$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: OGlkhZpCVGFU5M/SV63Pl1aO21/mJnOmndzJ0yZ/PhQ= Subject key identifier: AC:FD:5C:F3:3B:12:97:7B:8B:BD:A4:D7:2C:07:B8:D2:82:EC:84:09 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 0547 Signing time: Tue 24 Mar 2026 23:11:38 +0000 Manifest this update: Tue 24 Mar 2026 23:11:37 +0000 Manifest next update: Tue 31 Mar 2026 23:11:37 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: nA3R1Hy06Sjhz9w1xqO//RgqbzPydI5HtkrbinhpNi0=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Mar 24 23:11:37 2026 GMT Not After : Mar 31 23:11:37 2026 GMT Subject: CN=69c31a2a-ba96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:ab:c0:1c:7e:11:d7:56:c5:e4:c5:8c:28: 78:43:0a:88:bc:e8:43:a3:2f:eb:9e:4a:10:d2:0f: 83:94:81:52:11:e9:0f:c8:ee:5a:f7:05:44:b2:54: ab:7f:13:0b:e5:2e:fd:5a:28:84:21:fa:79:7b:cf: 63:34:ff:2c:83:a7:d7:3f:90:0f:77:bc:2a:b9:ed: 65:35:4c:50:d3:a9:bf:10:5d:33:2b:06:d5:2b:e1: a4:32:2a:71:b4:c7:c5:ff:7e:54:a2:cd:0d:55:8b: a7:20:f5:5d:4d:6e:b9:0f:9e:71:13:0f:e0:67:d7: c5:a6:27:35:2a:31:66:7e:64:fb:be:8d:17:a5:37: 1e:a3:be:2c:9a:28:98:33:24:e3:02:43:9f:b3:f6: ae:f9:0d:2b:d5:95:19:4c:ed:92:3d:96:a1:93:2f: b5:87:da:9c:a2:16:7f:53:83:ba:30:f8:4a:3a:c4: 88:11:21:af:80:62:a0:c2:c8:15:b0:a7:5c:34:63: 4e:4c:e4:8a:be:47:bb:97:a4:30:b2:5c:fc:1c:fd: 83:84:4e:83:18:5c:70:67:8a:7e:52:09:a6:bb:6b: 29:04:02:84:0d:85:c0:13:66:49:05:0a:e6:72:8b: 9d:8c:f4:f4:1f:51:18:81:87:55:65:4c:8f:48:ef: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FD:5C:F3:3B:12:97:7B:8B:BD:A4:D7:2C:07:B8:D2:82:EC:84:09 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:eb:fa:f4:2c:f6:70:9d:92:ab:fd:af:55:39:98:b2:0f:b6: 99:0f:a2:74:55:17:94:c0:f2:7f:44:cf:80:57:4f:a4:aa:69: 82:f7:18:bb:a4:dc:70:27:5c:55:86:c0:62:bd:14:95:81:e3: e9:62:05:76:0a:74:fd:f3:9c:f8:15:cc:d9:58:c2:75:7c:8a: 9f:c4:41:7c:70:f9:d0:2b:fa:17:b2:3a:73:c1:45:db:9f:b7: af:a2:e5:4f:94:55:6d:52:44:78:0f:be:02:69:29:f7:b4:e1: ca:ca:24:a3:8e:f1:f0:94:ea:1b:73:03:26:5b:0f:61:fb:87: f0:40:05:1d:73:a0:af:55:ae:ef:ab:34:3e:e2:75:43:f4:01: 8d:89:30:f7:6e:36:6c:8e:52:67:9b:dc:fd:d6:54:12:b8:67: 06:e7:f4:fe:a0:74:51:c0:27:5b:63:3f:f8:37:d9:74:e3:65: 24:b4:a5:74:9a:b0:b4:72:b8:64:b2:73:50:0f:0e:27:5e:2f: d1:cc:e5:b2:0c:5c:32:27:53:fb:20:7a:fd:80:43:90:96:d7: bf:69:56:7e:60:6f:bc:2e:c0:75:2a:8c:15:14:ac:68:bf:18: c3:5e:92:ec:88:f0:27:1a:19:f9:1c:ee:a6:08:be:51:5b:26: a8:7e:42:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwMzI0MjMxMTM3WhcNMjYwMzMxMjMxMTM3WjAYMRYwFAYD VQQDEw02OWMzMWEyYS1iYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneirwBx+EddWxeTFjCh4QwqIvOhDoy/rnkoQ0g+DlIFSEekPyO5a9wVEslSr fxML5S79WiiEIfp5e89jNP8sg6fXP5APd7wque1lNUxQ06m/EF0zKwbVK+GkMipx tMfF/35Uos0NVYunIPVdTW65D55xEw/gZ9fFpic1KjFmfmT7vo0XpTceo74smiiY MyTjAkOfs/au+Q0r1ZUZTO2SPZahky+1h9qcohZ/U4O6MPhKOsSIESGvgGKgwsgV sKdcNGNOTOSKvke7l6Qwslz8HP2DhE6DGFxwZ4p+Ugmmu2spBAKEDYXAE2ZJBQrm coudjPT0H1EYgYdVZUyPSO8/xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKz9XPM7 Epd7i72k1ywHuNKC7IQJMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJuv69Cz2cJ2Sq/2vVTmYsg+2mQ+idFUXlMDyf0TPgFdPpKppgvcYu6TccCdc VYbAYr0UlYHj6WIFdgp0/fOc+BXM2VjCdXyKn8RBfHD50Cv6F7I6c8FF25+3r6Ll T5RVbVJEeA++Amkp97Thysoko47x8JTqG3MDJlsPYfuH8EAFHXOgr1Wu76s0PuJ1 Q/QBjYkw9242bI5SZ5vc/dZUErhnBuf0/qB0UcAnW2M/+DfZdONlJLSldJqwtHK4 ZLJzUA8OJ14v0czlsgxcMidT+yB6/YBDkJbXv2lWfmBvvC7AdSqMFRSsaL8Yw16S 7IjwJxoZ+Rzupgi+UVsmqH5CEA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:00 2026 by rpki-client