$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json) Hash identifier: xiHw3ojdEr8iGce8iGQhZUPUobCG2Bu5U+4Z7D3KfPs= Subject key identifier: 13:90:BE:3D:D1:F4:25:95:42:03:58:6C:91:91:8F:84:A9:80:7F:C2 Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft Manifest number: 0141 Signing time: Wed 25 Mar 2026 04:35:50 +0000 Manifest this update: Wed 25 Mar 2026 04:35:50 +0000 Manifest next update: Wed 01 Apr 2026 04:35:50 +0000 Files and hashes: 1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: iWr38QJZjdqkbbYp00nISr0ae3CaYfMY0LRHlLnnniY=) 2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: y32dMEUN6YUCKolUe/uVA0r0aXZ6vWR2Ez2nh841QQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Validity Not Before: Mar 25 04:35:50 2026 GMT Not After : Apr 1 04:35:50 2026 GMT Subject: CN=69c36626-5583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:30:3a:03:b8:c1:1b:c0:a0:41:cd:32:9b: 82:44:f6:20:8d:4c:71:ee:60:e2:4f:c0:e9:1f:03: 03:7a:92:be:21:2c:7d:f0:77:05:b4:ce:cf:be:8b: a0:ee:ed:a7:e1:cc:8e:cb:51:78:bb:83:df:1d:bd: 41:b9:7a:6e:a7:25:8b:94:a3:62:b9:04:24:c9:42: 0f:23:d3:35:6e:71:62:9b:f1:63:0d:ee:57:64:59: 1e:0e:48:f9:89:d6:4d:bb:95:c5:47:e0:85:92:b8: 6e:44:96:ce:85:bd:a0:c5:fd:34:2d:8c:0a:74:92: 12:dd:8f:07:a3:5d:06:f8:4c:1e:96:2a:ac:ba:2c: 42:b1:93:e0:e9:a7:e5:cb:3e:54:03:62:e0:15:2f: 13:35:fd:04:76:37:30:00:b4:57:f1:09:bf:44:da: a3:d7:71:bd:2e:03:cb:a1:28:5a:79:01:52:13:39: 31:cf:81:b2:37:80:5e:ec:91:71:2c:05:56:91:87: cc:40:60:e0:c7:36:dc:ee:35:c2:1d:da:84:ec:6d: 07:fa:f4:a0:54:b2:64:e7:96:2b:70:c1:98:e2:bf: 68:97:67:c5:08:c2:98:66:0a:90:94:f0:01:70:d9: d2:de:ff:5d:30:02:03:2a:80:90:22:77:a2:d5:4d: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:BE:3D:D1:F4:25:95:42:03:58:6C:91:91:8F:84:A9:80:7F:C2 X509v3 Authority Key Identifier: keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cd:0b:da:8f:3e:45:46:83:dd:82:a1:15:17:2f:bb:79:b2: 35:3c:e9:87:f9:11:7a:10:73:26:34:df:fd:bd:70:d1:fe:c2: 95:54:87:e4:e0:a1:e4:2f:15:61:2a:b3:7f:c8:2f:9f:ff:f5: 18:c9:15:27:dc:50:da:ce:6c:ec:2e:03:a6:73:0c:a6:2e:3f: b0:a5:fa:77:79:bf:b2:ea:58:58:58:89:f3:13:b2:5d:d7:de: 8b:6b:b6:f7:71:4c:80:f1:65:e6:56:f2:46:67:a1:ed:cd:98: 1e:96:07:96:3d:75:72:c2:ec:06:26:16:1e:03:00:0a:3e:19: 78:39:0c:79:53:e8:b0:32:de:18:10:73:cd:a5:9c:22:98:f8: 8f:2f:1c:96:c7:50:fe:96:01:05:bf:8f:99:33:ce:da:dd:c6: 89:a6:aa:c2:35:4e:d9:e0:40:5b:cb:ed:c6:66:1e:49:9d:81: 4f:d4:3c:22:10:c3:df:df:f1:e7:f1:ba:2d:c3:ae:0a:00:ae: 91:fe:b0:e5:a9:47:08:3c:12:bb:e5:23:33:d3:df:c2:eb:90: 77:1a:ba:3f:27:9c:7b:3d:be:eb:8f:98:4c:24:12:c1:49:9e: e1:d4:b4:2d:43:f1:b5:9d:f1:1b:ae:4b:8b:42:a0:1c:80:49: 20:1d:0e:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKDYzMEVGQzhCQzgyNDdGOTlBMDEyODA3NDFFNEExQTBE QjdGMTQ3QjAwHhcNMjYwMzI1MDQzNTUwWhcNMjYwNDAxMDQzNTUwWjAYMRYwFAYD VQQDEw02OWMzNjYyNi01NTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj4wOgO4wRvAoEHNMpuCRPYgjUxx7mDiT8DpHwMDepK+ISx98HcFtM7Pvoug 7u2n4cyOy1F4u4PfHb1BuXpupyWLlKNiuQQkyUIPI9M1bnFim/FjDe5XZFkeDkj5 idZNu5XFR+CFkrhuRJbOhb2gxf00LYwKdJIS3Y8Ho10G+EweliqsuixCsZPg6afl yz5UA2LgFS8TNf0EdjcwALRX8Qm/RNqj13G9LgPLoShaeQFSEzkxz4GyN4Be7JFx LAVWkYfMQGDgxzbc7jXCHdqE7G0H+vSgVLJk55YrcMGY4r9ol2fFCMKYZgqQlPAB cNnS3v9dMAIDKoCQInei1U1BgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOQvj3R 9CWVQgNYbJGRj4SpgH/CMB8GA1UdIwQYMBaAFGMO/IvIJH+ZoBKAdB5KGg238Uew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FMkNGOTQwQTQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1bWdFb0IwSGtvYURiZnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1 bWdFb0IwSGtvYURiZnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL80L2o8+RUaD3YKhFRcvu3myNTzph/kRehBzJjTf/b1w0f7ClVSH5OCh5C8V YSqzf8gvn//1GMkVJ9xQ2s5s7C4DpnMMpi4/sKX6d3m/supYWFiJ8xOyXdfei2u2 93FMgPFl5lbyRmeh7c2YHpYHlj11csLsBiYWHgMACj4ZeDkMeVPosDLeGBBzzaWc Ipj4jy8clsdQ/pYBBb+PmTPO2t3GiaaqwjVO2eBAW8vtxmYeSZ2BT9Q8IhDD39/x 5/G6LcOuCgCukf6w5alHCDwSu+UjM9PfwuuQdxq6Pyecez2+64+YTCQSwUme4dS0 LUPxtZ3xG65Li0KgHIBJIB0OJA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:26 2026 by rpki-client