$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: z/VdHn8N9d340lnlk44jOyqm6y/IlvOkM16hrErPy3A= Subject key identifier: FD:50:51:17:CD:5B:A8:D7:49:E6:BD:0E:4D:FA:D2:0A:FE:F5:A3:56 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 01D6 Signing time: Wed 25 Mar 2026 03:02:03 +0000 Manifest this update: Wed 25 Mar 2026 03:02:02 +0000 Manifest next update: Wed 01 Apr 2026 03:02:02 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: oHUAfNYm5amAfkOA5Hy24veee4ATirjqJ4yS3Kgf1ZM=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 3: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Mar 25 03:02:02 2026 GMT Not After : Apr 1 03:02:02 2026 GMT Subject: CN=69c3502b-5ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:25:1b:96:ec:9f:63:df:d6:04:91:10:76: 05:69:e6:af:7f:88:05:f1:dd:8f:6a:8f:ba:72:79: c9:fd:d8:19:ba:a6:75:a5:85:36:b6:a5:5f:99:74: f2:59:be:6f:89:17:95:5a:54:89:4b:80:d1:58:bc: 32:f9:0a:75:95:19:53:78:fc:a7:c3:e9:02:22:46: d0:59:76:ae:20:46:fd:b6:dd:08:88:66:3a:ac:f2: 8a:bc:3d:6e:56:73:8b:e8:28:16:03:fa:02:8a:3d: 26:36:dd:f6:f4:5a:39:90:ff:2c:c4:3b:2c:4e:89: 0c:de:0d:ca:c4:59:f3:6b:22:03:98:bd:5f:b7:99: 0b:4b:d1:d4:dc:5d:3b:b2:b4:09:cc:2f:c7:0c:01: 21:41:18:ab:05:5a:d3:7b:a6:32:11:2a:3f:d2:bd: 02:cf:8f:e2:a4:90:33:09:82:77:df:cd:c0:ea:72: f6:c6:1b:32:5e:82:4c:cb:5f:7b:41:84:04:49:d1: 15:6b:37:f3:03:bc:2c:77:3b:7f:21:22:6b:8f:90: 3f:7a:db:26:c6:ce:51:ef:af:08:a9:10:39:98:5c: f9:f2:ad:03:fb:6d:4b:0d:69:e7:c1:6a:51:f1:da: d1:16:8f:fd:eb:a8:f5:ba:b2:3c:07:f4:b5:0e:3a: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:51:17:CD:5B:A8:D7:49:E6:BD:0E:4D:FA:D2:0A:FE:F5:A3:56 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ef:7b:db:e3:04:bd:d8:8f:54:62:10:17:6a:9c:3a:45:dc: 4e:05:87:05:a3:39:03:61:52:ca:e3:f7:4b:ef:13:8c:e3:9f: c4:78:20:fd:6d:fb:77:f6:5f:12:e2:5f:44:bc:62:4c:7f:c1: 01:ff:ad:67:c9:d3:b7:13:44:54:4c:84:0e:eb:31:5b:a0:8c: 04:26:53:df:95:a6:df:d7:70:8e:82:39:07:20:17:e4:79:20: c1:6a:13:71:4f:5a:23:11:bd:1e:1d:79:75:9b:ef:c1:8a:32: d8:05:85:04:f5:77:2e:23:ce:6a:75:67:01:ad:23:20:f8:6b: 09:b0:7c:d6:9d:81:9c:4d:c0:0d:1a:69:43:01:b2:f1:59:e5: 47:91:44:e2:3a:fd:97:39:da:1c:42:7d:ae:50:b2:d7:8d:a9: 98:d8:39:41:a6:f2:74:f7:55:34:f2:21:6c:23:73:56:bf:81: dc:c0:83:cd:cf:cc:95:58:e9:8c:d4:fe:5f:a6:90:6a:9c:41: 3d:13:a5:a6:03:92:6d:13:4d:7a:b8:f0:a3:05:f1:c4:85:5c: f8:31:3d:39:dc:db:04:cd:3e:20:19:9f:17:a3:b9:a2:18:9e: 6d:a2:98:22:fc:5c:4a:47:56:ca:0d:2e:2c:c7:3e:5d:26:57: 7b:91:4c:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwMzI1MDMwMjAyWhcNMjYwNDAxMDMwMjAyWjAYMRYwFAYD VQQDEw02OWMzNTAyYi01ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHYlG5bsn2Pf1gSREHYFaeavf4gF8d2Pao+6cnnJ/dgZuqZ1pYU2tqVfmXTy Wb5viReVWlSJS4DRWLwy+Qp1lRlTePynw+kCIkbQWXauIEb9tt0IiGY6rPKKvD1u VnOL6CgWA/oCij0mNt329Fo5kP8sxDssTokM3g3KxFnzayIDmL1ft5kLS9HU3F07 srQJzC/HDAEhQRirBVrTe6YyESo/0r0Cz4/ipJAzCYJ3383A6nL2xhsyXoJMy197 QYQESdEVazfzA7wsdzt/ISJrj5A/etsmxs5R768IqRA5mFz58q0D+21LDWnnwWpR 8drRFo/966j1urI8B/S1DjqjiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1QURfN W6jXSea9Dk360gr+9aNWMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT+972+MEvdiPVGIQF2qcOkXcTgWHBaM5A2FSyuP3S+8TjOOfxHgg/W37d/Zf EuJfRLxiTH/BAf+tZ8nTtxNEVEyEDusxW6CMBCZT35Wm39dwjoI5ByAX5HkgwWoT cU9aIxG9Hh15dZvvwYoy2AWFBPV3LiPOanVnAa0jIPhrCbB81p2BnE3ADRppQwGy 8VnlR5FE4jr9lznaHEJ9rlCy142pmNg5QabydPdVNPIhbCNzVr+B3MCDzc/MlVjp jNT+X6aQapxBPROlpgOSbRNNerjwowXxxIVc+DE9OdzbBM0+IBmfF6O5ohiebaKY IvxcSkdWyg0uLMc+XSZXe5FMfw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:59 2026 by rpki-client