$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json) Hash identifier: jaPec+qZsaA3pYOuuzfLUZqapr8D1SJywqRi7k2I2CA= Subject key identifier: 2C:92:10:82:23:BC:13:1A:D7:B4:E6:7C:C3:53:D0:1C:62:BD:5C:C5 Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft Manifest number: 4B Signing time: Wed 25 Mar 2026 07:27:58 +0000 Manifest this update: Wed 25 Mar 2026 07:27:58 +0000 Manifest next update: Wed 01 Apr 2026 07:27:58 +0000 Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: /22ZzI3hSl8SVYG5FhEz1+wdo2ZTt6d334EGHkaP37c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Validity Not Before: Mar 25 07:27:58 2026 GMT Not After : Apr 1 07:27:58 2026 GMT Subject: CN=69c38e7e-bd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:7d:9b:ba:93:9c:4b:23:f2:19:2c:83:97: b8:8d:20:35:2e:b1:f6:5c:77:4a:f8:32:d2:d1:b2: 96:5e:5a:43:00:c2:24:39:85:88:0b:4d:0a:5e:82: cc:4e:a3:b8:89:a5:cc:7e:89:5b:3f:29:56:ea:d2: 80:ad:a4:6a:eb:df:a9:5b:af:a6:fb:06:19:3e:dc: ef:a6:01:62:0d:11:20:f2:8d:43:24:f5:b2:ae:60: 35:89:f1:f2:61:9b:0b:d2:38:a9:39:45:c1:0e:14: cb:6f:09:33:46:ba:6f:94:65:84:1c:d5:d5:8c:24: 36:46:dc:c1:35:28:76:6b:18:31:d4:c7:ea:4e:3e: fc:54:cb:8f:e7:2a:5a:a5:7d:16:45:5b:90:90:ff: c2:5f:64:7f:ef:7d:04:da:67:54:fc:16:8f:3b:cd: 0f:96:18:5c:79:3e:2a:72:ef:14:85:c9:21:ca:33: 8c:2c:4c:c1:d2:64:4f:64:e6:fa:05:bf:e5:95:b7: b0:53:43:d4:fc:fd:0a:db:b3:de:41:c1:ff:a5:20: a1:ed:0e:00:1b:18:89:89:75:87:85:d8:ff:30:88: d5:40:4e:a6:07:0a:8f:3e:22:f6:f3:ac:97:5e:4c: e4:8a:4e:e2:52:e5:ea:79:bd:29:83:cb:25:51:2f: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:92:10:82:23:BC:13:1A:D7:B4:E6:7C:C3:53:D0:1C:62:BD:5C:C5 X509v3 Authority Key Identifier: keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3a:a9:76:fa:21:19:68:7c:1b:21:21:5f:5c:89:ee:2b:f8: 67:a6:45:91:8d:66:5b:01:b8:ba:b7:d7:2e:64:11:be:ed:75: 70:92:27:72:bb:a4:33:46:85:76:f4:e9:6f:11:c6:79:fd:d5: ee:54:db:6a:eb:d2:fa:d0:54:68:4f:79:98:6e:bb:18:55:62: 07:8e:0d:7c:50:dc:c1:42:c8:b5:55:2a:57:43:d9:12:1d:d7: d1:39:43:50:b6:3c:fb:4f:e5:df:b5:40:d9:02:73:7c:bf:d6: cb:d1:68:ec:7f:d6:47:80:c6:7a:5d:17:7b:58:a2:b3:c1:0b: 3a:bb:6f:98:71:58:8f:a2:21:80:e0:61:58:98:f4:2a:f1:26: 38:96:8e:16:03:6f:9a:f1:a7:3d:93:93:49:1b:5b:2c:1d:6e: ea:fa:2d:6e:f0:1d:f0:f2:b1:2c:d4:31:79:e2:fc:d9:7e:90: fe:5a:5e:41:44:bb:28:92:1e:86:69:e1:d0:5c:fe:f0:ac:3d: 31:bc:fd:9f:1a:23:32:ae:06:9e:40:5f:56:f0:6a:a7:bf:5a: d2:d5:b5:5a:f6:aa:76:2b:47:a8:46:9f:59:9b:8f:6e:8e:e3: 5e:98:50:3e:04:2b:5f:2f:3a:f8:2e:c5:3c:d5:4d:33:d5:2b: 75:d6:07:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoNjA2MUU0NDY5MEVGNzhCMEFEQThEODM1MEQxMUNBOUUw MTk0OUMxNDAeFw0yNjAzMjUwNzI3NThaFw0yNjA0MDEwNzI3NThaMBgxFjAUBgNV BAMTDTY5YzM4ZTdlLWJkNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeOX2bupOcSyPyGSyDl7iNIDUusfZcd0r4MtLRspZeWkMAwiQ5hYgLTQpegsxO o7iJpcx+iVs/KVbq0oCtpGrr36lbr6b7Bhk+3O+mAWINESDyjUMk9bKuYDWJ8fJh mwvSOKk5RcEOFMtvCTNGum+UZYQc1dWMJDZG3ME1KHZrGDHUx+pOPvxUy4/nKlql fRZFW5CQ/8JfZH/vfQTaZ1T8Fo87zQ+WGFx5Pipy7xSFySHKM4wsTMHSZE9k5voF v+WVt7BTQ9T8/Qrbs95Bwf+lIKHtDgAbGImJdYeF2P8wiNVATqYHCo8+IvbzrJde TOSKTuJS5ep5vSmDyyVRLxcFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULJIQgiO8 ExrXtOZ8w1PQHGK9XMUwHwYDVR0jBBgwFoAUYGHkRpDveLCtqNg1DRHKngGUnBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0UzMzNFQzJFQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxDdHFOZzFEUkhLbmdHVW5C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUdIa1JwRHZlTEN0cU5nMURSSEtuZ0dVbkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTc2L0UzMzNFQzJFQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxD dHFOZzFEUkhLbmdHVW5CUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9Oql2+iEZaHwbISFfXInuK/hnpkWRjWZbAbi6t9cuZBG+7XVwkidyu6QzRoV2 9OlvEcZ5/dXuVNtq69L60FRoT3mYbrsYVWIHjg18UNzBQsi1VSpXQ9kSHdfROUNQ tjz7T+XftUDZAnN8v9bL0Wjsf9ZHgMZ6XRd7WKKzwQs6u2+YcViPoiGA4GFYmPQq 8SY4lo4WA2+a8ac9k5NJG1ssHW7q+i1u8B3w8rEs1DF54vzZfpD+Wl5BRLsokh6G aeHQXP7wrD0xvP2fGiMyrgaeQF9W8Gqnv1rS1bVa9qp2K0eoRp9Zm49ujuNemFA+ BCtfLzr4LsU81U0z1St11gfb -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:40 2026 by rpki-client