$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: 4KaDV57FOHIzT6l7/hf3cyuuGwa2nDyFGOcr3+kEnYI= Subject key identifier: BE:8D:2B:A0:E5:74:CB:1D:63:43:D3:0F:74:D5:8B:0C:70:3C:46:EE Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3528 Signing time: Thu 26 Mar 2026 14:58:31 +0000 Manifest this update: Thu 26 Mar 2026 14:58:30 +0000 Manifest next update: Thu 02 Apr 2026 14:58:30 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: /oxKyowQlJCfopQyHlSHKIXHfc9W161gppEmxEpY5Uk=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13617 (0x3531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Mar 26 14:58:30 2026 GMT Not After : Apr 2 14:58:30 2026 GMT Subject: CN=69c54996-8f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:9e:29:45:b1:9e:b0:20:42:84:d1:aa:2b: bb:c9:79:ac:86:45:2b:5b:04:33:2e:0b:37:ac:2f: 80:97:bd:71:6d:97:d6:9b:3f:cb:7a:1a:a7:12:fd: a8:8c:a9:42:14:27:61:6d:01:38:76:ef:de:d2:ef: eb:76:4a:1a:7d:44:d3:6d:83:8d:44:53:b4:34:ef: 9d:6c:07:8d:9f:a2:38:af:71:cf:49:29:6f:20:c9: 29:5d:88:bc:ca:e0:aa:3e:0c:64:47:95:ea:b9:9b: 90:9a:b1:8e:04:a8:c4:23:a0:4a:a7:61:bc:d6:93: 44:08:31:9e:48:bb:f2:bf:dc:ac:20:c8:0b:f7:ab: 3d:e0:7d:51:ba:15:78:cc:5a:60:c9:2a:82:61:64: 43:12:c7:b7:d0:78:a0:a7:64:24:c5:54:5f:00:5f: bd:e3:b6:05:d8:da:fe:e7:5e:a8:58:06:ad:6d:8e: 73:b7:90:4b:50:56:f3:84:0f:ec:32:e7:fe:d3:57: 93:cb:ad:45:0c:ac:96:98:71:d8:d9:9e:b0:9b:b3: 7c:5c:0f:7e:7e:be:1c:fd:ae:8c:d8:2d:3f:10:f8: 01:36:ef:e4:3b:f9:4e:85:28:fc:5e:04:f0:e8:0b: a8:c5:29:3b:b4:b4:43:32:9c:0b:73:77:2b:d0:a3: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8D:2B:A0:E5:74:CB:1D:63:43:D3:0F:74:D5:8B:0C:70:3C:46:EE X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:30:d1:b1:4a:e2:33:51:26:ee:72:a1:83:fa:b6:1c:31:a9: ba:0b:ae:5b:5f:25:2f:1d:d9:cf:2b:b6:65:a4:8a:13:4a:f7: 29:82:0a:30:d8:17:6c:9e:a8:f8:b9:1c:e1:2f:3c:65:4b:be: cf:8d:e1:e5:92:1f:3a:ff:48:13:99:4f:b1:06:f1:38:8f:80: c9:54:1e:64:dd:7e:fd:80:32:5c:4a:fb:62:2c:b4:d2:a2:1e: d8:4a:46:cd:85:69:cb:ac:00:6d:4a:26:54:9b:80:45:11:40: 1b:aa:d2:57:cb:95:1d:46:07:8d:a4:64:5e:8d:18:30:85:c7: 1e:71:f8:b5:b6:65:56:f9:a4:b2:c3:d2:24:37:98:3a:a7:0b: 91:aa:0e:40:d3:7d:23:fd:19:e6:7b:92:0c:a0:81:ca:7f:a4: 4e:a6:d9:59:a5:d2:76:29:19:65:ab:54:a2:c7:61:98:3a:24: 4b:c0:9b:8d:b6:4a:53:54:3b:1d:ff:10:3f:e4:fd:0c:83:75: 6a:eb:7b:f2:7d:bc:ca:0e:bd:d6:d7:3c:1f:f8:ae:5e:aa:64: 15:27:c7:df:e7:38:8e:6b:6d:21:42:52:f9:cc:fa:ad:01:d5: 73:a8:ce:3d:8f:d3:3a:79:b6:0a:d9:09:9a:9f:75:2a:ad:58: e1:2a:45:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYwMzI2MTQ1ODMwWhcNMjYwNDAyMTQ1ODMwWjAYMRYwFAYD VQQDEw02OWM1NDk5Ni04ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gmeKUWxnrAgQoTRqiu7yXmshkUrWwQzLgs3rC+Al71xbZfWmz/LehqnEv2o jKlCFCdhbQE4du/e0u/rdkoafUTTbYONRFO0NO+dbAeNn6I4r3HPSSlvIMkpXYi8 yuCqPgxkR5XquZuQmrGOBKjEI6BKp2G81pNECDGeSLvyv9ysIMgL96s94H1RuhV4 zFpgySqCYWRDEse30Higp2QkxVRfAF+947YF2Nr+516oWAatbY5zt5BLUFbzhA/s Muf+01eTy61FDKyWmHHY2Z6wm7N8XA9+fr4c/a6M2C0/EPgBNu/kO/lOhSj8XgTw 6AuoxSk7tLRDMpwLc3cr0KODbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6NK6Dl dMsdY0PTD3TViwxwPEbuMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoDDRsUriM1Em7nKhg/q2HDGpuguuW18lLx3Zzyu2ZaSKE0r3KYIKMNgXbJ6o +Lkc4S88ZUu+z43h5ZIfOv9IE5lPsQbxOI+AyVQeZN1+/YAyXEr7Yiy00qIe2EpG zYVpy6wAbUomVJuARRFAG6rSV8uVHUYHjaRkXo0YMIXHHnH4tbZlVvmkssPSJDeY OqcLkaoOQNN9I/0Z5nuSDKCByn+kTqbZWaXSdikZZatUosdhmDokS8CbjbZKU1Q7 Hf8QP+T9DIN1aut78n28yg691tc8H/iuXqpkFSfH3+c4jmttIUJS+cz6rQHVc6jO PY/TOnm2CtkJmp91Kq1Y4SpFyA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:16 2026 by rpki-client