$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: 3HNeNuV2Bp/ePgJccE55Fhb2fBPlpZXKQtXad65libs= Subject key identifier: CC:2D:47:8B:59:EE:D5:15:05:03:EC:94:46:18:75:02:83:DB:FA:15 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 0880 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 0878 Signing time: Tue 24 Mar 2026 20:22:30 +0000 Manifest this update: Tue 24 Mar 2026 20:22:30 +0000 Manifest next update: Tue 31 Mar 2026 20:22:30 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: LxvRv5HRvmMPk3CYcIS1z70fhfsYgWL1pL9GnIivxfI=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: 0TZ+IPVq2PyEH3z0mkv5wkypdQxnIpbwSO1lkLL1ZHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Mar 24 20:22:30 2026 GMT Not After : Mar 31 20:22:30 2026 GMT Subject: CN=69c2f286-ee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:55:d9:97:2c:42:2d:f8:bf:00:f5:9f:cf: 01:16:49:3e:c9:51:9d:09:2a:9c:0a:4f:46:17:0a: fa:53:1f:75:fe:55:e6:5e:3e:44:57:00:ca:7e:26: 96:2e:89:22:52:43:be:83:91:49:a2:d7:ff:02:9e: a7:a1:15:1d:14:5c:76:b7:95:1a:9d:b0:54:5a:ae: 05:1c:69:0e:5e:2f:f7:3a:8c:6d:7d:9e:eb:34:e4: af:3a:1e:bd:38:e7:82:de:b0:ea:a1:4d:fb:4d:77: 8c:63:8d:e7:a2:07:40:60:4a:35:b7:bc:99:a0:a4: 8f:45:91:1b:4d:00:c6:f5:6a:84:14:37:f0:d8:af: 83:f4:54:05:45:f9:62:bb:cf:b3:00:7b:d8:61:53: c6:5a:a8:82:c3:63:08:5f:ec:db:0f:20:ff:cc:a1: 8a:45:d8:3c:66:f2:4b:22:58:62:9e:b7:f5:02:b4: 30:c6:dd:dc:3e:eb:49:dd:94:68:71:94:b7:f8:9b: e6:85:29:ec:0f:e8:74:6d:c5:e2:1a:76:94:07:7a: 00:5b:6d:68:39:85:75:0a:af:5d:78:6a:45:87:9d: 5e:06:07:32:8d:42:b7:c0:4d:2b:85:5b:f3:bd:10: 79:88:d2:c1:62:1c:96:ce:a8:45:7b:83:c5:26:58: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2D:47:8B:59:EE:D5:15:05:03:EC:94:46:18:75:02:83:DB:FA:15 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:67:33:c5:1d:de:30:87:4a:0d:9f:e7:e2:69:90:2a:3f:69: 11:9c:d4:28:35:cd:eb:bf:8c:18:73:0c:48:7d:1a:ca:9b:7f: 4e:4c:ac:ef:7f:0e:c2:a8:f4:84:1d:32:2d:04:c8:fe:f9:ee: 43:b8:d5:f7:fa:3a:95:1d:24:a8:1b:59:ba:db:e2:93:94:fd: 3e:f3:f3:f8:be:54:bf:37:60:45:59:63:48:ba:cd:ca:ca:72: 67:ae:9b:ea:77:b4:76:64:ac:9c:1f:94:c8:b7:e1:fb:3f:da: a4:e4:e0:8f:d1:0e:c0:a6:1a:cc:e5:c9:6c:41:d7:a3:e2:eb: 66:09:3c:5a:d2:f9:25:09:8c:63:6f:89:78:7c:06:3a:72:e6: 4f:49:f9:e1:77:b7:b8:67:14:f1:03:04:5d:c8:62:b2:04:8f: f3:6e:b9:7d:11:0d:0b:42:57:69:ef:0f:db:d1:ad:0d:99:33: 8c:5a:2f:53:6c:04:8b:f6:c1:9b:9c:01:60:95:0a:d3:b4:10: d9:d2:d7:b8:35:10:5e:65:88:95:9f:db:d9:a2:16:8e:fb:64: 89:74:5c:10:1c:f3:eb:ff:ad:b0:65:6e:f5:d5:b5:90:3a:aa: ca:4b:3a:eb:bc:f0:2c:22:41:1c:9c:23:d6:de:da:f5:d7:17: d4:50:07:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjYwMzI0MjAyMjMwWhcNMjYwMzMxMjAyMjMwWjAYMRYwFAYD VQQDEw02OWMyZjI4Ni1lZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuotV2ZcsQi34vwD1n88BFkk+yVGdCSqcCk9GFwr6Ux91/lXmXj5EVwDKfiaW LokiUkO+g5FJotf/Ap6noRUdFFx2t5UanbBUWq4FHGkOXi/3OoxtfZ7rNOSvOh69 OOeC3rDqoU37TXeMY43nogdAYEo1t7yZoKSPRZEbTQDG9WqEFDfw2K+D9FQFRfli u8+zAHvYYVPGWqiCw2MIX+zbDyD/zKGKRdg8ZvJLIlhinrf1ArQwxt3cPutJ3ZRo cZS3+JvmhSnsD+h0bcXiGnaUB3oAW21oOYV1Cq9deGpFh51eBgcyjUK3wE0rhVvz vRB5iNLBYhyWzqhFe4PFJlg5sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwtR4tZ 7tUVBQPslEYYdQKD2/oVMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs2czxR3eMIdKDZ/n4mmQKj9pEZzUKDXN67+MGHMMSH0aypt/Tkys738Owqj0 hB0yLQTI/vnuQ7jV9/o6lR0kqBtZutvik5T9PvPz+L5UvzdgRVljSLrNyspyZ66b 6ne0dmSsnB+UyLfh+z/apOTgj9EOwKYazOXJbEHXo+LrZgk8WtL5JQmMY2+JeHwG OnLmT0n54Xe3uGcU8QMEXchisgSP8265fRENC0JXae8P29GtDZkzjFovU2wEi/bB m5wBYJUK07QQ2dLXuDUQXmWIlZ/b2aIWjvtkiXRcEBzz6/+tsGVu9dW1kDqqyks6 67zwLCJBHJwj1t7a9dcX1FAHJg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:42:46 2026 by rpki-client