$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: 5Uilj/B4FTp2nNjegVcFZblpMq5AsYlTTRIB3LNqjLY= Subject key identifier: 34:2D:DF:69:D4:EE:96:66:A5:4B:E4:33:0A:3D:A9:22:8A:9B:29:17 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 0211 Signing time: Wed 25 Mar 2026 02:23:32 +0000 Manifest this update: Wed 25 Mar 2026 02:23:32 +0000 Manifest next update: Wed 01 Apr 2026 02:23:32 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: BzAit/mg53vDgSwJEv+5QQNCGfIgF4xLL0y93CE0dpc=) 2: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: NSXDDAq8nX85x5kt9In+oT+8R1Iyp1p7SGrj1C1gVOY=) 3: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: o7EjUV2YZchqIdy9iUxIZM/t/ml5aY2rZmcv+MlQwaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Mar 25 02:23:32 2026 GMT Not After : Apr 1 02:23:32 2026 GMT Subject: CN=69c34724-0308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:e6:e5:ed:14:71:ee:95:ce:62:f7:98:49: f1:27:5c:c0:f6:c9:21:8b:96:bf:89:e9:be:c5:c9: ff:50:75:31:28:63:19:1e:fe:fc:95:7e:b2:e5:c4: 38:9a:c0:af:e5:62:ce:b3:6e:10:31:6c:90:9a:9d: 55:35:d1:b2:3a:94:d7:bd:fa:13:c7:2b:5a:05:b2: 06:a4:ae:a1:26:3f:7d:10:d9:11:ad:24:fe:ef:d3: c2:7e:d4:7f:dd:0e:7a:cf:7d:23:de:b5:76:36:81: 66:ce:d5:82:af:c2:fa:25:9a:40:e1:15:84:95:52: e9:54:0f:a7:8a:7b:c9:25:24:60:0f:d2:74:03:74: 5b:53:cd:65:62:cc:74:71:df:e0:99:33:9b:63:c1: 9d:ad:c3:ae:06:06:e2:5b:ab:92:7e:0d:1f:df:7b: cf:51:70:03:be:64:94:39:d7:ef:34:7f:07:7f:74: 39:7f:c0:24:b0:7c:00:07:7b:cf:fe:5b:0f:49:68: 04:02:15:21:74:26:39:a7:7b:37:c0:bb:4f:11:de: 2b:60:bd:f9:d4:4d:d3:76:9e:97:b9:47:3f:1e:52: 7e:85:ab:93:00:28:70:c9:f1:6c:57:06:c8:7f:e1: 81:17:ac:3f:52:87:78:cd:be:46:85:8c:8b:34:26: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:DF:69:D4:EE:96:66:A5:4B:E4:33:0A:3D:A9:22:8A:9B:29:17 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e4:50:db:22:ba:07:9d:56:62:3c:81:a4:27:bb:83:31:38: 49:d4:97:2e:60:92:a7:00:a9:fe:b6:11:de:49:bc:53:eb:f9: 1a:cd:ea:b8:b8:10:45:26:6b:d5:8e:e9:ed:35:f2:37:c8:fd: c3:f4:71:68:9d:9b:39:bb:e3:a0:4b:56:1a:3d:78:0d:02:a2: 4c:b0:36:8c:53:37:62:a9:7d:d7:a8:50:6f:6a:ff:9a:b0:14: 66:72:1a:94:3a:52:52:49:ff:8d:f9:7d:ba:19:e1:06:c0:a0: 12:b4:84:58:ac:2f:69:0d:8c:b3:81:9d:3b:ee:bb:33:dc:23: 41:e5:a5:d3:4e:92:0a:f8:13:ba:d7:aa:65:63:d2:d9:d6:50: 0c:e5:94:b1:9d:31:be:c7:b0:50:80:50:7a:45:f0:72:6b:09: 5c:98:71:26:eb:17:84:00:01:d2:dd:3b:97:fb:c4:75:64:e7: 76:9b:98:4a:45:89:d8:8c:81:95:16:e8:2c:c8:dc:16:11:e7: b3:3a:7d:35:ff:24:9e:df:8d:39:3b:13:c7:90:b3:4d:44:6a: 3b:0a:04:ad:4a:c0:92:b0:69:a2:cd:5e:73:ab:32:8e:3c:f6: 63:c7:73:aa:1b:4a:f3:f5:8a:2f:4d:b1:e7:52:e4:00:6f:2f: cf:02:a1:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjYwMzI1MDIyMzMyWhcNMjYwNDAxMDIyMzMyWjAYMRYwFAYD VQQDEw02OWMzNDcyNC0wMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYfm5e0Uce6VzmL3mEnxJ1zA9skhi5a/iem+xcn/UHUxKGMZHv78lX6y5cQ4 msCv5WLOs24QMWyQmp1VNdGyOpTXvfoTxytaBbIGpK6hJj99ENkRrST+79PCftR/ 3Q56z30j3rV2NoFmztWCr8L6JZpA4RWElVLpVA+ninvJJSRgD9J0A3RbU81lYsx0 cd/gmTObY8GdrcOuBgbiW6uSfg0f33vPUXADvmSUOdfvNH8Hf3Q5f8AksHwAB3vP /lsPSWgEAhUhdCY5p3s3wLtPEd4rYL351E3Tdp6XuUc/HlJ+hauTAChwyfFsVwbI f+GBF6w/Uod4zb5GhYyLNCaoSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQt32nU 7pZmpUvkMwo9qSKKmykXMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfeRQ2yK6B51WYjyBpCe7gzE4SdSXLmCSpwCp/rYR3km8U+v5Gs3quLgQRSZr 1Y7p7TXyN8j9w/RxaJ2bObvjoEtWGj14DQKiTLA2jFM3Yql916hQb2r/mrAUZnIa lDpSUkn/jfl9uhnhBsCgErSEWKwvaQ2Ms4GdO+67M9wjQeWl006SCvgTuteqZWPS 2dZQDOWUsZ0xvsewUIBQekXwcmsJXJhxJusXhAAB0t07l/vEdWTndpuYSkWJ2IyB lRboLMjcFhHnszp9Nf8knt+NOTsTx5CzTURqOwoErUrAkrBpos1ec6syjjz2Y8dz qhtK8/WKL02x51LkAG8vzwKhaw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:51:11 2026 by rpki-client