$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft File: YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json) Hash identifier: XyUIAy9zPvoEvW0c5RSb3MFCqDCqFuYVrHW0wFN6jXk= Subject key identifier: BF:55:8B:F1:93:06:46:98:82:E4:82:A1:1F:39:93:80:5F:53:B5:16 Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F Certificate issuer: /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft Manifest number: 68 Signing time: Wed 25 Mar 2026 07:09:01 +0000 Manifest this update: Wed 25 Mar 2026 07:09:00 +0000 Manifest next update: Wed 01 Apr 2026 07:09:00 +0000 Files and hashes: 1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: 9KHhkBF3s+B+SK6ZqgcsQ4etWqOrM0rWRoVRKNhSMHs=) 2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: qwmJMtInrC0IqGGbywIekTKX8KQ9rZiVhjJ+ax1NumM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F Validity Not Before: Mar 25 07:09:00 2026 GMT Not After : Apr 1 07:09:00 2026 GMT Subject: CN=69c38a0d-32da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:98:9a:69:b9:27:0c:e2:51:62:75:70:10: 64:c6:01:08:f4:bf:3b:38:7a:f8:c0:32:55:f2:a3: ac:9d:08:0d:6e:ff:24:c8:12:5c:4e:c4:0d:11:ec: 46:73:15:b4:11:12:18:f1:1e:6d:9e:64:0c:a7:b8: bd:39:35:0a:2f:ad:e5:3c:e2:10:b7:f5:ba:c9:bd: 44:d2:c6:72:de:16:85:f2:c2:6a:ec:a8:08:05:20: 21:37:74:db:4d:4a:26:6b:a7:4f:5c:67:ac:69:6a: c8:12:26:77:61:b3:6d:f4:67:4a:87:aa:c5:e2:25: 5c:2d:c6:e6:55:13:39:68:18:cd:37:3a:e5:69:03: 40:1d:4c:a3:a1:df:37:f8:47:f8:ed:5d:2b:8c:c1: b9:8a:10:24:e9:38:ee:75:c3:d1:96:98:bd:91:00: 4d:e0:53:82:3d:de:9e:7e:32:9c:70:1e:94:4c:cf: 4d:b3:20:f1:34:7d:f9:e2:61:8e:18:51:03:cc:c6: ca:c0:57:bd:93:ad:6c:74:cd:46:46:b2:da:1f:bf: c7:19:69:0b:c2:80:12:ea:4c:ad:80:46:56:f5:af: 98:9e:10:af:23:fd:ef:db:7d:2d:98:ec:c0:ee:83: 80:31:30:3a:51:24:dd:72:de:c6:a1:c3:19:16:6e: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:55:8B:F1:93:06:46:98:82:E4:82:A1:1F:39:93:80:5F:53:B5:16 X509v3 Authority Key Identifier: keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f6:63:1a:46:f6:08:dd:b6:77:ad:9c:3d:54:9b:b0:f8:fd: 73:33:87:22:ed:1c:4a:d1:ed:90:17:4f:6b:73:7f:5a:04:3d: e7:09:cd:52:6c:ea:4b:73:cc:6c:d4:4a:4c:75:c3:a7:9d:c6: ec:7c:da:6e:a1:e5:89:f5:ca:f6:97:17:b5:f0:a3:79:d9:d0: e2:81:9e:e2:d9:52:72:1b:c7:26:f8:c1:7f:37:68:26:fc:e1: 3f:88:4f:da:a1:bf:b7:c7:a0:69:ca:a0:4c:c4:47:2d:d0:5c: f4:c9:53:0b:85:43:f4:34:ff:a8:18:4b:fa:99:77:fa:f7:b7: 1e:6f:b9:9b:8d:33:75:ad:d1:44:ea:05:00:a5:2a:3c:d8:ed: 89:be:11:cb:19:6b:04:27:ee:d0:64:60:f2:12:2f:42:57:84: 4c:11:8a:35:d1:7c:99:f4:d5:98:2c:c3:4a:37:80:ce:f7:c8: 4a:b2:c2:f0:b2:6d:a2:b6:c8:34:e3:3f:1f:5a:75:97:fd:ee: 88:c6:e3:49:85:bd:6f:07:fe:73:39:62:5b:36:f6:de:b3:0a: 5a:78:51:23:89:c9:e3:b9:7d:43:8b:ea:37:6c:90:63:ba:a4: 2f:3d:78:df:89:8c:3f:94:d7:2a:b1:d3:86:9b:ef:2e:4d:e0: 65:8b:c4:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzhGNzExMC8GA1UEBRMoNjIxNTVCQjAwNTlDNERDODYxNTM2Q0IwNTJFQzc1NUJB QjE2NkMzRjAeFw0yNjAzMjUwNzA5MDBaFw0yNjA0MDEwNzA5MDBaMBgxFjAUBgNV BAMTDTY5YzM4YTBkLTMyZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL35iaabknDOJRYnVwEGTGAQj0vzs4evjAMlXyo6ydCA1u/yTIElxOxA0R7EZz FbQREhjxHm2eZAynuL05NQovreU84hC39brJvUTSxnLeFoXywmrsqAgFICE3dNtN SiZrp09cZ6xpasgSJndhs230Z0qHqsXiJVwtxuZVEzloGM03OuVpA0AdTKOh3zf4 R/jtXSuMwbmKECTpOO51w9GWmL2RAE3gU4I93p5+MpxwHpRMz02zIPE0ffniYY4Y UQPMxsrAV72TrWx0zUZGstofv8cZaQvCgBLqTK2ARlb1r5ieEK8j/e/bfS2Y7MDu g4AxMDpRJN1y3sahwxkWbkGtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv1WL8ZMG RpiC5IKhHzmTgF9TtRYwHwYDVR0jBBgwFoAUYhVbsAWcTchhU2ywUux1W6sWbD8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3OEY3LzM2MjI0NzA2OERF RTExRjA4NzQyNjU0MkM0RjlBRTAyL1loVmJzQVdjVGNoaFUyeXdVdXgxVzZzV2JE OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWhWYnNBV2NUY2hoVTJ5d1V1eDFXNnNXYkQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 OEY3LzM2MjI0NzA2OERFRTExRjA4NzQyNjU0MkM0RjlBRTAyL1loVmJzQVdjVGNo aFUyeXdVdXgxVzZzV2JEOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBy9mMaRvYI3bZ3rZw9VJuw+P1zM4ci7RxK0e2QF09rc39aBD3nCc1SbOpLc8xs 1EpMdcOnncbsfNpuoeWJ9cr2lxe18KN52dDigZ7i2VJyG8cm+MF/N2gm/OE/iE/a ob+3x6BpyqBMxEct0Fz0yVMLhUP0NP+oGEv6mXf697ceb7mbjTN1rdFE6gUApSo8 2O2JvhHLGWsEJ+7QZGDyEi9CV4RMEYo10XyZ9NWYLMNKN4DO98hKssLwsm2itsg0 4z8fWnWX/e6IxuNJhb1vB/5zOWJbNvbeswpaeFEjicnjuX1Di+o3bJBjuqQvPXjf iYw/lNcqsdOGm+8uTeBli8R3 -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:31 2026 by rpki-client