$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft File: y1LRcue7pSl4xAN0AnpNpseRZ9g.mft (raw, json) Hash identifier: n5P0klI5EM248KRBV1DR9uDkIO9sAO9F1B+AWQiBiPk= Subject key identifier: 48:5E:FA:37:69:2D:87:83:70:1B:46:E7:13:A4:F4:67:74:6E:F0:1E Authority key identifier: CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8 Certificate issuer: /CN=A9199606/serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft Manifest number: 2B Signing time: Wed 25 Mar 2026 07:53:51 +0000 Manifest this update: Wed 25 Mar 2026 07:53:50 +0000 Manifest next update: Wed 01 Apr 2026 07:53:50 +0000 Files and hashes: 1: y1LRcue7pSl4xAN0AnpNpseRZ9g.crl (hash: KtCf84pmIx2rRNnJjCZWKBYwMrvXyBbRmm/tF3qNXnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8 Validity Not Before: Mar 25 07:53:50 2026 GMT Not After : Apr 1 07:53:50 2026 GMT Subject: CN=69c3948e-877e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:f9:69:f2:fb:ce:21:76:e1:d6:3a:b9:ff: 31:93:c6:d6:95:73:ad:51:42:cb:9e:48:ea:73:81: 7d:88:1f:cb:66:40:f2:29:5c:d2:65:f4:c9:99:32: 0d:2f:04:1d:cb:58:3f:03:08:b8:55:85:96:cb:fd: cf:c1:f8:e5:13:22:99:3e:a1:58:d6:bc:ad:b1:21: ad:98:f2:5a:a4:00:df:93:9e:b0:6a:72:2c:e2:aa: e1:38:15:7c:91:f4:1f:ca:d7:81:3f:a3:a5:c1:77: 79:fb:ae:b7:a8:b0:dd:af:31:44:e3:cd:57:17:72: e4:71:cb:06:a5:72:9c:0b:ed:05:4c:ad:d5:a9:20: ef:41:eb:da:4e:28:a3:3a:77:7d:b8:ca:4e:17:62: 87:a8:ce:ab:0a:96:51:fb:eb:08:5e:c9:85:ef:7e: 59:a1:51:88:6b:17:3c:35:8b:c7:f7:d5:88:7b:da: 02:f9:1b:5c:58:21:12:39:8e:91:5a:1c:34:c4:e2: 98:07:bf:3b:23:a9:8b:20:3e:01:43:98:1c:fb:23: 3e:b1:21:98:2d:e9:e5:51:35:c0:99:13:5d:c4:47: 40:c3:7e:be:c5:a3:d7:df:31:c7:1c:b1:48:a8:1d: 54:61:03:6f:c0:ec:07:6e:2f:14:f5:63:08:ee:ad: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5E:FA:37:69:2D:87:83:70:1B:46:E7:13:A4:F4:67:74:6E:F0:1E X509v3 Authority Key Identifier: keyid:CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:da:61:25:10:6f:53:62:95:16:da:71:d5:53:56:5e:fb: 58:29:2c:a7:97:3e:76:45:8a:46:66:4d:24:0a:c7:ea:5d:a7: 67:53:af:fe:fa:ca:53:48:3f:b6:6e:38:f5:57:f9:68:4e:ab: f2:79:cc:ce:8a:5a:ba:98:a6:ae:72:98:11:f1:93:20:86:57: 74:da:07:b4:10:54:ca:e9:47:45:38:83:d9:b0:ec:0e:0e:a4: ad:52:22:f6:42:bb:53:40:bf:31:0c:d3:74:81:83:51:58:66: 02:4a:06:c9:08:be:d4:fb:d3:f3:d2:62:cd:30:e7:62:b0:24: 3a:10:8c:41:f7:91:a8:1b:ce:e2:1f:12:06:d0:4c:44:c9:44: 19:21:7a:64:5f:6b:9b:d7:1f:06:b2:a1:d1:87:3b:03:f0:02: 64:00:02:28:24:92:68:63:c4:dc:1e:4d:5c:0b:3c:3e:28:c4: c9:97:0a:be:59:9a:0b:6e:03:8d:2f:07:db:3f:ac:f7:cb:9a: e3:e1:0a:52:52:f5:22:7a:c2:52:84:96:16:3f:63:cd:99:56: ed:f3:83:31:c7:d3:cd:38:0f:38:82:cb:0a:b7:bc:11:c3:64: 01:81:a1:9a:97:12:c0:55:71:58:85:82:68:47:e4:2a:19:0a: 38:fa:f2:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTYwNjExMC8GA1UEBRMoQ0I1MkQxNzJFN0JCQTUyOTc4QzQwMzc0MDI3QTREQTZD NzkxNjdEODAeFw0yNjAzMjUwNzUzNTBaFw0yNjA0MDEwNzUzNTBaMBgxFjAUBgNV BAMTDTY5YzM5NDhlLTg3N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0XPlp8vvOIXbh1jq5/zGTxtaVc61RQsueSOpzgX2IH8tmQPIpXNJl9MmZMg0v BB3LWD8DCLhVhZbL/c/B+OUTIpk+oVjWvK2xIa2Y8lqkAN+TnrBqciziquE4FXyR 9B/K14E/o6XBd3n7rreosN2vMUTjzVcXcuRxywalcpwL7QVMrdWpIO9B69pOKKM6 d324yk4XYoeozqsKllH76wheyYXvflmhUYhrFzw1i8f31Yh72gL5G1xYIRI5jpFa HDTE4pgHvzsjqYsgPgFDmBz7Iz6xIZgt6eVRNcCZE13ER0DDfr7Fo9ffMcccsUio HVRhA2/A7AduLxT1YwjurfD9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSF76N2kt h4NwG0bnE6T0Z3Ru8B4wHwYDVR0jBBgwFoAUy1LRcue7pSl4xAN0AnpNpseRZ9gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjA2LzAwMTdFRDk4RUJC MTExRjA4OTIxNkU3QzYwNkY1NkJDL3kxTFJjdWU3cFNsNHhBTjBBbnBOcHNlUlo5 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTFMUmN1ZTdwU2w0eEFOMEFucE5wc2VSWjlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NjA2LzAwMTdFRDk4RUJCMTExRjA4OTIxNkU3QzYwNkY1NkJDL3kxTFJjdWU3cFNs NHhBTjBBbnBOcHNlUlo5Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgpNphJRBvU2KVFtpx1VNWXvtYKSynlz52RYpGZk0kCsfqXadnU6/++spTSD+2 bjj1V/loTqvyeczOilq6mKaucpgR8ZMghld02ge0EFTK6UdFOIPZsOwODqStUiL2 QrtTQL8xDNN0gYNRWGYCSgbJCL7U+9Pz0mLNMOdisCQ6EIxB95GoG87iHxIG0ExE yUQZIXpkX2ub1x8GsqHRhzsD8AJkAAIoJJJoY8TcHk1cCzw+KMTJlwq+WZoLbgON LwfbP6z3y5rj4QpSUvUiesJShJYWP2PNmVbt84Mxx9PNOA84gssKt7wRw2QBgaGa lxLAVXFYhYJoR+QqGQo4+vLk -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:06 2026 by rpki-client