$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: khQz+8EWkrbYBbD5Wy6J3KbjPJ7tTWzxHffAqMrUR+4= Subject key identifier: 5C:C7:FB:0C:B5:E9:0F:DF:F3:11:22:F9:02:21:23:3A:C6:8A:04:CD Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 0854 Signing time: Tue 24 Mar 2026 20:32:59 +0000 Manifest this update: Tue 24 Mar 2026 20:32:58 +0000 Manifest next update: Tue 31 Mar 2026 20:32:58 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: BZXhVGo887ssgxjkJsquV3RoyCYSkq893TDBdToFX6k=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: e9rRepgEUQCp9vSJIwP7DAt7IRy8y+BxF4pfmKiepf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Mar 24 20:32:58 2026 GMT Not After : Mar 31 20:32:58 2026 GMT Subject: CN=69c2f4fb-9b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5b:c6:23:a6:23:23:6b:e6:83:ba:29:5d:33: 13:cb:60:6e:36:a9:02:74:f1:68:64:63:ca:04:93: d9:37:6f:6c:d4:6c:04:d6:1c:12:79:4a:d6:a3:d1: d3:a1:67:98:b0:45:87:82:49:7c:dc:59:36:69:52: 94:2e:3f:25:bb:08:fa:06:e9:71:a1:d9:e0:e6:be: 84:27:a3:dc:3e:86:92:7e:23:01:10:67:fc:1d:37: 29:a5:72:bc:4d:84:0c:68:52:66:4c:6d:b4:cc:ab: 18:28:54:7e:42:b3:72:0d:6e:1b:ef:e7:77:80:fa: ee:50:c4:03:d6:6c:6f:a0:54:30:96:72:c9:36:b1: 95:a5:52:e0:1f:19:89:d1:7c:f8:ca:c6:c5:93:e5: c1:44:bc:76:5f:24:d3:e5:4b:75:89:91:36:41:de: 48:e9:9d:ec:19:97:d9:ee:9b:e1:5b:c5:14:df:f6: 61:35:05:ea:57:19:9a:a2:e2:a7:a2:82:78:ba:97: e5:a9:5e:e9:be:52:50:ff:24:14:98:54:da:6e:59: d4:7b:d4:c6:e5:84:00:23:a9:61:0d:0e:55:58:40: fc:9a:2b:20:9e:a1:49:ce:fb:31:68:4c:68:2b:45: bd:b9:32:76:86:fa:55:ff:4d:be:cf:b7:92:d8:cb: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C7:FB:0C:B5:E9:0F:DF:F3:11:22:F9:02:21:23:3A:C6:8A:04:CD X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e6:db:c5:7f:f1:a7:36:68:b6:53:b5:92:d7:01:23:47:2c: c5:21:19:9e:e3:99:dc:7c:00:b2:a6:e9:50:33:e1:4b:ba:6d: ab:1f:73:e5:f5:59:12:c5:59:1e:7d:4c:6e:98:9a:55:23:55: 2e:ae:97:d6:39:e5:b7:47:c4:46:52:0b:6d:04:f1:cb:c7:1f: de:f0:f0:c6:26:31:0e:62:d6:4d:b7:b1:25:76:cf:ed:45:ba: f5:c2:f0:95:dd:a7:98:9a:1a:63:31:34:30:95:66:70:4d:20: 1b:e3:41:26:ba:73:2c:44:a5:3b:80:99:e1:a2:5a:42:0d:01: 2c:12:34:56:c9:54:9e:54:05:a0:8a:3b:41:45:02:2e:96:bf: 58:12:3c:a1:70:f9:0e:29:81:2f:f7:67:40:e8:38:64:23:7f: ab:9c:a4:43:6e:c5:61:5a:fc:7a:63:3b:68:23:e3:97:d2:66: 65:03:fd:9e:cc:6e:eb:58:cd:b1:8d:ec:53:19:7e:82:87:80: 75:94:04:66:32:91:50:22:d9:ae:fc:e1:20:9b:e3:ae:84:a8: a4:a2:fd:9e:1d:04:39:79:92:e9:6c:be:d8:a8:4e:09:e3:36: 46:0e:2a:12:b5:21:cf:79:bb:08:51:58:69:bf:71:c5:2e:a0: 7e:c7:5c:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjYwMzI0MjAzMjU4WhcNMjYwMzMxMjAzMjU4WjAYMRYwFAYD VQQDEw02OWMyZjRmYi05YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VvGI6YjI2vmg7opXTMTy2BuNqkCdPFoZGPKBJPZN29s1GwE1hwSeUrWo9HT oWeYsEWHgkl83Fk2aVKULj8luwj6Bulxodng5r6EJ6PcPoaSfiMBEGf8HTcppXK8 TYQMaFJmTG20zKsYKFR+QrNyDW4b7+d3gPruUMQD1mxvoFQwlnLJNrGVpVLgHxmJ 0Xz4ysbFk+XBRLx2XyTT5Ut1iZE2Qd5I6Z3sGZfZ7pvhW8UU3/ZhNQXqVxmaouKn ooJ4upflqV7pvlJQ/yQUmFTablnUe9TG5YQAI6lhDQ5VWED8misgnqFJzvsxaExo K0W9uTJ2hvpV/02+z7eS2MsAlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzH+wy1 6Q/f8xEi+QIhIzrGigTNMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+bbxX/xpzZotlO1ktcBI0csxSEZnuOZ3HwAsqbpUDPhS7ptqx9z5fVZEsVZ Hn1MbpiaVSNVLq6X1jnlt0fERlILbQTxy8cf3vDwxiYxDmLWTbexJXbP7UW69cLw ld2nmJoaYzE0MJVmcE0gG+NBJrpzLESlO4CZ4aJaQg0BLBI0VslUnlQFoIo7QUUC Lpa/WBI8oXD5DimBL/dnQOg4ZCN/q5ykQ27FYVr8emM7aCPjl9JmZQP9nsxu61jN sY3sUxl+goeAdZQEZjKRUCLZrvzhIJvjroSopKL9nh0EOXmS6Wy+2KhOCeM2Rg4q ErUhz3m7CFFYab9xxS6gfsdc0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:26 2026 by rpki-client