$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json) Hash identifier: gXBfVZhF2EtjksFtF4vWGyAjOYm50WyCNovFtbNwE08= Subject key identifier: AC:DA:58:61:72:05:C5:FB:33:58:45:66:E5:7F:FA:97:62:DF:4A:E0 Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft Manifest number: 0824 Signing time: Tue 24 Mar 2026 20:50:49 +0000 Manifest this update: Tue 24 Mar 2026 20:50:48 +0000 Manifest next update: Tue 31 Mar 2026 20:50:48 +0000 Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: 4NQrVS6k+NSHZMoWyK1u757GRmep6TIZVrPhtnjvQgA=) 2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: mOiKBb1fBKJiEZ/Q4F6SgNQ8FYEX0pSib9+RjzLS4+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Validity Not Before: Mar 24 20:50:48 2026 GMT Not After : Mar 31 20:50:48 2026 GMT Subject: CN=69c2f929-a61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:bb:8f:11:c3:77:e9:79:f0:68:cf:e7:09: 27:e7:2d:5e:51:e9:23:59:aa:87:16:17:c3:47:c5: 55:1a:a1:dc:79:ab:d1:41:95:9d:70:a1:58:0c:70: a8:c7:d6:01:b4:a4:63:c8:67:9e:6f:32:c6:8b:bc: 58:fd:15:25:7d:2b:17:52:c4:ee:03:cb:bf:30:8b: 89:24:6a:14:72:d3:14:ea:97:cb:90:cc:6b:0b:a9: f8:0b:70:91:70:dc:f0:9e:4d:67:5f:b5:68:76:51: cd:b8:dd:5b:9a:02:eb:be:de:37:c8:bb:3c:91:a7: 02:39:6b:dd:c4:a9:28:5f:7b:03:41:2e:f1:17:71: e6:f1:f9:35:b9:67:c6:53:bf:71:43:25:e6:00:a7: f5:43:26:18:04:d7:a8:73:fc:45:14:32:9e:7d:97: c3:3d:cb:37:31:c2:b1:0d:85:62:92:67:22:c4:c8: c4:da:d1:99:a5:b6:b9:49:29:5f:8c:bd:03:67:3a: cd:4e:b9:c6:8a:fe:80:8c:b2:14:34:32:3c:30:38: 75:88:41:50:c7:53:9e:24:ac:53:52:a4:b6:36:62: dc:4e:b8:a0:6d:e8:13:cf:40:a4:dd:92:8e:ef:d8: f0:6b:1f:fe:9d:c7:d5:9b:99:17:7e:3d:cf:72:46: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:58:61:72:05:C5:FB:33:58:45:66:E5:7F:FA:97:62:DF:4A:E0 X509v3 Authority Key Identifier: keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6c:84:25:20:b9:65:4e:15:04:dc:6a:0e:5d:34:c6:cc:b5: c6:1f:ec:b8:ab:92:52:86:23:32:4f:8c:8b:db:d6:ed:58:10: f4:3f:88:62:64:e7:c0:5c:a0:51:b9:ea:7b:6b:6f:68:1a:b4: d4:e8:16:c7:ea:9d:fa:79:f7:ab:a1:d3:63:bb:dc:5e:13:b2: 80:8c:02:03:86:bd:54:70:0d:3d:33:45:45:b1:b3:67:d2:59: de:06:65:6f:af:34:ac:b3:2c:89:56:93:b7:86:9a:ed:6a:1f: 72:4e:a2:6f:d7:04:ae:c1:b5:c2:b7:26:ed:67:b9:01:7c:48: 38:37:70:56:f0:2a:60:a1:9f:61:b6:a8:f0:50:82:1f:74:86: 6d:44:ca:14:ea:cc:06:e7:eb:62:11:15:0c:3f:b0:07:1c:9d: 5f:ac:67:56:08:0c:45:23:71:42:2d:8d:d1:1c:39:f8:65:7a: a8:4c:63:1a:f4:3c:c3:d5:35:2a:23:b2:61:11:8c:fc:61:64: 6e:76:19:88:c3:50:37:cb:82:ad:f4:f1:8a:aa:06:87:ca:52: 00:e3:ed:68:bb:9b:fb:74:3a:18:3e:19:72:5a:c9:de:94:b5: f9:2d:65:4c:b9:78:f0:b6:75:83:85:05:2a:db:0b:72:b3:dd: be:8a:cd:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0 RkU1QjU2NEEwHhcNMjYwMzI0MjA1MDQ4WhcNMjYwMzMxMjA1MDQ4WjAYMRYwFAYD VQQDEw02OWMyZjkyOS1hNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEW7jxHDd+l58GjP5wkn5y1eUekjWaqHFhfDR8VVGqHceavRQZWdcKFYDHCo x9YBtKRjyGeebzLGi7xY/RUlfSsXUsTuA8u/MIuJJGoUctMU6pfLkMxrC6n4C3CR cNzwnk1nX7VodlHNuN1bmgLrvt43yLs8kacCOWvdxKkoX3sDQS7xF3Hm8fk1uWfG U79xQyXmAKf1QyYYBNeoc/xFFDKefZfDPcs3McKxDYVikmcixMjE2tGZpba5SSlf jL0DZzrNTrnGiv6AjLIUNDI8MDh1iEFQx1OeJKxTUqS2NmLcTrigbegTz0Ck3ZKO 79jwax/+ncfVm5kXfj3PckZYXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzaWGFy BcX7M1hFZuV/+pdi30rgMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3 N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0UyMi8xMkZBODExQTE3N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9Q bzQzYTlPLVFUN0JQNWJWa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmyEJSC5ZU4VBNxqDl00xsy1xh/suKuSUoYjMk+Mi9vW7VgQ9D+IYmTnwFyg Ubnqe2tvaBq01OgWx+qd+nn3q6HTY7vcXhOygIwCA4a9VHANPTNFRbGzZ9JZ3gZl b680rLMsiVaTt4aa7Wofck6ib9cErsG1wrcm7We5AXxIODdwVvAqYKGfYbao8FCC H3SGbUTKFOrMBufrYhEVDD+wBxydX6xnVggMRSNxQi2N0Rw5+GV6qExjGvQ8w9U1 KiOyYRGM/GFkbnYZiMNQN8uCrfTxiqoGh8pSAOPtaLub+3Q6GD4ZclrJ3pS1+S1l TLl48LZ1g4UFKtsLcrPdvorN2A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:26:48 2026 by rpki-client