$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json) Hash identifier: fxAg3gCi8nlXlwVGEwjRCtRnRq1BLm9QbzEfyAvZGg0= Subject key identifier: AD:99:51:CA:94:45:4C:8A:12:1A:70:6F:61:02:65:E8:A8:5D:C7:70 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 06:43:48 +0000 Manifest this update: Wed 25 Mar 2026 06:43:47 +0000 Manifest next update: Wed 01 Apr 2026 06:43:47 +0000 Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: f+HBJ9vfPCCjqebxI1LY7d9dUuqzbBobDkJEC4KDkWY=) 2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=) 3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=) 4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Validity Not Before: Mar 25 06:43:47 2026 GMT Not After : Apr 1 06:43:47 2026 GMT Subject: CN=69c38424-d4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:50:99:80:e9:f6:82:34:27:8d:a5:ca:31: b2:c0:7f:57:95:3e:ff:79:d3:e5:b0:13:dc:4f:a8: 81:ca:be:22:48:c8:f1:64:38:2e:fc:3b:76:cb:5a: 43:f3:bd:a5:21:af:3e:fe:66:7f:67:af:40:19:a1: 3f:a3:aa:d2:95:0d:49:76:3b:d9:d6:7a:26:b5:50: b9:75:47:0d:1c:49:6e:eb:fa:17:0b:ed:1c:cd:cb: 36:b1:35:48:31:d9:f8:c4:ec:78:24:ca:4f:8d:fc: ef:aa:0f:29:6e:08:d4:37:de:fa:81:e8:41:db:4a: c1:d6:87:0f:8e:f7:34:f3:ba:c4:25:03:01:82:72: 9f:13:83:89:61:b2:09:ad:22:79:93:77:d2:a5:c9: 30:cf:11:a3:6a:a4:87:87:be:dd:04:2d:3a:a1:c2: 66:d9:9c:a8:5c:0a:67:bd:f7:f7:9d:07:00:dc:f3: 7d:56:ad:a7:61:a3:12:9e:a8:d8:68:59:8d:aa:ab: ef:90:e2:c6:49:ab:92:f8:15:d9:24:f6:c2:a4:d0: 83:2d:83:d3:46:27:c8:db:df:ac:14:a3:cc:6e:88: d2:bd:f9:40:41:e9:37:4a:9d:89:1f:6d:43:e3:ae: 5e:af:35:94:86:d0:23:4d:b2:f9:65:1f:eb:60:16: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:99:51:CA:94:45:4C:8A:12:1A:70:6F:61:02:65:E8:A8:5D:C7:70 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ca:92:1d:65:d1:f8:93:3a:6b:21:b2:17:55:fc:f2:d2:59: 51:65:c9:e8:13:28:4b:c3:28:a3:b5:b4:00:68:7a:2e:42:e6: 9a:1a:2a:f1:0d:4e:03:cd:ad:1b:4c:37:03:b4:ba:4f:f0:5b: 3b:a2:81:2d:4e:82:03:37:ab:60:33:dc:d5:0f:09:54:71:5c: 86:53:2c:66:73:52:49:11:d6:a7:55:24:5f:90:b7:d8:5c:f8: dc:60:5c:f7:e2:11:10:8b:23:21:ba:bb:33:1e:6e:4c:1c:e2: 56:eb:0b:36:f5:d4:0c:11:0f:fa:b3:4e:2b:d9:22:3d:b7:bf: 9b:a6:0b:fe:f8:c0:d6:77:c4:c0:a8:b6:2d:b9:11:87:3f:f3: cb:03:b3:41:4c:9c:d6:26:53:6d:da:c0:32:d7:dd:a1:42:9b: 21:d0:ea:99:81:60:4c:d0:6f:86:68:29:0d:5d:d8:a9:7d:62: f8:ed:f6:e2:e4:df:7f:ca:88:9d:a6:01:94:f9:3b:f4:d0:cb: f1:5b:e2:4e:78:6f:bc:b9:87:76:fd:15:8b:58:11:0b:d4:f4: b2:82:38:e0:3f:1d:fd:51:1e:06:16:82:b8:b7:77:77:9e:e5: 6b:52:5d:0b:13:42:87:e5:ee:2d:94:69:18:5e:75:57:3d:d9: 9a:a7:db:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUxRkMxMTAvBgNVBAUTKENBNUY3QTMxMjFDMUY1Rjk4OTUyMEM3QTUxOTcxM0ZC M0E2OENBN0UwHhcNMjYwMzI1MDY0MzQ3WhcNMjYwNDAxMDY0MzQ3WjAYMRYwFAYD VQQDEw02OWMzODQyNC1kNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG5QmYDp9oI0J42lyjGywH9XlT7/edPlsBPcT6iByr4iSMjxZDgu/Dt2y1pD 872lIa8+/mZ/Z69AGaE/o6rSlQ1JdjvZ1nomtVC5dUcNHElu6/oXC+0czcs2sTVI Mdn4xOx4JMpPjfzvqg8pbgjUN976gehB20rB1ocPjvc087rEJQMBgnKfE4OJYbIJ rSJ5k3fSpckwzxGjaqSHh77dBC06ocJm2ZyoXApnvff3nQcA3PN9Vq2nYaMSnqjY aFmNqqvvkOLGSauS+BXZJPbCpNCDLYPTRifI29+sFKPMbojSvflAQek3Sp2JH21D 465erzWUhtAjTbL5ZR/rYBZoyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2ZUcqU RUyKEhpwb2ECZeioXcdwMB8GA1UdIwQYMBaAFMpfejEhwfX5iVIMelGXE/s6aMp+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTFGQy81QjMyNUZBNkU5 QjkxMUVGQjZEQTQxNENDNEY5QUUwMi95bDk2TVNIQjlmbUpVZ3g2VVpjVC16cG95 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3luNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi95bDk2TVNIQjlm bUpVZ3g2VVpjVC16cG95bjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8qSHWXR+JM6ayGyF1X88tJZUWXJ6BMoS8Moo7W0AGh6LkLmmhoq8Q1OA82t G0w3A7S6T/BbO6KBLU6CAzerYDPc1Q8JVHFchlMsZnNSSRHWp1UkX5C32Fz43GBc 9+IREIsjIbq7Mx5uTBziVusLNvXUDBEP+rNOK9kiPbe/m6YL/vjA1nfEwKi2LbkR hz/zywOzQUyc1iZTbdrAMtfdoUKbIdDqmYFgTNBvhmgpDV3YqX1i+O324uTff8qI naYBlPk79NDL8VviTnhvvLmHdv0Vi1gRC9T0soI44D8d/VEeBhaCuLd3d57la1Jd CxNCh+XuLZRpGF51Vz3ZmqfbQw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:24 2026 by rpki-client