$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: wzRRuW4WUoPuc2+DLiv0llHLUJADVEGVd6XnigF7Rvw= Subject key identifier: 63:5E:09:95:61:3C:8E:9E:89:A6:FC:69:22:EE:5A:9F:D8:3F:32:96 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 0176 Signing time: Wed 25 Mar 2026 04:02:08 +0000 Manifest this update: Wed 25 Mar 2026 04:02:07 +0000 Manifest next update: Wed 01 Apr 2026 04:02:07 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: lVNr/2G5ql8A4FbVuIunGJU03ykAeK67eErRx1Jmzz4=) 2: E46DBE449E8811F0A343880AC4F9AE02.roa (hash: z7YrKVgCWycEYMHa7lXz+45oMrI/HtHuNAYNjecnk68=) 3: DAF8A746E01B11F097920A16646F56BC.roa (hash: LGOwTBglBUqnmp1uBsE0bwegkvn6MaHVF43SRoKPz84=) 4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Mar 25 04:02:07 2026 GMT Not After : Apr 1 04:02:07 2026 GMT Subject: CN=69c35e40-11a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:ae:e3:11:4d:4c:31:1f:8a:2a:e2:33:31: 98:2d:c3:81:12:f1:0c:60:b1:e6:cd:56:f0:2d:d1: e3:95:da:9e:00:72:46:84:ff:6c:06:ed:05:c3:f2: 30:ad:2f:4b:17:94:cd:22:54:5c:d6:d8:d1:e3:5e: dc:1d:dc:8a:d9:64:2d:e4:d0:4b:b5:46:fa:20:6b: 10:0d:0e:28:36:be:9f:22:5e:41:9d:71:23:8f:cf: 7d:98:ce:4d:50:5b:02:df:5b:ad:80:6f:2f:ef:a3: d7:bc:3f:d0:11:96:26:2d:61:63:ef:d1:47:98:47: 4a:6f:cd:5d:4c:58:bc:aa:78:ff:25:e3:f1:83:4f: e4:b2:24:e6:fc:80:39:bc:83:6d:85:b5:50:45:cd: 5b:dd:d9:63:61:a2:79:8b:5f:21:a3:62:64:81:f3: f6:ed:ce:68:06:2a:1d:7e:fb:2e:5f:8b:62:4e:51: 3b:17:f0:e4:59:6b:31:6c:96:5c:d1:7e:43:e7:3c: 28:53:c8:46:6b:84:b7:f1:8c:48:a2:d7:3b:4f:33: 42:2d:28:8e:20:67:a9:c8:b5:b8:e4:c3:e6:2a:d7: 15:3b:9a:fb:51:20:3f:c2:e2:20:72:15:33:6e:58: 9f:f4:51:f8:85:54:61:6a:ab:38:e5:45:86:71:67: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5E:09:95:61:3C:8E:9E:89:A6:FC:69:22:EE:5A:9F:D8:3F:32:96 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:78:49:64:92:9c:93:46:e6:0d:ab:80:ef:1c:5d:cb:81:91: 59:15:9b:ba:b4:06:60:36:b5:8f:ac:4e:cf:02:47:3a:a1:45: 35:d4:c3:d1:90:13:11:5b:79:41:fa:94:63:82:73:e3:1f:70: a9:04:4c:0f:c5:f5:8b:34:80:01:91:62:41:82:2d:98:04:07: e2:a4:f9:21:e0:6a:64:04:71:1f:01:05:47:2f:c8:b8:3e:db: 94:46:d7:4c:d2:4f:00:73:b0:0a:83:52:9b:3d:61:47:f1:00: d1:35:ec:f1:c9:a8:3b:80:83:52:97:22:50:e5:d7:f0:0c:34: da:83:f4:b4:4f:63:e5:92:93:4f:bf:a5:1a:a1:fd:98:d9:d2: 56:a9:c1:e2:37:65:40:2f:29:0e:87:7c:ff:f9:e5:09:1c:70: a2:d7:34:68:c0:dd:36:63:02:a1:3e:cf:e3:17:15:8a:e3:2e: 64:08:1b:3f:75:1b:7d:a1:f9:70:d0:9c:d8:c4:05:60:cc:a0: 8a:55:9d:65:5a:85:bd:0e:c7:72:5d:ac:2e:28:e4:02:ca:82: a2:06:b9:7d:f1:12:26:1b:26:fc:75:d8:08:29:1c:05:2c:fd: bf:0a:a5:e1:1c:62:eb:83:2b:6b:81:23:c6:b1:d4:12:be:20: 14:c2:f4:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYwMzI1MDQwMjA3WhcNMjYwNDAxMDQwMjA3WjAYMRYwFAYD VQQDEw02OWMzNWU0MC0xMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM6u4xFNTDEfiiriMzGYLcOBEvEMYLHmzVbwLdHjldqeAHJGhP9sBu0Fw/Iw rS9LF5TNIlRc1tjR417cHdyK2WQt5NBLtUb6IGsQDQ4oNr6fIl5BnXEjj899mM5N UFsC31utgG8v76PXvD/QEZYmLWFj79FHmEdKb81dTFi8qnj/JePxg0/ksiTm/IA5 vINthbVQRc1b3dljYaJ5i18ho2JkgfP27c5oBiodfvsuX4tiTlE7F/DkWWsxbJZc 0X5D5zwoU8hGa4S38YxIotc7TzNCLSiOIGepyLW45MPmKtcVO5r7USA/wuIgchUz blif9FH4hVRhaqs45UWGcWfGvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNeCZVh PI6eiab8aSLuWp/YPzKWMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARHhJZJKck0bmDauA7xxdy4GRWRWburQGYDa1j6xOzwJHOqFFNdTD0ZATEVt5 QfqUY4Jz4x9wqQRMD8X1izSAAZFiQYItmAQH4qT5IeBqZARxHwEFRy/IuD7blEbX TNJPAHOwCoNSmz1hR/EA0TXs8cmoO4CDUpciUOXX8Aw02oP0tE9j5ZKTT7+lGqH9 mNnSVqnB4jdlQC8pDod8//nlCRxwotc0aMDdNmMCoT7P4xcViuMuZAgbP3UbfaH5 cNCc2MQFYMygilWdZVqFvQ7Hcl2sLijkAsqCoga5ffESJhsm/HXYCCkcBSz9vwql 4Rxi64Mra4EjxrHUEr4gFML01A== -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:56 2026 by rpki-client