$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json) Hash identifier: J9Xd83dKg7FzHpyWmVZzda3h/AOJPRJWMDiwrZhz1k4= Subject key identifier: 34:43:15:BF:12:3D:5A:74:9D:C4:CD:A0:EB:24:12:28:86:9C:F8:96 Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft Manifest number: 0672 Signing time: Tue 24 Mar 2026 22:16:00 +0000 Manifest this update: Tue 24 Mar 2026 22:15:59 +0000 Manifest next update: Tue 31 Mar 2026 22:15:59 +0000 Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: Q3y23yusltnxsLaXUNQn1xmDulAJcSwgNAJbt0B8eS8=) 2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: Dbe7f6X4+CPJEylNpNLDJwF1y5Hhd5iHSBe5Hc4QBYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Validity Not Before: Mar 24 22:15:59 2026 GMT Not After : Mar 31 22:15:59 2026 GMT Subject: CN=69c30d1f-c91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:43:e3:06:1c:89:b5:42:46:96:9e:10:f8: 51:43:38:a9:3d:8e:fe:58:33:93:77:e2:3f:04:3a: 06:ff:6c:01:bf:b8:bb:b7:4c:95:ee:d1:88:9c:fd: 74:2a:6c:41:64:d9:0a:86:8a:cb:06:eb:68:5d:54: 8a:ac:5d:25:a7:3b:02:58:50:22:89:c6:cf:69:4d: 86:2f:9d:8b:a3:73:77:94:79:51:31:f9:b8:29:2d: 94:60:fb:f0:a6:28:38:47:06:3c:61:df:9f:db:9c: 9f:6b:be:0f:9e:dd:9c:09:2c:a0:40:d2:3b:da:11: 2f:8b:27:d7:a4:ae:bf:f0:e9:f8:fe:8a:e0:f8:7b: b5:a8:2e:6b:5e:00:bb:2d:de:ec:ad:bf:be:ac:c9: 07:00:52:53:8e:dd:56:3c:98:22:df:c2:c7:0e:9e: e5:45:e3:bc:db:a1:6d:d9:a6:7c:43:3a:a5:09:cf: df:9c:ce:a8:33:e4:58:5b:ff:04:6d:f2:f1:39:a0: fb:12:76:b2:f8:83:ab:f4:2e:ff:79:11:3e:a1:4e: 3e:9f:e5:ad:2e:44:c5:65:18:03:30:a6:a7:84:ea: 93:53:37:af:fd:b2:dc:fe:5a:78:ec:69:50:6a:5b: db:1f:e4:b3:d7:2d:ec:38:b4:84:bd:3a:3d:fe:7f: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:43:15:BF:12:3D:5A:74:9D:C4:CD:A0:EB:24:12:28:86:9C:F8:96 X509v3 Authority Key Identifier: keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:4f:c4:b0:15:9f:07:5d:e7:67:59:8e:30:ce:b9:88:ba:0f: 47:f2:8b:18:55:80:6d:4f:de:34:14:b4:44:26:5a:a3:36:87: a9:7c:1b:b3:45:d7:4f:69:e7:cb:4e:cc:01:91:77:53:90:fd: a4:d4:92:87:aa:d1:35:93:f0:02:c3:ae:e9:b5:fa:06:09:d0: 6b:64:bc:b4:ed:a7:65:d9:31:8b:5f:82:00:bc:ca:a4:50:e3: 23:99:bd:0e:af:0f:fa:6b:9e:6b:c7:e0:da:32:7a:d4:60:6a: ad:bb:eb:cb:17:25:25:b0:ad:40:25:71:0b:72:75:1e:52:c0: de:db:74:a2:4f:85:d4:f1:f5:d7:7d:7d:86:1c:44:79:1c:6c: e2:06:95:a7:e5:ba:73:2f:b8:2f:90:32:38:ea:64:71:47:34: 9c:93:d7:4d:83:f0:90:ee:51:53:d2:95:09:1d:9f:33:29:3a: 43:4d:48:2c:e2:79:d7:3b:23:19:ef:17:c0:a0:c9:a1:ab:75: bf:bf:26:cf:49:13:9f:a2:7e:95:ec:01:a3:f1:fe:9a:46:5a: 02:98:e5:6d:04:2d:0c:58:54:6b:29:4f:7f:b2:fe:f5:08:e5: e3:05:b5:35:36:b7:1b:49:50:89:ba:2c:3d:36:b6:62:06:34: b7:6a:e2:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy OUNFMkYwRDAwHhcNMjYwMzI0MjIxNTU5WhcNMjYwMzMxMjIxNTU5WjAYMRYwFAYD VQQDEw02OWMzMGQxZi1jOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1BD4wYcibVCRpaeEPhRQzipPY7+WDOTd+I/BDoG/2wBv7i7t0yV7tGInP10 KmxBZNkKhorLButoXVSKrF0lpzsCWFAiicbPaU2GL52Lo3N3lHlRMfm4KS2UYPvw pig4RwY8Yd+f25yfa74Pnt2cCSygQNI72hEviyfXpK6/8On4/org+Hu1qC5rXgC7 Ld7srb++rMkHAFJTjt1WPJgi38LHDp7lReO826Ft2aZ8QzqlCc/fnM6oM+RYW/8E bfLxOaD7Enay+IOr9C7/eRE+oU4+n+WtLkTFZRgDMKanhOqTUzev/bLc/lp47GlQ alvbH+Sz1y3sOLSEvTo9/n9hJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRDFb8S PVp0ncTNoOskEiiGnPiWMB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE c1Z5cHpNUEpCZElwemk4TkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF0/EsBWfB13nZ1mOMM65iLoPR/KLGFWAbU/eNBS0RCZaozaHqXwbs0XXT2nn y07MAZF3U5D9pNSSh6rRNZPwAsOu6bX6BgnQa2S8tO2nZdkxi1+CALzKpFDjI5m9 Dq8P+muea8fg2jJ61GBqrbvryxclJbCtQCVxC3J1HlLA3tt0ok+F1PH11319hhxE eRxs4gaVp+W6cy+4L5AyOOpkcUc0nJPXTYPwkO5RU9KVCR2fMyk6Q01ILOJ51zsj Ge8XwKDJoat1v78mz0kTn6J+lewBo/H+mkZaApjlbQQtDFhUaylPf7L+9Qjl4wW1 NTa3G0lQibosPTa2YgY0t2riPw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:39:43 2026 by rpki-client