$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: OGTnC6tVuaB2dV1t/CkCgVMKoZBChcTA6aiwqFdGxV0= Subject key identifier: F3:4B:10:AA:1E:2E:FB:7F:DA:DD:07:32:4D:ED:AA:EB:DD:72:70:BF Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: 9B Signing time: Wed 25 Mar 2026 06:58:47 +0000 Manifest this update: Wed 25 Mar 2026 06:58:46 +0000 Manifest next update: Wed 01 Apr 2026 06:58:46 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: +eoezLK5OZbhAzvCA/vPkHnCVFIdQ4YsUZM1GgzYTgw=) 2: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=) 3: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=) 4: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=) 5: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Mar 25 06:58:46 2026 GMT Not After : Apr 1 06:58:46 2026 GMT Subject: CN=69c387a7-46e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:e3:73:99:a3:d9:4b:84:da:8e:7d:50:e2: 84:2a:f2:c9:a5:8c:55:11:66:74:80:32:e3:71:e8: c0:5d:66:e4:28:87:bc:42:d6:2d:88:a4:59:2b:6e: fc:bb:a7:fa:c5:99:65:b6:80:d5:63:0c:56:c5:33: a1:04:70:b5:cf:32:05:cf:84:ae:d9:f8:09:99:f2: 91:28:db:db:e6:2a:8d:25:ab:3b:1f:43:9d:85:8f: ad:62:0c:76:1d:0e:86:74:ed:26:02:6d:e7:58:46: c9:e7:58:cd:13:14:c3:37:a4:7a:a7:2e:61:11:9e: b9:91:07:74:ef:32:71:30:74:1e:b2:f0:ec:75:ef: 56:27:e9:f9:5a:47:d6:e4:33:4b:4c:21:23:05:2e: 9c:dd:8c:18:b3:8a:e5:67:1c:8e:5c:f1:7a:b2:de: 3a:e8:eb:0c:56:0c:72:f6:5c:c2:dc:ba:df:31:99: 0d:b2:aa:29:ac:14:75:75:00:e3:ad:21:55:69:d6: d2:96:60:6f:66:61:0d:dc:af:95:3b:1a:f6:87:75: f6:46:df:8e:fa:64:68:1b:98:1e:43:31:22:e9:b9: 2a:99:4f:45:1c:ff:95:16:a2:b2:2d:44:90:42:c6: 8e:cb:f9:92:2c:c7:6b:21:b8:55:7c:d1:3f:43:ae: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:10:AA:1E:2E:FB:7F:DA:DD:07:32:4D:ED:AA:EB:DD:72:70:BF X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:33:ff:16:9d:0c:f1:98:5b:72:15:e6:f9:f5:3e:39:84:93: 4f:87:ca:36:2b:40:7c:aa:0e:87:e4:12:99:1e:92:e4:91:29: d3:7f:6f:09:a2:af:7f:4d:db:91:65:50:15:33:40:b0:c4:b7: f3:2f:cf:ec:ac:b9:e4:73:e6:4a:ab:8d:78:c7:e1:95:f9:36: 5e:73:2e:9f:17:c3:ed:0f:d5:d4:c7:4c:16:eb:e8:2d:65:2f: 8c:be:38:35:0c:04:81:e0:92:6e:3a:35:d7:b9:f9:3f:2a:86: 22:52:b9:a7:8f:0a:e5:19:69:dd:6b:8d:37:28:01:0e:21:a2: 26:35:30:7c:46:d1:f5:5f:26:de:85:08:e5:ee:b3:21:b9:db: cd:aa:e7:e5:97:54:5d:b6:57:41:4b:22:18:04:9e:c9:95:cf: 49:e4:b1:08:d2:1b:50:f7:ad:fb:62:46:91:57:ba:4d:41:17: 9d:f0:b4:85:fb:46:c9:0a:42:be:ba:f8:f5:60:48:e6:dc:4a: 3c:91:f7:74:d8:0c:16:bd:ee:17:60:26:59:3e:b0:62:74:b2: cd:a9:02:b4:4e:3a:c9:3e:e2:4b:bb:d0:fa:7f:6f:f0:8f:81: 92:95:89:f5:aa:d0:ba:ef:83:82:0c:63:3e:f5:a9:0d:d8:fc: 19:32:57:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYwMzI1MDY1ODQ2WhcNMjYwNDAxMDY1ODQ2WjAYMRYwFAYD VQQDEw02OWMzODdhNy00NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxXjc5mj2UuE2o59UOKEKvLJpYxVEWZ0gDLjcejAXWbkKIe8QtYtiKRZK278 u6f6xZlltoDVYwxWxTOhBHC1zzIFz4Su2fgJmfKRKNvb5iqNJas7H0OdhY+tYgx2 HQ6GdO0mAm3nWEbJ51jNExTDN6R6py5hEZ65kQd07zJxMHQesvDsde9WJ+n5WkfW 5DNLTCEjBS6c3YwYs4rlZxyOXPF6st466OsMVgxy9lzC3LrfMZkNsqoprBR1dQDj rSFVadbSlmBvZmEN3K+VOxr2h3X2Rt+O+mRoG5geQzEi6bkqmU9FHP+VFqKyLUSQ QsaOy/mSLMdrIbhVfNE/Q653MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNLEKoe Lvt/2t0HMk3tquvdcnC/MB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfDP/Fp0M8ZhbchXm+fU+OYSTT4fKNitAfKoOh+QSmR6S5JEp039vCaKvf03b kWVQFTNAsMS38y/P7Ky55HPmSquNeMfhlfk2XnMunxfD7Q/V1MdMFuvoLWUvjL44 NQwEgeCSbjo117n5PyqGIlK5p48K5Rlp3WuNNygBDiGiJjUwfEbR9V8m3oUI5e6z Ibnbzarn5ZdUXbZXQUsiGASeyZXPSeSxCNIbUPet+2JGkVe6TUEXnfC0hftGyQpC vrr49WBI5txKPJH3dNgMFr3uF2AmWT6wYnSyzakCtE46yT7iS7vQ+n9v8I+BkpWJ 9arQuu+DggxjPvWpDdj8GTJXig== -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:52 2026 by rpki-client