$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft File: yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json) Hash identifier: 4qy2EdVNtq+1hA8m4a4qHm6o85F7ZSHbc6rbEHBmaLs= Subject key identifier: E5:45:9A:BC:F7:A7:68:CD:66:51:82:CA:FD:8D:00:15:F7:B4:EA:3A Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70 Certificate issuer: /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft Manifest number: 1C Signing time: Wed 25 Mar 2026 08:08:32 +0000 Manifest this update: Wed 25 Mar 2026 08:08:32 +0000 Manifest next update: Wed 01 Apr 2026 08:08:32 +0000 Files and hashes: 1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: 8pLYPzDSka5eOwGkj44WQ1LFayZ6mez6L0UtgUIKKE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70 Validity Not Before: Mar 25 08:08:32 2026 GMT Not After : Apr 1 08:08:32 2026 GMT Subject: CN=69c39800-c999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:36:0c:48:7e:2e:06:c3:42:82:b0:67:eb: fd:3c:eb:5e:d5:84:37:4c:4c:a2:54:7f:ff:af:c0: 5a:f8:3d:6e:d3:f1:1c:ae:cd:68:3d:78:ef:f8:19: 25:b2:5a:76:64:2f:79:2b:ef:6a:37:d8:b3:db:3e: 89:90:8e:c5:b5:07:9a:ff:eb:8e:12:2d:1f:ec:6e: 72:94:8c:42:90:c5:2f:1c:07:95:66:1d:34:e2:4a: e5:2f:ac:82:e1:30:73:a5:09:fa:61:a8:44:7d:77: 46:32:d1:66:a6:97:83:bf:6e:93:4b:71:16:51:34: 93:37:fa:01:0b:f0:5c:19:c5:65:d7:26:a5:7a:d8: f7:53:91:b0:58:cd:d6:b5:42:63:19:f6:82:62:16: 4f:30:37:f6:41:a9:80:4d:5a:05:00:4e:e5:f9:d1: 57:7f:3c:17:b3:fe:29:c9:c7:4a:6e:a6:d3:00:3b: f7:e0:d7:e0:ec:5d:95:5b:3f:9b:d3:66:14:dd:88: 1d:04:f0:3b:07:0a:9f:27:b8:2f:a3:fd:d8:af:f9: 14:2c:1b:c9:7a:da:a4:e1:1b:59:06:31:70:a5:b0: 7a:f1:de:33:4b:33:a2:d2:12:b7:b5:15:9b:62:49: 54:d3:5e:22:5a:89:e6:aa:e3:2e:a7:08:52:ac:7c: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:45:9A:BC:F7:A7:68:CD:66:51:82:CA:FD:8D:00:15:F7:B4:EA:3A X509v3 Authority Key Identifier: keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:de:4a:e2:e8:b2:8b:9a:42:d8:3b:9b:86:17:dc:2b:f5:91: cf:ce:a3:13:ef:f9:ed:d6:8b:b0:f1:9e:3a:bd:d9:09:6b:f3: a1:ba:66:6d:ad:ea:48:cf:aa:3e:dd:4d:51:6b:3b:3a:bd:8c: 87:b0:b1:d8:de:77:8c:14:b3:49:45:e7:8d:d5:3b:a8:b7:75: 3b:ad:c6:70:5d:77:b3:ca:f2:d8:54:54:c0:d3:28:b2:45:fe: eb:02:6b:2d:6d:d4:36:ea:ac:b0:c8:66:c0:56:93:1a:c9:46: 53:5e:79:90:2c:13:fa:a4:e0:7c:e0:23:6c:41:2a:c6:2e:4c: 68:21:3a:90:89:4b:b0:e3:3f:a4:08:24:56:f6:3d:ae:eb:e1: 2a:18:d6:69:f7:6f:84:ee:54:63:68:e5:a5:57:f6:aa:b3:9d: 1d:cb:89:d7:ed:f5:47:d8:30:1b:4a:10:c7:d4:a4:b9:bd:ab: e2:1e:ea:93:d3:4c:42:a1:04:2e:a1:86:c3:90:0b:9a:be:22: 83:a5:79:20:c8:4c:75:b3:6b:da:9a:52:af:4b:93:98:a9:5f: 26:d6:c1:0c:d4:09:af:2a:39:03:6d:9a:bb:a7:1d:aa:30:23: fe:e1:db:42:50:30:01:e6:26:b5:66:e3:cf:03:90:7e:79:ae: dc:95:3b:01 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDQ5QTExMC8GA1UEBRMoQzk5ODUwQzhDODg2QTdGRkU0NURGMUJBMUQ2NTAyQ0I1 QTY1RUI3MDAeFw0yNjAzMjUwODA4MzJaFw0yNjA0MDEwODA4MzJaMBgxFjAUBgNV BAMTDTY5YzM5ODAwLWM5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAoTYMSH4uBsNCgrBn6/08617VhDdMTKJUf/+vwFr4PW7T8RyuzWg9eO/4GSWy WnZkL3kr72o32LPbPomQjsW1B5r/644SLR/sbnKUjEKQxS8cB5VmHTTiSuUvrILh MHOlCfphqER9d0Yy0Waml4O/bpNLcRZRNJM3+gEL8FwZxWXXJqV62PdTkbBYzda1 QmMZ9oJiFk8wN/ZBqYBNWgUATuX50Vd/PBez/inJx0puptMAO/fg1+DsXZVbP5vT ZhTdiB0E8DsHCp8nuC+j/div+RQsG8l62qThG1kGMXClsHrx3jNLM6LSEre1FZti SVTTXiJaieaq4y6nCFKsfFhPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5UWavPen aM1mUYLK/Y0AFfe06jowHwYDVR0jBBgwFoAUyZhQyMiGp//kXfG6HWUCy1pl63Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzIzNjFBMDJBMDJD QTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9fa1hmRzZIV1VDeTFwbDYz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVpoUXlNaUdwX19rWGZHNkhXVUN5MXBsNjNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NDlBLzIzNjFBMDJBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9f a1hmRzZIV1VDeTFwbDYzQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBA3kri6LKLmkLYO5uGF9wr9ZHPzqMT7/nt1ouw8Z46vdkJa/OhumZtrepIz6o+ 3U1Razs6vYyHsLHY3neMFLNJReeN1Tuot3U7rcZwXXezyvLYVFTA0yiyRf7rAmst bdQ26qywyGbAVpMayUZTXnmQLBP6pOB84CNsQSrGLkxoITqQiUuw4z+kCCRW9j2u 6+EqGNZp92+E7lRjaOWlV/aqs50dy4nX7fVH2DAbShDH1KS5vaviHuqT00xCoQQu oYbDkAuaviKDpXkgyEx1s2vamlKvS5OYqV8m1sEM1AmvKjkDbZq7px2qMCP+4dtC UDAB5ia1ZuPPA5B+ea7clTsB -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:10 2026 by rpki-client