$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: 5w7wVE7IYoBkjt6wjFk2RmocEQTUhOlAdEGSe07Gzko= Subject key identifier: 1F:8E:89:2B:C3:FA:15:60:E3:24:0B:97:34:30:8A:21:3C:5B:1B:5C Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 020A Signing time: Fri 27 Mar 2026 02:52:47 +0000 Manifest this update: Fri 27 Mar 2026 02:52:46 +0000 Manifest next update: Fri 03 Apr 2026 02:52:46 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: SlbzIwBlSbu4Qt4Wk5/cMOQvWXv+CW9gGDEKCkOnwM4=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 85ndJ25GkWksXdD2wkzQ2/smQ3lSHNtoozH+Avdk67k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Mar 27 02:52:46 2026 GMT Not After : Apr 3 02:52:46 2026 GMT Subject: CN=69c5f0ff-5bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f5:2e:1e:bc:21:5b:87:d5:09:8d:15:fd:c3: c9:3a:02:7c:8d:b0:71:fa:e1:20:42:a6:31:fc:76: 65:6a:bf:e5:d0:0c:ac:67:0b:7c:71:b9:11:a6:3c: f1:59:82:4f:55:62:ed:9f:5c:03:c0:a0:bd:6a:c6: 97:a0:b4:58:ed:ce:c7:0e:6e:54:f7:6d:e6:d2:12: f5:3a:ae:85:fb:0e:42:b3:f2:ce:6a:c8:84:12:d3: 8a:4f:b7:2b:38:e5:86:02:f1:b3:83:50:4f:dd:61: e9:d3:bc:d8:f2:0e:7b:a7:e4:ec:f9:cf:d6:69:df: 3d:0e:41:f9:a0:b8:db:67:11:f3:e4:90:e2:4d:42: eb:a3:aa:d7:da:49:d4:a5:8f:31:75:0a:74:1a:be: f9:6c:18:53:93:2c:fe:9b:32:ce:f6:fc:a1:61:4d: 47:21:48:f4:31:09:f6:09:e8:71:c4:d7:51:4e:af: 25:83:85:31:7b:01:51:cc:71:2f:9c:1c:77:fc:43: f8:7d:e5:0e:9e:32:76:40:95:ac:9e:c9:f1:fe:27: fd:1f:fd:f0:b0:fe:af:3b:10:b8:5b:60:ac:9b:38: 4b:4f:4f:ef:7b:d7:c6:e2:b5:6f:1e:ed:83:9b:e1: f0:b7:18:e4:81:45:40:e0:95:11:00:77:50:36:f2: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8E:89:2B:C3:FA:15:60:E3:24:0B:97:34:30:8A:21:3C:5B:1B:5C X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b1:b9:c7:3b:1f:e0:16:0f:b4:d8:21:86:9b:24:95:67:35: dd:08:74:a9:03:34:fa:c4:cc:f6:77:71:df:5d:7e:f0:22:98: fc:4a:b8:91:b3:c4:82:6a:3e:89:4c:56:b0:a9:29:bc:21:36: 99:9a:7a:3c:9c:b9:63:5d:e0:15:46:16:7d:5a:32:86:59:a1: 5d:55:62:3f:19:53:3b:13:fb:e9:4d:c5:81:5d:9a:9c:23:85: ea:80:65:ba:ed:e4:f0:ff:80:69:3e:cf:c0:69:7f:08:7e:2c: 21:34:7d:32:40:c6:73:69:7b:40:ad:11:88:10:21:20:b6:8f: fa:06:28:05:af:89:48:13:20:a5:d0:31:ac:94:28:99:d7:b2: 56:b9:98:7a:f6:96:e1:1f:86:6c:19:c6:89:f6:4e:0b:01:af: 63:7e:79:8e:15:97:45:95:0a:01:37:93:2e:24:4f:24:64:f8: 27:72:db:ee:56:3f:72:30:0e:8e:9d:6c:97:ad:7d:a4:6e:81: 2e:7a:13:bd:00:71:7a:73:3f:5a:6b:de:32:84:92:4c:e2:18: 06:2c:d9:ee:6d:e8:39:94:59:2f:d4:77:8c:b4:59:76:37:57: bf:f9:fd:b3:c9:bf:67:1a:33:71:fd:69:f4:12:27:66:b8:60: e8:af:dc:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjYwMzI3MDI1MjQ2WhcNMjYwNDAzMDI1MjQ2WjAYMRYwFAYD VQQDEw02OWM1ZjBmZi01YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/UuHrwhW4fVCY0V/cPJOgJ8jbBx+uEgQqYx/HZlar/l0AysZwt8cbkRpjzx WYJPVWLtn1wDwKC9asaXoLRY7c7HDm5U923m0hL1Oq6F+w5Cs/LOasiEEtOKT7cr OOWGAvGzg1BP3WHp07zY8g57p+Ts+c/Wad89DkH5oLjbZxHz5JDiTULro6rX2knU pY8xdQp0Gr75bBhTkyz+mzLO9vyhYU1HIUj0MQn2CehxxNdRTq8lg4UxewFRzHEv nBx3/EP4feUOnjJ2QJWsnsnx/if9H/3wsP6vOxC4W2CsmzhLT0/ve9fG4rVvHu2D m+HwtxjkgUVA4JURAHdQNvJWwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+OiSvD +hVg4yQLlzQwiiE8WxtcMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnLG5xzsf4BYPtNghhpsklWc13Qh0qQM0+sTM9ndx311+8CKY/Eq4kbPEgmo+ iUxWsKkpvCE2mZp6PJy5Y13gFUYWfVoyhlmhXVViPxlTOxP76U3FgV2anCOF6oBl uu3k8P+AaT7PwGl/CH4sITR9MkDGc2l7QK0RiBAhILaP+gYoBa+JSBMgpdAxrJQo mdeyVrmYevaW4R+GbBnGifZOCwGvY355jhWXRZUKATeTLiRPJGT4J3Lb7lY/cjAO jp1sl619pG6BLnoTvQBxenM/WmveMoSSTOIYBizZ7m3oOZRZL9R3jLRZdjdXv/n9 s8m/Zxozcf1p9BInZrhg6K/cSg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:14 2026 by rpki-client