$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: otsRk3ehPtHGk6sElX8mIM8ZgL6sJdpFTYDHwLQQdiI= Subject key identifier: 27:7C:6C:E9:22:25:29:32:2C:EF:40:62:0B:90:9C:9F:02:4C:97:71 Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 0221 Signing time: Wed 25 Mar 2026 02:09:00 +0000 Manifest this update: Wed 25 Mar 2026 02:09:00 +0000 Manifest next update: Wed 01 Apr 2026 02:09:00 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: xFZLir9KCWRQhzaqMFgJ2gxkMIPL4VUQ5/DbAotxRXI=) 2: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w=) 3: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Mar 25 02:09:00 2026 GMT Not After : Apr 1 02:09:00 2026 GMT Subject: CN=69c343bc-58ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:ae:d5:6c:9c:8f:c0:65:99:71:44:c4:a5: e0:69:ae:2c:92:a8:2a:76:7c:4a:c0:e9:7a:86:f1: b0:14:64:c9:80:7e:49:08:cb:ba:9f:c9:40:e4:9a: d1:44:ba:e8:3c:6b:b0:33:71:63:03:35:a1:de:f2: e8:01:ff:c7:de:41:51:4a:5a:b1:65:f9:6c:9f:49: 28:8b:f1:00:16:92:46:5f:8a:16:d0:e8:30:05:00: bf:48:82:9b:73:64:4c:26:94:c9:50:a6:82:94:bb: 54:05:d7:4c:f5:4a:a8:f4:7c:11:45:0c:aa:67:47: 0a:c8:e4:70:de:06:2d:cf:37:8e:4d:f4:f1:92:ed: 7b:74:a4:c9:72:c7:3a:a1:0c:52:64:07:ce:ca:14: 09:60:f8:d6:bc:e0:ca:1a:42:cb:38:f0:f5:d2:34: 2e:99:b3:e4:de:a9:6a:20:bf:ff:9c:52:31:4d:de: 95:aa:7a:04:71:2c:02:05:35:e8:7b:25:d6:69:c2: a5:80:91:c1:16:8d:c4:81:07:bf:4a:af:42:c3:90: 43:fa:ac:de:9a:7c:cf:90:68:b0:f3:cd:54:85:e4: 98:39:a8:68:7c:2b:30:7f:3f:1c:58:a4:47:63:b7: 63:c5:96:26:e4:09:b0:45:13:b6:5f:b6:ca:cd:82: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7C:6C:E9:22:25:29:32:2C:EF:40:62:0B:90:9C:9F:02:4C:97:71 X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6f:43:ca:f1:e0:f1:7b:14:d8:68:fd:03:a0:bf:2e:7b:4f: 5f:dd:43:10:13:4b:5b:ab:c4:74:df:8f:7e:be:27:3a:a0:19: 93:f5:0f:34:2a:c2:01:89:79:95:b4:07:46:6d:02:eb:20:e3: 70:1e:ef:b6:4f:4d:7c:f5:49:e5:c6:1b:d6:b8:ca:d5:88:da: 55:63:00:a7:d1:cf:b3:af:5e:f4:5e:81:c3:81:d3:2f:f6:e3: d5:56:4f:28:80:6c:c8:53:f9:31:fb:66:94:3f:7f:84:2a:90: 48:2b:e0:da:f3:a3:c1:0a:d4:64:a3:61:e1:20:02:a8:10:96: 56:86:02:f7:7a:eb:52:bb:7c:01:d7:3f:50:ea:e6:33:24:fa: d7:83:83:20:6b:4c:88:6c:14:36:ce:90:b7:11:90:c2:65:9e: a7:fd:53:bf:d9:02:e1:86:c5:11:5b:f0:8b:b2:03:35:df:e1: ac:d3:06:2e:52:b6:ae:62:39:ed:85:4e:42:96:05:08:7b:8a: a3:a2:8c:10:2b:c4:1d:84:73:60:d1:a6:9c:49:5a:cb:ce:5f: d0:e1:a8:09:44:99:e4:7c:bb:8d:78:75:ef:3f:b3:ec:ba:20: 85:36:aa:4d:ef:d6:5e:7c:cb:f3:04:42:95:e8:54:71:20:77: 48:c0:76:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjYwMzI1MDIwOTAwWhcNMjYwNDAxMDIwOTAwWjAYMRYwFAYD VQQDEw02OWMzNDNiYy01OGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5+u1Wycj8BlmXFExKXgaa4skqgqdnxKwOl6hvGwFGTJgH5JCMu6n8lA5JrR RLroPGuwM3FjAzWh3vLoAf/H3kFRSlqxZflsn0koi/EAFpJGX4oW0OgwBQC/SIKb c2RMJpTJUKaClLtUBddM9Uqo9HwRRQyqZ0cKyORw3gYtzzeOTfTxku17dKTJcsc6 oQxSZAfOyhQJYPjWvODKGkLLOPD10jQumbPk3qlqIL//nFIxTd6VqnoEcSwCBTXo eyXWacKlgJHBFo3EgQe/Sq9Cw5BD+qzemnzPkGiw881UheSYOahofCswfz8cWKRH Y7djxZYm5AmwRRO2X7bKzYJZ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCd8bOki JSkyLO9AYguQnJ8CTJdxMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHm9DyvHg8XsU2Gj9A6C/LntPX91DEBNLW6vEdN+Pfr4nOqAZk/UPNCrCAYl5 lbQHRm0C6yDjcB7vtk9NfPVJ5cYb1rjK1YjaVWMAp9HPs69e9F6Bw4HTL/bj1VZP KIBsyFP5MftmlD9/hCqQSCvg2vOjwQrUZKNh4SACqBCWVoYC93rrUrt8Adc/UOrm MyT614ODIGtMiGwUNs6QtxGQwmWep/1Tv9kC4YbFEVvwi7IDNd/hrNMGLlK2rmI5 7YVOQpYFCHuKo6KMECvEHYRzYNGmnElay85f0OGoCUSZ5Hy7jXh17z+z7LoghTaq Te/WXnzL8wRClehUcSB3SMB2/g== -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:32 2026 by rpki-client