$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: U1t8Lokokk6DkrtIIvd08apDQpk3y6QiZ0ufMrPnrPI= Subject key identifier: 7F:0B:E2:FA:DA:86:E7:1E:C3:02:FF:41:EE:0E:65:7C:D9:FC:8D:6E Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 0896 Signing time: Tue 24 Mar 2026 20:17:54 +0000 Manifest this update: Tue 24 Mar 2026 20:17:53 +0000 Manifest next update: Tue 31 Mar 2026 20:17:53 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: XZ7bunJxzpCD32aez60x0CuqlptUuSVBWoBSfo5Y+Vc=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Mar 24 20:17:53 2026 GMT Not After : Mar 31 20:17:53 2026 GMT Subject: CN=69c2f172-858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:cd:06:d3:a6:fb:24:8f:d8:24:07:91:c1: 91:60:19:78:5b:84:10:f9:d3:e5:f5:68:d7:7f:f0: ad:c8:80:54:fb:02:74:e7:56:52:c3:30:d5:b4:e8: 70:ce:5a:92:7a:e4:5f:0b:02:22:6c:9e:eb:fa:5a: e2:fe:1f:80:bc:da:c6:e7:b7:38:34:19:41:7e:ec: ee:db:2d:b1:91:91:b1:8f:58:d9:5d:e6:dc:7b:96: 62:66:17:ad:91:cb:57:1b:21:ed:d4:4c:e3:1e:3b: df:82:28:67:86:48:10:2f:de:00:5e:3a:df:e5:3d: 66:d7:8a:53:90:ed:87:db:d7:71:0b:61:5a:0c:d7: ca:c0:3f:1d:7f:d6:9d:8b:bd:df:05:08:f3:b3:6f: 13:dc:60:68:ba:3a:84:61:0f:38:11:65:f7:88:e8: a4:e0:0d:53:a7:ad:be:46:80:13:35:c3:bd:f6:d5: 21:b1:e5:c2:c5:fc:64:f6:a4:53:21:f3:cd:bd:09: 9c:4d:be:28:f6:b2:26:fa:3a:a9:2b:19:98:a7:bc: a4:6d:8f:8f:c7:36:98:6b:5c:0c:eb:d2:43:50:16: 78:9b:b0:cd:62:ea:7f:93:e1:fa:5d:d8:bb:30:97: 6e:20:d3:4f:10:cb:c6:fb:64:9d:59:ee:a7:15:30: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0B:E2:FA:DA:86:E7:1E:C3:02:FF:41:EE:0E:65:7C:D9:FC:8D:6E X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:88:ed:e4:3d:91:75:8e:57:ec:88:03:e7:d2:45:65:8b:22: 23:90:c9:0f:83:95:3d:2c:ea:70:e4:16:df:65:b3:a4:e8:13: f0:65:0b:bb:ba:13:2b:78:c8:e6:1b:40:78:47:24:0e:e2:83: 02:b9:48:69:4d:2c:ac:2b:f3:e8:83:99:4c:ee:d1:89:b2:bb: a7:0d:d3:17:80:f5:49:c2:33:2a:5b:01:d7:75:a9:40:db:16: 87:99:90:d3:8f:42:ac:dc:cf:9f:c5:ec:1f:f4:f5:f4:e4:56: 81:25:61:43:ae:58:34:97:54:5c:30:10:71:67:31:80:5e:f0: d9:f7:94:c1:be:a4:cd:f5:34:86:29:69:47:a9:d4:58:fb:59: 12:ee:fc:2a:7d:7a:87:cb:00:54:35:ac:3c:67:cd:d6:06:21: ea:a7:1d:c6:e4:df:7a:2a:26:d0:aa:3a:85:3f:8a:e9:a2:e6: 54:c2:63:44:30:5e:e6:e5:60:f5:6a:b5:63:87:4a:ed:15:f0: 92:5a:2f:32:fc:db:23:80:fa:a8:5e:02:5a:6b:8e:0c:94:b5: 24:cb:a6:06:d3:88:f3:cf:64:d9:6e:1d:ea:6d:93:eb:b4:1c: d0:c4:b2:f3:a3:21:a6:b6:1e:39:ee:c6:b2:72:a3:99:6a:a3: bc:3f:5b:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjYwMzI0MjAxNzUzWhcNMjYwMzMxMjAxNzUzWjAYMRYwFAYD VQQDEw02OWMyZjE3Mi04NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFbNBtOm+ySP2CQHkcGRYBl4W4QQ+dPl9WjXf/CtyIBU+wJ051ZSwzDVtOhw zlqSeuRfCwIibJ7r+lri/h+AvNrG57c4NBlBfuzu2y2xkZGxj1jZXebce5ZiZhet kctXGyHt1EzjHjvfgihnhkgQL94AXjrf5T1m14pTkO2H29dxC2FaDNfKwD8df9ad i73fBQjzs28T3GBoujqEYQ84EWX3iOik4A1Tp62+RoATNcO99tUhseXCxfxk9qRT IfPNvQmcTb4o9rIm+jqpKxmYp7ykbY+PxzaYa1wM69JDUBZ4m7DNYup/k+H6Xdi7 MJduINNPEMvG+2SdWe6nFTDcIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8L4vra hucewwL/Qe4OZXzZ/I1uMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZIjt5D2RdY5X7IgD59JFZYsiI5DJD4OVPSzqcOQW32WzpOgT8GULu7oTK3jI 5htAeEckDuKDArlIaU0srCvz6IOZTO7RibK7pw3TF4D1ScIzKlsB13WpQNsWh5mQ 049CrNzPn8XsH/T19ORWgSVhQ65YNJdUXDAQcWcxgF7w2feUwb6kzfU0hilpR6nU WPtZEu78Kn16h8sAVDWsPGfN1gYh6qcdxuTfeiom0Ko6hT+K6aLmVMJjRDBe5uVg 9Wq1Y4dK7RXwklovMvzbI4D6qF4CWmuODJS1JMumBtOI889k2W4d6m2T67Qc0MSy 86MhprYeOe7GsnKjmWqjvD9bUw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:28 2026 by rpki-client