$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: kMQDgX+feXXJ+MtJVl+TB1WJLBGJYyJ0dHN1eSTgDnc= Subject key identifier: 00:07:48:7A:1F:0F:8E:A5:88:B6:3E:A5:F9:A9:52:F9:12:C0:99:37 Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: 014B Signing time: Wed 25 Mar 2026 04:22:38 +0000 Manifest this update: Wed 25 Mar 2026 04:22:38 +0000 Manifest next update: Wed 01 Apr 2026 04:22:38 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: PYl19yKYEgsL+R0irSBug4XurXFmpe1IeSuB5GKC7Bc=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: SKhqrlepkMrk6BddxM6G2PMvfO6t8Ob/zKNcmmPpDSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Mar 25 04:22:38 2026 GMT Not After : Apr 1 04:22:38 2026 GMT Subject: CN=69c3630e-c1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:fd:26:1f:31:26:ff:17:67:8a:2c:6d:3d: ed:5a:54:b5:81:a0:8d:9a:be:95:68:52:0b:4c:60: b4:64:5f:92:70:94:4c:87:10:0d:63:08:ac:72:72: 13:45:8a:45:5e:a8:8e:e3:48:64:3a:c6:96:99:53: 9b:e0:da:c3:af:5a:8e:73:e7:a8:ed:19:e5:04:a1: b5:b8:bb:2c:08:8e:77:ce:db:e5:a2:26:4b:60:f8: 49:59:1b:10:e3:4a:25:4f:03:a5:f4:a8:54:7f:5c: f9:34:21:e5:c4:3e:34:54:18:73:fc:48:e0:25:47: 7b:79:0a:71:65:70:3f:3c:e0:14:3c:d3:ea:d6:3a: da:2c:55:e0:c8:fb:d2:61:ef:eb:a2:ed:ea:fb:31: 61:28:94:76:e0:4c:a3:72:b3:08:c7:05:5f:93:36: 51:9c:d7:49:8a:36:df:0a:ad:91:e4:2f:dc:cc:b5: f3:a1:f5:b1:31:43:0f:1a:a6:85:d0:9f:2d:3b:63: a4:2d:54:90:27:c0:c1:68:29:a0:11:72:02:bd:c2: e2:37:6c:63:ab:ba:6a:43:49:af:57:6b:90:e3:0f: 0d:87:95:6f:70:1c:0c:30:b3:53:d7:86:8b:db:72: ae:b6:11:3c:d1:8f:8d:92:70:a6:56:e3:53:0f:54: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:07:48:7A:1F:0F:8E:A5:88:B6:3E:A5:F9:A9:52:F9:12:C0:99:37 X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f6:59:3b:1c:de:3b:a1:d3:e1:ff:11:95:83:78:1a:e3:5b: 7e:a5:76:bd:37:82:47:b0:c1:6b:ae:cc:ff:94:e0:5f:1c:c1: 5a:3b:a7:a7:f8:d3:07:b1:11:84:ec:3d:f2:0e:a2:a7:81:a9: 08:74:a3:9c:0c:1a:6f:48:0e:96:0c:d7:e0:cf:63:27:c6:1d: af:08:cd:2d:dc:6a:61:30:60:03:e7:10:c9:34:97:fb:60:c0: c1:46:51:07:56:92:05:3d:26:d3:a8:f6:b3:4d:ee:25:38:0d: aa:75:57:26:2a:6d:ac:ee:f1:34:56:7d:2f:5a:c4:a1:ef:ec: 96:27:a1:c4:3c:37:2b:a8:13:7e:c1:8d:af:b5:00:b6:0f:b3: e8:7f:9c:ec:db:78:02:3d:e9:6f:56:98:d2:a4:78:c0:d7:2a: 70:13:50:ae:12:4f:0b:c4:33:76:22:bd:52:9a:b7:82:bd:48: 2b:16:8e:6a:09:3e:ed:19:aa:a4:5a:71:91:3b:a2:12:2e:24: 3c:15:fb:32:ea:9d:9e:b8:6f:d0:eb:ab:de:9a:42:05:9e:83: 47:9d:86:cf:55:c6:b5:f5:20:8e:0f:d0:ab:18:50:16:3c:da: c9:d7:3c:ec:d7:e1:56:ef:4c:a0:37:b2:ee:2f:85:65:ca:79: b4:0f:ea:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjYwMzI1MDQyMjM4WhcNMjYwNDAxMDQyMjM4WjAYMRYwFAYD VQQDEw02OWMzNjMwZS1jMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HD9Jh8xJv8XZ4osbT3tWlS1gaCNmr6VaFILTGC0ZF+ScJRMhxANYwiscnIT RYpFXqiO40hkOsaWmVOb4NrDr1qOc+eo7RnlBKG1uLssCI53ztvloiZLYPhJWRsQ 40olTwOl9KhUf1z5NCHlxD40VBhz/EjgJUd7eQpxZXA/POAUPNPq1jraLFXgyPvS Ye/rou3q+zFhKJR24EyjcrMIxwVfkzZRnNdJijbfCq2R5C/czLXzofWxMUMPGqaF 0J8tO2OkLVSQJ8DBaCmgEXICvcLiN2xjq7pqQ0mvV2uQ4w8Nh5VvcBwMMLNT14aL 23KuthE80Y+NknCmVuNTD1QN6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAHSHof D46liLY+pfmpUvkSwJk3MB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhvZZOxzeO6HT4f8RlYN4GuNbfqV2vTeCR7DBa67M/5TgXxzBWjunp/jTB7ER hOw98g6ip4GpCHSjnAwab0gOlgzX4M9jJ8YdrwjNLdxqYTBgA+cQyTSX+2DAwUZR B1aSBT0m06j2s03uJTgNqnVXJiptrO7xNFZ9L1rEoe/sliehxDw3K6gTfsGNr7UA tg+z6H+c7Nt4Aj3pb1aY0qR4wNcqcBNQrhJPC8QzdiK9Upq3gr1IKxaOagk+7Rmq pFpxkTuiEi4kPBX7Muqdnrhv0Our3ppCBZ6DR52Gz1XGtfUgjg/QqxhQFjzaydc8 7NfhVu9MoDey7i+FZcp5tA/qmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:52 2026 by rpki-client