$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: 4KqEzdOiW3CkXxGdTsSw9FlkJlwDz+nAk2/eQAVL1oY= Subject key identifier: 10:B6:3A:B6:A2:76:8B:1D:DF:C6:5B:2E:4E:84:1A:F7:99:19:4F:2A Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 07F5 Signing time: Tue 24 Mar 2026 20:57:13 +0000 Manifest this update: Tue 24 Mar 2026 20:57:12 +0000 Manifest next update: Tue 31 Mar 2026 20:57:12 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: R7k+5IvMx9tiQ7VoXP3I7SZ8TjnIVAlKYVj6yCZ0qPw=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: //kyIlIYFX3+08S3h9a7dEmLAcY3BX1jLjRJO0SJN6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Mar 24 20:57:12 2026 GMT Not After : Mar 31 20:57:12 2026 GMT Subject: CN=69c2faa9-3d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:96:24:37:9f:9a:4b:6b:5a:1c:a8:6e:43: 98:ee:4a:93:60:bf:91:ea:d5:91:b6:e3:45:cd:86: 23:2c:cc:99:2a:02:26:26:61:e3:7f:12:ce:6e:61: e2:e1:96:73:d6:c3:bb:f2:98:24:cd:e6:ab:07:7a: ca:d4:8c:54:83:de:7b:ba:7a:b3:c6:1e:89:ef:e8: 54:0b:63:fa:14:21:07:9e:54:00:50:91:5a:7f:41: 28:42:61:b2:62:5a:86:67:92:79:e8:ff:92:d1:7e: 33:fb:54:2e:8d:a1:99:8a:9d:0c:81:ac:54:4b:cd: 79:3d:2b:43:2b:e1:25:f9:52:85:b5:e6:11:93:bd: 12:a9:22:45:00:4d:73:09:d8:93:20:47:16:96:76: 6a:12:64:4f:55:ca:a4:17:75:a8:8e:7b:11:c0:59: 01:0b:41:aa:5a:6c:77:93:9d:c8:64:eb:c4:be:d6: 07:8f:b4:66:ac:36:5e:69:51:a8:3d:ec:8b:5d:a2: ac:6b:a3:63:88:17:9a:7d:03:e1:14:0e:4a:44:54: f1:c3:2d:ec:94:f7:6b:d1:72:4e:ef:3f:15:e3:81: 6d:1d:13:74:d1:f9:46:5b:1c:b9:68:37:84:1b:3a: 83:bf:e0:9a:0a:db:46:a0:22:0d:ac:1d:6c:0d:49: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B6:3A:B6:A2:76:8B:1D:DF:C6:5B:2E:4E:84:1A:F7:99:19:4F:2A X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d2:5a:4e:41:c2:ca:0b:bb:92:b2:b5:48:10:da:3c:a3:35: 05:d5:2f:03:46:d2:0c:20:d6:8f:a4:51:9e:9a:74:c8:f3:ab: 45:dc:16:4c:c4:35:4c:c1:76:4f:5a:ef:a9:a7:55:8e:05:18: 2a:42:dd:3c:9d:c2:7c:99:9e:54:51:c8:26:d6:fd:60:26:df: a4:a5:fb:9b:4c:1d:4e:43:6a:2a:07:9d:e9:cd:52:8f:37:72: 17:be:ed:fa:3a:a0:23:4c:4f:e0:87:13:2b:1c:16:48:9b:3a: b9:e5:3d:74:3f:66:51:0c:f1:9f:b1:f9:de:db:78:84:cf:44: 9c:14:ca:d9:87:51:7e:97:83:72:fe:8b:40:48:f8:5a:df:a8: bf:bd:ae:fb:a0:25:9d:25:af:f8:20:55:ac:ea:8e:bf:f5:ed: 55:d1:3b:26:7e:5a:69:48:46:96:de:7b:b0:f2:1c:a5:eb:e0: d1:2e:cf:a3:23:30:a5:a5:4f:ff:18:0f:ee:e4:13:3f:cc:b2: 89:66:a8:9f:de:ab:63:7c:c6:18:73:3f:e4:bb:9d:85:df:25: e6:f4:a9:35:18:23:1e:96:9c:2f:ff:3d:47:84:06:49:dc:80: 17:b1:52:05:ca:e4:fb:8e:1b:8e:6e:3c:f8:b2:41:29:62:73: a8:75:a0:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjYwMzI0MjA1NzEyWhcNMjYwMzMxMjA1NzEyWjAYMRYwFAYD VQQDEw02OWMyZmFhOS0zZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj86WJDefmktrWhyobkOY7kqTYL+R6tWRtuNFzYYjLMyZKgImJmHjfxLObmHi 4ZZz1sO78pgkzearB3rK1IxUg957unqzxh6J7+hUC2P6FCEHnlQAUJFaf0EoQmGy YlqGZ5J56P+S0X4z+1QujaGZip0MgaxUS815PStDK+El+VKFteYRk70SqSJFAE1z CdiTIEcWlnZqEmRPVcqkF3WojnsRwFkBC0GqWmx3k53IZOvEvtYHj7RmrDZeaVGo PeyLXaKsa6NjiBeafQPhFA5KRFTxwy3slPdr0XJO7z8V44FtHRN00flGWxy5aDeE GzqDv+CaCttGoCINrB1sDUl0AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBC2Orai dosd38ZbLk6EGveZGU8qMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKtJaTkHCygu7krK1SBDaPKM1BdUvA0bSDCDWj6RRnpp0yPOrRdwWTMQ1TMF2 T1rvqadVjgUYKkLdPJ3CfJmeVFHIJtb9YCbfpKX7m0wdTkNqKged6c1SjzdyF77t +jqgI0xP4IcTKxwWSJs6ueU9dD9mUQzxn7H53tt4hM9EnBTK2YdRfpeDcv6LQEj4 Wt+ov72u+6AlnSWv+CBVrOqOv/XtVdE7Jn5aaUhGlt57sPIcpevg0S7PoyMwpaVP /xgP7uQTP8yyiWaon96rY3zGGHM/5Ludhd8l5vSpNRgjHpacL/89R4QGSdyAF7FS Bcrk+44bjm48+LJBKWJzqHWgRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:08 2026 by rpki-client