$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: SQKERsmOid96FrszeHyQ0IvbzTql2wj+aqVv7QOywHM= Subject key identifier: A8:F2:11:EB:BE:95:B6:44:D8:FB:C1:98:93:D4:55:9A:C5:31:47:77 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31F6 Signing time: Tue 24 Mar 2026 15:22:57 +0000 Manifest this update: Tue 24 Mar 2026 15:22:56 +0000 Manifest next update: Tue 31 Mar 2026 15:22:56 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: wO3NjiCH/y68C4CVHiKQUQpxuNPiPuyJZxDLZAZr22g=) 2: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: XwB9QjCYwbuRP43YSeYiFY0GoKDk5ANAOxQN+pyPBGM=) 3: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: cyouCRCr7CZPOwDKg7kIiYNdpRMlLTwclgYJQS5JDvs=) 4: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: QqncPmQ+MTjJkRRgLJA4ctdRvr1q1n2VS0I4uFV/Q7g=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: 3U02qvW/25eQgStQpEoEM5rVQKE7UU4Ms9dzjGJT9gA=) 6: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: US+hos1bmco+xwNoQ4VJkFhsWCF6u/dd+loCwDLc9o4=) 7: 4B019258F78411F08F54609B4C6F56BC.roa (hash: Jv0wj3aaY+NUxNWRmp1eqBldB83wzCf6HePkKdo3y5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12823 (0x3217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Mar 24 15:22:56 2026 GMT Not After : Mar 31 15:22:56 2026 GMT Subject: CN=69c2ac51-b152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:b1:af:6d:16:99:d0:50:b0:b9:af:df:e0: 61:fb:d2:af:d0:fc:db:b0:0f:f6:9b:d9:28:78:37: 97:32:7e:1c:42:83:7c:5a:4e:81:1b:f6:03:d9:06: c8:c1:8d:a8:8d:db:36:f8:b3:b9:1e:71:2b:b3:b6: 3d:00:f9:54:25:3a:b8:9b:8d:2c:bf:e0:ce:bd:90: f8:2d:af:46:f6:d1:77:1c:60:ee:ce:cd:af:08:cd: 5d:cd:b3:79:39:b6:0d:96:c6:67:d4:4a:38:7a:98: 5c:80:1d:d9:dc:09:3e:e2:75:ce:6c:e5:39:a6:15: 78:1d:28:76:89:90:98:d0:0a:6e:dc:aa:a2:fd:57: da:6e:b6:f7:f2:15:c0:50:59:dc:d3:54:41:1b:4c: 04:c3:c6:d8:37:9e:4d:25:8c:6c:20:98:dc:1f:23: 6a:8d:fb:63:ca:0d:58:ce:91:38:75:92:17:a4:f5: 5c:2d:be:a5:7a:30:ee:8e:bc:e2:b5:61:f6:16:3f: 07:37:7f:fd:1f:01:22:31:95:25:1a:0f:ae:7e:78: 5c:ad:62:ec:45:e0:ae:96:da:87:bd:59:e3:a3:26: 25:07:c2:5d:a8:4c:7d:ff:50:cd:a5:9a:cd:81:91: 67:6c:04:85:48:ab:87:7f:b5:ed:d1:da:ac:cb:86: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F2:11:EB:BE:95:B6:44:D8:FB:C1:98:93:D4:55:9A:C5:31:47:77 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4d:67:22:98:89:c2:6b:97:a0:bb:e3:a9:0c:a9:83:f4:4b: 9f:3d:32:8b:47:ac:c2:c3:5d:dd:23:92:dc:b3:65:3e:4b:30: 24:82:a9:37:ca:79:b3:17:db:40:11:d9:b5:c2:11:19:76:d2: 8a:92:d0:03:1b:04:46:a9:ba:d7:1c:d3:c5:3c:09:5a:06:f8: d7:9b:f8:d2:98:0d:85:0c:f1:12:b4:4a:aa:3a:6b:e8:48:5f: 7b:8d:81:35:5c:c1:df:3e:52:03:63:0e:83:b7:97:88:00:b8: 74:52:98:e3:e6:a4:b1:3d:90:d1:eb:eb:e3:18:f8:a3:8a:fe: 1d:a0:4c:9b:6b:9e:0d:b6:75:23:53:ef:0a:69:ea:45:94:ed: 81:87:d3:ff:7a:73:f3:22:7b:c1:cb:eb:85:bb:9a:55:ea:13: 5f:3e:c3:0a:38:37:dc:aa:5d:01:56:75:81:30:b9:3d:33:46: ee:bb:39:74:1f:c5:c6:8a:d5:dd:91:67:c7:d0:f4:cb:38:87: 70:1b:89:5c:b1:8a:29:f9:91:e1:46:16:4d:0f:bf:30:74:d1: cd:76:c4:a1:03:c2:2c:ea:e9:ba:8f:34:ae:ca:33:79:24:d5: 43:38:60:20:69:23:99:da:36:22:e2:d3:db:cb:47:56:52:32: 6c:da:c9:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwMzI0MTUyMjU2WhcNMjYwMzMxMTUyMjU2WjAYMRYwFAYD VQQDEw02OWMyYWM1MS1iMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nyxr20WmdBQsLmv3+Bh+9Kv0PzbsA/2m9koeDeXMn4cQoN8Wk6BG/YD2QbI wY2ojds2+LO5HnErs7Y9APlUJTq4m40sv+DOvZD4La9G9tF3HGDuzs2vCM1dzbN5 ObYNlsZn1Eo4ephcgB3Z3Ak+4nXObOU5phV4HSh2iZCY0Apu3Kqi/Vfabrb38hXA UFnc01RBG0wEw8bYN55NJYxsIJjcHyNqjftjyg1YzpE4dZIXpPVcLb6lejDujrzi tWH2Fj8HN3/9HwEiMZUlGg+ufnhcrWLsReCultqHvVnjoyYlB8JdqEx9/1DNpZrN gZFnbASFSKuHf7Xt0dqsy4ZuvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjyEeu+ lbZE2PvBmJPUVZrFMUd3MB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaU1nIpiJwmuXoLvjqQypg/RLnz0yi0eswsNd3SOS3LNlPkswJIKpN8p5sxfb QBHZtcIRGXbSipLQAxsERqm61xzTxTwJWgb415v40pgNhQzxErRKqjpr6Ehfe42B NVzB3z5SA2MOg7eXiAC4dFKY4+aksT2Q0evr4xj4o4r+HaBMm2ueDbZ1I1PvCmnq RZTtgYfT/3pz8yJ7wcvrhbuaVeoTXz7DCjg33KpdAVZ1gTC5PTNG7rs5dB/FxorV 3ZFnx9D0yziHcBuJXLGKKfmR4UYWTQ+/MHTRzXbEoQPCLOrpuo80rsozeSTVQzhg IGkjmdo2IuLT28tHVlIybNrJ2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 08:44:00 2026 by rpki-client