$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: 8Z3VgZ43DhszQAyE/L11VgN42P4ASEqpwqIAGNhstys= Subject key identifier: FA:BF:51:8F:DB:75:98:0B:56:F0:CF:71:8A:AF:5D:30:FC:4B:47:9C Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0EF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0ED6 Signing time: Thu 26 Mar 2026 17:37:51 +0000 Manifest this update: Thu 26 Mar 2026 17:37:51 +0000 Manifest next update: Thu 02 Apr 2026 17:37:51 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: ncUSHdf1C8PB7+eVY/Ja8ZBuXQ8jJ8mGPISI2aQIYvw=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: JURe/kWLxWBBPujRNutDT5hH/C63Ar6PS7XUiquehOE=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 9PzmGNvK7SqmPlPyXHrhBcEPkqCMbrFtsm/C/q55ytk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3824 (0xef0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Mar 26 17:37:51 2026 GMT Not After : Apr 2 17:37:51 2026 GMT Subject: CN=69c56eef-6505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:28:d8:d7:e1:d7:e3:5e:b2:10:32:1c:06: e8:72:97:2f:20:9b:78:9a:45:11:00:b6:43:40:9e: 93:01:29:f8:1b:02:5c:db:f3:d7:b1:8e:fe:37:2f: 00:1d:58:71:03:e2:32:2c:b5:44:20:a6:df:e8:06: 86:3c:c8:9b:53:e5:a0:b0:3d:ad:c2:76:34:3b:ed: 5e:2c:a1:ca:14:cc:ce:ea:bc:3c:ec:c8:e8:70:a1: 56:bb:c8:26:35:e9:0f:29:4c:3c:80:9b:56:c2:b3: e0:dc:99:32:83:ce:fa:f9:31:e7:6d:10:8d:d8:79: cd:d6:e9:ec:52:50:60:ae:a7:2a:cd:82:57:5e:0d: 73:26:b6:c8:9f:12:a5:d1:bf:57:a4:af:3b:4d:7f: 5d:12:6b:48:20:e7:af:1c:60:dd:a0:ba:c0:46:8f: f4:3d:43:45:e3:10:b2:c3:af:32:e1:6b:a4:c8:61: 95:25:38:68:53:f2:20:4b:49:93:bb:41:59:5e:0e: 26:51:c1:c0:cc:08:74:89:87:b5:1f:fb:77:10:d9: 8f:79:0b:fb:58:b1:74:3e:b8:61:b8:bd:16:f8:6a: 9d:6d:a2:e9:42:09:71:ab:b1:8e:fb:0f:9e:39:85: 0a:07:a6:1f:7e:84:29:dd:45:98:78:d1:f0:69:99: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:51:8F:DB:75:98:0B:56:F0:CF:71:8A:AF:5D:30:FC:4B:47:9C X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:04:96:44:d0:55:50:99:53:db:b6:35:e6:32:b1:4f:2e:5e: 17:c3:05:f2:23:1d:aa:c5:ab:80:29:f9:f8:74:0e:21:9f:09: 53:bd:22:7c:71:97:49:51:99:a3:88:0d:ee:29:be:cc:8c:01: 02:f6:b0:ea:79:ac:6c:cc:cc:bd:bc:27:a7:90:48:c4:ec:14: 2f:36:d9:7d:ff:3c:44:58:d0:a2:9b:1f:8e:ef:83:a3:4e:2b: 50:23:ce:ec:a4:5e:b6:56:c6:92:4c:21:2c:48:d1:cf:67:50: 8d:0a:80:4d:14:ea:a0:d7:d1:f4:26:52:b8:43:27:50:e4:52: e3:a1:19:ae:2a:a0:36:dd:bb:c7:30:56:0b:b2:a0:e8:41:13: 2f:96:08:76:bb:e8:5e:be:b1:8a:54:45:17:dd:e7:a4:c2:9a: 3a:9f:f6:ee:12:a8:9f:a4:3f:ab:06:23:61:db:c8:ae:95:32: c9:10:e3:25:76:49:31:79:1a:80:18:bc:8e:b6:34:ce:e1:e9: b7:d6:ef:d0:59:dd:40:5e:86:70:5d:e3:7e:1b:8f:52:e7:05: 85:1d:71:b6:c8:9c:e1:7b:f2:6d:68:fa:40:3e:79:63:d6:db: e6:a7:80:7f:d2:8c:c2:1e:72:70:d1:c7:67:b1:17:46:39:3c: 49:5a:04:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjYwMzI2MTczNzUxWhcNMjYwNDAyMTczNzUxWjAYMRYwFAYD VQQDEw02OWM1NmVlZi02NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW8o2Nfh1+NeshAyHAbocpcvIJt4mkURALZDQJ6TASn4GwJc2/PXsY7+Ny8A HVhxA+IyLLVEIKbf6AaGPMibU+WgsD2twnY0O+1eLKHKFMzO6rw87MjocKFWu8gm NekPKUw8gJtWwrPg3Jkyg876+THnbRCN2HnN1unsUlBgrqcqzYJXXg1zJrbInxKl 0b9XpK87TX9dEmtIIOevHGDdoLrARo/0PUNF4xCyw68y4WukyGGVJThoU/IgS0mT u0FZXg4mUcHAzAh0iYe1H/t3ENmPeQv7WLF0PrhhuL0W+GqdbaLpQglxq7GO+w+e OYUKB6YffoQp3UWYeNHwaZnJewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPq/UY/b dZgLVvDPcYqvXTD8S0ecMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALASWRNBVUJlT27Y15jKxTy5eF8MF8iMdqsWrgCn5+HQOIZ8JU70ifHGXSVGZ o4gN7im+zIwBAvaw6nmsbMzMvbwnp5BIxOwULzbZff88RFjQopsfju+Do04rUCPO 7KRetlbGkkwhLEjRz2dQjQqATRTqoNfR9CZSuEMnUORS46EZriqgNt27xzBWC7Kg 6EETL5YIdrvoXr6xilRFF93npMKaOp/27hKon6Q/qwYjYdvIrpUyyRDjJXZJMXka gBi8jrY0zuHpt9bv0FndQF6GcF3jfhuPUucFhR1xtsic4XvybWj6QD55Y9bb5qeA f9KMwh5ycNHHZ7EXRjk8SVoEFA== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:12 2026 by rpki-client