$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json) Hash identifier: okTlueOYcvEzYezEeKiqd9TrmYsutf9wMXIDNFItvsc= Subject key identifier: 44:C5:A5:B7:49:2A:82:52:AE:78:2D:EB:E2:F2:0F:87:35:64:CD:9D Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft Manifest number: 5A Signing time: Wed 25 Mar 2026 06:58:58 +0000 Manifest this update: Wed 25 Mar 2026 06:58:58 +0000 Manifest next update: Wed 01 Apr 2026 06:58:58 +0000 Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: Gwz/lzle5KYys8w84HEZvM5msAN2WTJH3o57ldmvbtA=) 2: BE26E0FE212C11F1B452E7B52D3D8C67.roa (hash: +cI55DQw6yz3OrGX0lcWX+uNwEvHM5akSnCJD58J/jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Mar 25 06:58:58 2026 GMT Not After : Apr 1 06:58:58 2026 GMT Subject: CN=69c387b2-cd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:57:5e:2d:ea:0f:d3:ef:80:db:de:47:9b: ec:76:ab:51:ba:b5:0f:1f:72:0a:c6:81:49:42:f5: 9f:11:dc:c7:e3:dd:7f:4d:96:b8:d7:fd:5f:bf:c6: d1:61:a0:2d:eb:3e:46:e6:0b:4f:d3:7e:b9:9e:56: 7e:8d:d6:c2:3d:80:02:3d:92:79:eb:15:73:af:37: ab:01:86:38:17:6e:6d:61:cf:38:ec:ca:d0:f4:f6: cc:36:85:de:91:07:fb:74:93:7c:40:24:13:fe:b8: b0:db:fa:bd:9c:53:39:c0:c9:ab:5e:0c:ad:68:ca: 0f:f2:21:40:e4:11:cd:fd:8d:d5:13:fd:3b:5f:a3: 24:b4:08:0e:55:d6:35:28:c5:24:f5:fb:24:84:a5: 7d:c3:cc:78:fc:93:d8:88:80:9e:40:e8:92:b4:25: 91:00:e4:13:3c:56:81:d0:46:de:3d:3c:5e:e1:1e: 93:2c:c9:8c:a2:0d:35:df:00:eb:14:89:a4:8b:65: cc:17:e6:ab:d1:85:ef:79:0d:34:23:fd:70:72:a3: 26:ae:33:85:3b:19:64:81:e5:b6:bf:8c:55:1a:09: e2:89:ab:e7:e6:8d:f6:66:c7:a9:30:67:a0:ee:fb: 41:8c:81:9a:66:58:1e:c9:5c:c1:b2:87:58:7c:e6: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:A5:B7:49:2A:82:52:AE:78:2D:EB:E2:F2:0F:87:35:64:CD:9D X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:05:6c:51:b3:b5:8a:76:0c:6a:3a:92:48:9b:50:7f:55:e3: ec:9c:ab:3f:a0:62:53:61:ae:0c:05:26:6a:c2:98:81:f8:19: 93:9f:46:1d:54:80:e2:cb:53:b6:ec:07:e3:e7:40:63:84:a9: a8:9a:da:94:d0:cb:89:4e:fe:3d:45:b1:a1:93:97:88:99:96: d5:3d:e9:40:fe:7f:e6:3c:f0:ce:0b:0d:e4:8a:d0:82:c7:2e: e2:e0:45:c4:6a:28:8b:71:cd:f1:6f:b6:91:18:ca:fb:0f:b5: 33:bd:16:fd:d8:7c:cd:b0:e3:91:db:5b:fa:32:0c:59:64:03: 7c:c3:49:75:3f:86:33:4d:1a:58:5c:93:0d:ce:05:14:78:4f: 06:df:5a:4e:ab:55:95:c2:de:b5:87:74:b3:59:ec:40:14:33: a1:0f:e8:8c:44:a7:18:24:c4:53:90:7f:9d:6f:0e:14:83:65: d8:2e:da:13:63:f0:9f:54:81:17:73:7c:d7:66:a3:04:33:7b: d3:05:c5:95:86:45:63:9f:b4:f5:02:9c:6c:dd:61:f0:d1:37: 6e:3b:73:b4:2a:4d:3d:f6:ad:d0:45:a9:51:9b:81:a8:b4:ef: cb:89:07:91:98:3c:e6:28:1a:4a:e1:41:32:cc:97:33:74:49: 23:7c:d1:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNjAzMjUwNjU4NThaFw0yNjA0MDEwNjU4NThaMBgxFjAUBgNV BAMTDTY5YzM4N2IyLWNkMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7fFdeLeoP0++A295Hm+x2q1G6tQ8fcgrGgUlC9Z8R3Mfj3X9NlrjX/V+/xtFh oC3rPkbmC0/TfrmeVn6N1sI9gAI9knnrFXOvN6sBhjgXbm1hzzjsytD09sw2hd6R B/t0k3xAJBP+uLDb+r2cUznAyateDK1oyg/yIUDkEc39jdUT/TtfoyS0CA5V1jUo xST1+ySEpX3DzHj8k9iIgJ5A6JK0JZEA5BM8VoHQRt49PF7hHpMsyYyiDTXfAOsU iaSLZcwX5qvRhe95DTQj/XByoyauM4U7GWSB5ba/jFUaCeKJq+fmjfZmx6kwZ6Du +0GMgZpmWB7JXMGyh1h85tcNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURMWlt0kq glKueC3r4vIPhzVkzZ0wHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0E4LzJEOThDQzVBQzUwNjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZM SmFvY0hOV25vNFFORTRzMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXBWxRs7WKdgxqOpJIm1B/VePsnKs/oGJTYa4MBSZqwpiB+BmTn0YdVIDiy1O2 7Afj50BjhKmomtqU0MuJTv49RbGhk5eImZbVPelA/n/mPPDOCw3kitCCxy7i4EXE aiiLcc3xb7aRGMr7D7UzvRb92HzNsOOR21v6MgxZZAN8w0l1P4YzTRpYXJMNzgUU eE8G31pOq1WVwt61h3SzWexAFDOhD+iMRKcYJMRTkH+dbw4Ug2XYLtoTY/CfVIEX c3zXZqMEM3vTBcWVhkVjn7T1Apxs3WHw0TduO3O0Kk099q3QRalRm4GotO/LiQeR mDzmKBpK4UEyzJczdEkjfNFu -----END CERTIFICATE-----Generated at Thu Mar 26 22:04:10 2026 by rpki-client