$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json) Hash identifier: 8Fk0wsYqc4yZbzoJ6G4i7rYv7hjv2w1YbAvVZrbzVdA= Subject key identifier: 6F:79:C5:A0:D8:C5:41:8F:EF:72:53:32:BD:CB:45:E8:A6:F1:00:9E Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 354A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft Manifest number: 3538 Signing time: Tue 24 Mar 2026 14:43:48 +0000 Manifest this update: Tue 24 Mar 2026 14:43:48 +0000 Manifest next update: Tue 31 Mar 2026 14:43:48 +0000 Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: gfBU2j/rb0CEAYy63iLoSNI45r0CqVeBfkqyvISm93Q=) 2: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: yOZ7NWihMQh2xMOicbiIAZG+/dVYwm+tNO5GsESSJA4=) 3: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (hash: CHdRjKAYDzl4mARbLMEIedXV1bESXGd76YlTxW4AhVo=) 4: 929D25381D1711F1981A78170E3D8C67.roa (hash: i9GKuEAC1w7Uzsve2QE3rzgfDee7AvdLIQUdi85I8+s=) 5: 4821776AD9A211F092913C6268D3641D.roa (hash: Sy1HvppFOycihdTszz/358rIRt69yzzeT9izOzy0CC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13642 (0x354a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: Mar 24 14:43:48 2026 GMT Not After : Mar 31 14:43:48 2026 GMT Subject: CN=69c2a324-f200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:88:c5:1d:d7:7e:8e:44:9c:48:77:0c:f8:13: 79:96:7d:c5:ca:54:22:73:72:e0:33:ba:54:d6:da: b9:92:13:55:bf:01:67:5e:09:3a:f9:e5:d1:d5:28: 05:50:3f:03:10:63:a7:99:42:49:71:24:99:b1:cf: 3d:ea:76:71:c3:81:76:91:a2:5e:ae:f8:45:d9:fb: 03:0b:c7:d8:80:7e:6f:50:0d:ae:e2:b1:1b:8e:bd: 6b:f8:b4:ed:ca:8f:a6:0a:ff:17:af:ac:b0:8d:b0: b9:53:57:ae:2d:11:2c:3c:62:94:dc:60:c3:22:fd: d9:7b:80:10:34:96:c4:25:f3:fe:80:6c:1f:28:dd: 56:46:09:0b:e3:24:24:02:38:68:11:c2:ca:d3:4b: 76:22:3c:45:ff:e0:7f:e6:56:f3:26:cc:ae:d2:a1: 2e:be:40:0f:39:8d:75:a3:73:68:51:b0:75:c8:de: f6:a3:3a:8f:99:ad:39:a1:0a:1b:b3:4f:ef:49:64: e8:85:5e:42:72:53:8b:1b:86:6b:82:87:d9:d9:5e: 33:60:07:83:34:b9:56:e2:89:34:8d:18:39:0c:29: ce:17:4e:58:f9:e0:22:fe:be:00:98:72:6c:fa:db: c9:e2:40:f4:91:3b:bf:c6:8c:bb:45:94:5c:da:70: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:79:C5:A0:D8:C5:41:8F:EF:72:53:32:BD:CB:45:E8:A6:F1:00:9E X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:87:2e:db:80:f5:d5:55:c8:21:28:b6:6c:ac:1e:a6:c0:f1: db:28:e6:6f:1e:67:06:43:c4:ca:9f:5e:98:cf:7d:0a:3d:95: 4e:9e:79:0d:75:3e:d9:86:ca:a4:60:79:eb:61:77:e8:3a:5e: 98:c9:84:e1:4a:84:a1:c1:cb:3d:5a:2a:34:0d:54:e3:a3:00: 99:ca:b6:d5:26:f3:3e:91:92:d7:df:ac:2f:5f:a5:ba:f9:5e: 3c:ee:b7:95:8d:30:86:3c:ef:7a:5e:64:13:88:f8:86:d7:ba: a4:cc:95:12:c8:96:45:c5:fb:0b:74:51:ef:61:01:0e:91:6c: 1a:86:f4:1f:84:0c:42:57:11:95:9d:ea:c2:f2:08:f9:d3:e0: 25:7b:31:21:6d:6c:9a:f4:06:81:66:4e:2f:2d:8e:08:70:63: c5:67:b8:ae:a4:48:da:23:b0:9d:fb:a5:ee:db:cf:57:ba:58: ce:ff:3d:86:fc:16:92:b6:c8:17:b1:96:e7:5f:77:e8:4c:b1: 23:5d:cb:e1:42:5c:1f:e3:60:e7:ff:50:ab:c9:e3:ee:51:e7: 29:a5:15:68:0e:16:d6:7e:94:e2:3b:be:94:d8:1d:af:e1:53: ed:ac:9d:dc:66:64:e2:80:cf:2d:a4:2b:7b:6c:77:40:65:fb: 65:f9:19:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjYwMzI0MTQ0MzQ4WhcNMjYwMzMxMTQ0MzQ4WjAYMRYwFAYD VQQDEw02OWMyYTMyNC1mMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ojFHdd+jkScSHcM+BN5ln3FylQic3LgM7pU1tq5khNVvwFnXgk6+eXR1SgF UD8DEGOnmUJJcSSZsc896nZxw4F2kaJervhF2fsDC8fYgH5vUA2u4rEbjr1r+LTt yo+mCv8Xr6ywjbC5U1euLREsPGKU3GDDIv3Ze4AQNJbEJfP+gGwfKN1WRgkL4yQk AjhoEcLK00t2IjxF/+B/5lbzJsyu0qEuvkAPOY11o3NoUbB1yN72ozqPma05oQob s0/vSWTohV5CclOLG4ZrgofZ2V4zYAeDNLlW4ok0jRg5DCnOF05Y+eAi/r4AmHJs +tvJ4kD0kTu/xoy7RZRc2nC+pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG95xaDY xUGP73JTMr3LReim8QCeMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdFOC83QTBGRTdGQTFEOTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRC TEpmQzNPeDhrRzVoclRKYXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUocu24D11VXIISi2bKwepsDx2yjmbx5nBkPEyp9emM99Cj2VTp55DXU+2YbK pGB562F36DpemMmE4UqEocHLPVoqNA1U46MAmcq21SbzPpGS19+sL1+luvlePO63 lY0whjzvel5kE4j4hte6pMyVEsiWRcX7C3RR72EBDpFsGob0H4QMQlcRlZ3qwvII +dPgJXsxIW1smvQGgWZOLy2OCHBjxWe4rqRI2iOwnful7tvPV7pYzv89hvwWkrbI F7GW51936EyxI13L4UJcH+Ng5/9Qq8nj7lHnKaUVaA4W1n6U4ju+lNgdr+FT7ayd 3GZk4oDPLaQre2x3QGX7ZfkZ3A== -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:11 2026 by rpki-client