 Mar 2026 15:41:10 +0000 Manifest this update: Tue 24 Mar 2026 15:41:10 +0000 Manifest next update: Tue 31 Mar 2026 15:41:10 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: WMBOxE9b7agk8TaNYwvq9UhWYMUUoxtkVrwVi6N5wM8=) 2: 04CC562A444E11E88204061CC4F9AE02.roa (hash: UvaAhwggzxiP5BreIlqS+S/h5B1PMRbtiBEtDey1XLE=) 3: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: /APSJPO1WwUNbNz10EJn94BnFWAnDuB94L0jk/7YJvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9625 (0x2599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Mar 24 15:41:10 2026 GMT Not After : Mar 31 15:41:10 2026 GMT Subject: CN=69c2b096-138d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:61:2b:93:73:55:77:12:ef:01:80:7e:ce: 28:eb:fc:7c:8e:46:20:1b:d8:7c:32:7f:46:96:9a: f3:a2:d1:1b:4a:43:47:af:17:d8:d1:6a:46:67:53: c2:21:09:b6:f9:0c:66:f4:4d:b3:5a:53:2a:17:6a: b4:14:cc:35:96:ee:24:fa:bb:95:94:17:96:21:75: b2:6c:70:e5:70:39:1d:dc:be:ec:9c:e1:d7:b4:65: 4c:78:b6:d1:9d:93:74:db:9c:94:f8:1a:7d:5a:62: bc:60:39:b1:92:c0:0b:ca:2b:fd:d8:70:d3:d1:2b: c6:82:db:09:4f:7e:10:7a:aa:49:c7:95:6d:81:ab: b7:47:6f:44:cc:53:3b:aa:dc:60:87:6e:6d:dc:65: ff:2a:98:35:3a:91:d6:b2:98:87:04:78:6d:77:8d: a7:5c:bf:c2:9b:d3:77:8d:48:67:34:25:98:a9:aa: c0:7a:44:31:9b:df:25:13:f2:97:78:a0:9f:a8:6b: 75:23:9b:c9:66:bb:b9:a8:89:56:1a:4c:41:25:a9: 17:b0:94:66:8e:72:e1:9a:f1:1a:57:2b:9e:8a:bf: 20:9e:f5:96:34:af:12:04:0b:6b:3b:8f:71:54:0a: 8d:e6:43:a8:5f:93:f9:62:33:66:82:e2:1c:b8:d4: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F2:A5:11:29:AD:83:38:87:E3:94:AC:00:06:8D:97:C3:A6:BA:BD X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:60:90:5f:bb:c0:38:e1:0d:06:6f:d2:49:40:43:c3:8a:73: 0d:5e:92:ab:dc:f5:f0:ba:59:df:e0:6f:e8:ae:cb:af:ce:84: e4:b9:5e:9b:ed:2f:95:df:57:1f:b5:2c:42:2d:35:5d:0f:63: 85:e8:50:f1:27:67:b8:37:ff:88:5a:e7:ae:ef:d2:c6:f6:14: 5f:ba:6a:60:37:48:56:29:3c:12:ba:50:73:22:6f:1c:01:ab: 15:df:c6:50:1e:5b:b8:00:87:da:16:e4:c3:21:78:91:25:f8: e4:d6:c2:87:2f:24:42:ee:71:36:f2:22:c8:1f:64:8e:05:75: 21:e1:23:9a:cb:28:54:d8:51:85:ad:26:46:0f:df:1b:0b:91: ba:0c:7a:1c:f5:ef:5c:59:6b:74:b8:5e:9c:16:cd:1a:20:83: 4e:23:30:5e:19:ad:29:0c:f2:ea:b9:1d:e2:9f:71:32:34:44: d7:02:dc:33:af:c6:7f:af:e0:18:1a:de:38:a1:e4:5a:28:1b: 03:74:11:da:26:c6:06:2e:5e:8f:40:a9:43:1b:ed:27:7b:38: 9b:f0:7f:ad:d9:7d:af:67:cd:ad:8d:dd:e9:85:06:63:30:72: 52:a8:90:7c:ac:49:b4:32:d6:81:62:85:74:86:4b:09:11:69: 85:3b:60:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjYwMzI0MTU0MTEwWhcNMjYwMzMxMTU0MTEwWjAYMRYwFAYD VQQDEw02OWMyYjA5Ni0xMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6BhK5NzVXcS7wGAfs4o6/x8jkYgG9h8Mn9GlprzotEbSkNHrxfY0WpGZ1PC IQm2+Qxm9E2zWlMqF2q0FMw1lu4k+ruVlBeWIXWybHDlcDkd3L7snOHXtGVMeLbR nZN025yU+Bp9WmK8YDmxksALyiv92HDT0SvGgtsJT34QeqpJx5Vtgau3R29EzFM7 qtxgh25t3GX/Kpg1OpHWspiHBHhtd42nXL/Cm9N3jUhnNCWYqarAekQxm98lE/KX eKCfqGt1I5vJZru5qIlWGkxBJakXsJRmjnLhmvEaVyueir8gnvWWNK8SBAtrO49x VAqN5kOoX5P5YjNmguIcuNRabQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLypREp rYM4h+OUrAAGjZfDprq9MB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2CQX7vAOOENBm/SSUBDw4pzDV6Sq9z18LpZ3+Bv6K7Lr86E5Llem+0vld9X H7UsQi01XQ9jhehQ8SdnuDf/iFrnru/SxvYUX7pqYDdIVik8ErpQcyJvHAGrFd/G UB5buACH2hbkwyF4kSX45NbChy8kQu5xNvIiyB9kjgV1IeEjmssoVNhRha0mRg/f GwuRugx6HPXvXFlrdLhenBbNGiCDTiMwXhmtKQzy6rkd4p9xMjRE1wLcM6/Gf6/g GBreOKHkWigbA3QR2ibGBi5ej0CpQxvtJ3s4m/B/rdl9r2fNrY3d6YUGYzByUqiQ fKxJtDLWgWKFdIZLCRFphTtgiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:26 2026 by rpki-client