$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: NpHH+snHZcItb6Il61DIM3no4bZQe8Zis17YTPMubVo= Subject key identifier: B7:3F:E7:CE:C4:8B:0B:E2:FE:D3:30:CF:A5:1A:0D:9F:2B:63:0B:BA Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1C15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1BFC Signing time: Thu 26 Mar 2026 16:12:35 +0000 Manifest this update: Thu 26 Mar 2026 16:12:34 +0000 Manifest next update: Thu 02 Apr 2026 16:12:34 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: K4grQHJcpCikmhpGYyT+kXrElK7XZzWEKlhZcqmAw6A=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: j+T6bJd+cSNSQ1iQrWISPs5fEYaHz+YvZS+Tkog1UjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7189 (0x1c15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Mar 26 16:12:34 2026 GMT Not After : Apr 2 16:12:34 2026 GMT Subject: CN=69c55af3-c6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:f2:4f:85:c4:c5:2a:4d:f9:0d:ce:78:06: 7f:bf:52:c8:2b:94:e6:5b:70:8d:0a:1b:fe:2d:16: 89:c0:bf:4a:31:43:b2:b3:0e:70:2b:dd:e9:5b:e6: 71:35:a6:77:80:bf:15:41:51:3e:c3:f7:50:02:8c: c1:bd:c6:fc:35:a8:b4:d1:9e:ac:ae:51:3e:93:0f: 2e:f8:9d:ec:b9:21:83:11:4f:59:4f:2b:23:ac:ef: 06:07:c0:d1:e9:24:3c:df:f0:26:64:86:bf:c8:2f: 94:48:42:57:3e:20:f8:86:b9:0f:5d:8c:de:f6:5b: b4:eb:f3:4c:60:9d:81:b3:ca:b3:05:2a:cf:4d:e0: 7d:df:e1:95:68:36:26:8c:eb:f7:2b:21:35:72:33: ff:8a:35:b8:d7:fe:0a:29:24:48:26:28:bf:00:79: f4:7e:e1:d3:b8:a9:25:e9:00:4a:85:53:44:1f:78: 8c:29:1c:cc:92:44:69:2f:9d:e1:31:af:23:1e:00: 60:8c:cf:2f:9e:bc:fc:ca:0a:99:27:f5:b4:2e:d7: a9:45:11:0a:d5:d9:6d:71:b1:e7:5c:cb:b7:e6:0d: 55:11:73:23:31:69:22:35:10:d9:13:ee:27:35:07: 85:6f:3e:82:10:c3:ba:c6:f7:2a:00:cc:99:b9:d6: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3F:E7:CE:C4:8B:0B:E2:FE:D3:30:CF:A5:1A:0D:9F:2B:63:0B:BA X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:78:62:9b:f7:79:0c:de:4b:0b:cc:44:11:e3:9f:d2:b5: ef:2f:ee:d3:a4:8a:61:96:5f:56:b4:45:2c:9a:80:ff:af:65: 79:01:61:2a:fd:85:b9:a2:0b:1e:7e:2f:69:2b:6a:bb:8d:38: bc:f1:47:c6:5d:2d:2f:79:a7:35:90:1b:eb:14:b5:41:07:8e: 41:04:b3:aa:8d:94:6d:ea:cf:23:6a:7b:5a:d1:df:bf:f1:ec: 35:fb:b9:fa:87:79:8b:e1:96:4d:ac:95:97:b5:3b:78:48:67: d6:46:c8:b9:d3:df:cd:b0:a6:38:e7:f8:06:e5:00:0f:28:2d: 7a:1f:ad:bc:3b:6b:21:9d:77:be:55:9b:22:1d:bc:04:ca:c9: 66:a1:7d:77:2a:56:c9:96:ff:bf:be:62:fc:33:28:f1:e5:01: 28:c2:45:4a:76:8c:2b:8e:8e:72:a0:23:5f:51:43:2c:88:92: fa:5e:9e:55:b4:a3:4b:bf:56:91:a7:86:8f:47:86:70:0a:8f: e5:78:70:9b:2f:b1:9d:0b:47:7c:30:47:d3:2a:85:bf:02:d2: f4:57:b7:f4:74:00:af:2a:55:c2:b5:8c:28:38:9c:ea:3a:4e: 8e:a8:06:7f:4f:20:12:c1:32:d7:40:af:16:81:fa:f5:3f:e8: 72:d5:08:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjYwMzI2MTYxMjM0WhcNMjYwNDAyMTYxMjM0WjAYMRYwFAYD VQQDEw02OWM1NWFmMy1jNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6DyT4XExSpN+Q3OeAZ/v1LIK5TmW3CNChv+LRaJwL9KMUOysw5wK93pW+Zx NaZ3gL8VQVE+w/dQAozBvcb8Nai00Z6srlE+kw8u+J3suSGDEU9ZTysjrO8GB8DR 6SQ83/AmZIa/yC+USEJXPiD4hrkPXYze9lu06/NMYJ2Bs8qzBSrPTeB93+GVaDYm jOv3KyE1cjP/ijW41/4KKSRIJii/AHn0fuHTuKkl6QBKhVNEH3iMKRzMkkRpL53h Ma8jHgBgjM8vnrz8ygqZJ/W0LtepRREK1dltcbHnXMu35g1VEXMjMWkiNRDZE+4n NQeFbz6CEMO6xvcqAMyZudZ2dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLc/587E iwvi/tMwz6UaDZ8rYwu6MB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARDV4Ypv3eQzeSwvMRBHjn9K17y/u06SKYZZfVrRFLJqA/69leQFhKv2FuaIL Hn4vaStqu404vPFHxl0tL3mnNZAb6xS1QQeOQQSzqo2UberPI2p7WtHfv/HsNfu5 +od5i+GWTayVl7U7eEhn1kbIudPfzbCmOOf4BuUADygteh+tvDtrIZ13vlWbIh28 BMrJZqF9dypWyZb/v75i/DMo8eUBKMJFSnaMK46OcqAjX1FDLIiS+l6eVbSjS79W kaeGj0eGcAqP5Xhwmy+xnQtHfDBH0yqFvwLS9Fe39HQArypVwrWMKDic6jpOjqgG f08gEsEy10CvFoH69T/octUI1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:38 2026 by rpki-client