$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: v+IuArXoBVgMXUo6ef7UF5l7kue1fHTMXdTdcqbEXLE= Subject key identifier: 45:57:7B:25:B5:E2:2F:46:9A:F5:FE:63:C6:A2:C9:95:94:DD:69:94 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0A29 Signing time: Tue 24 Mar 2026 19:35:23 +0000 Manifest this update: Tue 24 Mar 2026 19:35:23 +0000 Manifest next update: Tue 31 Mar 2026 19:35:23 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: IQke6p8VoEKmelug1TkMjy1RpCCJXy0qtnu08x48uBI=) 2: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=) 4: 7E645DDA123511F19B73B6E9233D8C67.roa (hash: Lf9KFa0nKOWU6CI7SCy/k5kIenr/yr27iXLl4mKSIX0=) 5: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=) 6: 7D0B1750124C11F1948F10C8293D8C67.roa (hash: GzMsXq/aTj9FzAzYn7KgNFAIOqbcmYFPlYWTUb/eH5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Mar 24 19:35:23 2026 GMT Not After : Mar 31 19:35:23 2026 GMT Subject: CN=69c2e77b-55e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:97:b4:e7:4b:2b:ab:c2:dc:e0:52:23:ee: 07:6f:dd:0d:d1:31:13:da:3b:00:38:a3:ca:75:47: f4:ef:1d:a9:3a:77:a4:bd:b6:4c:04:8d:3f:b5:20: bf:1c:03:66:d2:00:46:d8:e4:dd:ef:a6:37:64:c1: 0a:0f:16:26:e4:c3:4f:9f:77:15:50:12:63:5b:e6: e2:bc:08:4f:f1:ee:ab:22:5a:4e:e4:20:7f:73:b5: 6d:e0:13:e9:2b:2b:ea:dd:9d:9f:2a:71:97:9b:c3: de:99:45:ad:5c:61:c5:9a:30:5e:fa:9f:80:82:ca: 49:07:e5:14:98:4a:82:dc:a1:1d:16:3d:14:ab:da: a5:2b:08:41:85:84:13:43:49:60:a1:07:e2:09:4f: 09:ae:2f:bf:55:a6:77:ce:66:38:c6:2b:7c:c4:d1: 8f:57:42:cc:17:20:a7:33:82:75:47:10:4f:14:21: 0f:cd:d6:28:4c:79:7f:67:01:ea:18:78:7c:0f:f0: 19:e8:1f:d9:a9:f8:65:74:60:fa:6c:58:73:4a:0e: 86:e3:21:e3:72:de:d9:bb:08:0d:15:0d:45:11:32: 47:0c:0d:4f:cb:bf:86:98:c8:06:bf:d2:3c:7d:58: b2:db:eb:c6:59:4b:ca:68:d9:46:42:70:eb:ae:7a: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:57:7B:25:B5:E2:2F:46:9A:F5:FE:63:C6:A2:C9:95:94:DD:69:94 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:c3:8e:0c:b7:37:9b:60:60:a0:89:e7:4a:7a:b0:9b:b0:bb: ba:07:fe:4b:9a:3b:86:60:4c:17:02:b8:cb:2a:90:6c:bb:45: f7:36:f3:fe:ba:94:23:87:1b:70:74:89:52:ab:28:25:32:f8: 36:a8:bb:76:0a:fb:3c:13:2e:84:43:7e:dd:6a:7d:be:a2:d0: e3:98:6b:6a:28:fc:4a:a4:cc:80:71:7c:a0:8d:f0:bb:d3:a2: 34:70:4c:2c:e3:c7:97:40:87:4f:1b:fa:9b:19:25:50:83:ab: 59:23:43:f7:93:fd:b0:64:cf:0c:aa:c8:1b:9d:d5:26:70:22: 07:ef:e1:9f:3b:6a:83:3c:bc:59:62:64:bf:4d:5e:1d:74:c3: c6:80:81:3d:c9:ac:c7:f0:30:d8:e9:34:66:4e:ae:e6:67:c6: 5c:33:95:73:56:9e:49:57:ac:33:e0:40:80:7b:04:0b:86:c1: 51:5d:38:a6:4b:b5:0f:96:35:d3:42:1c:7a:ac:47:eb:0c:6b: 23:b2:97:d3:c3:d1:ff:19:5c:ca:78:c1:54:71:04:ec:fc:a1: 90:98:57:7e:12:4f:e7:4d:f1:b1:51:53:c2:b4:82:40:2f:81: 94:0f:e6:6d:bb:ef:3f:1c:37:30:47:f3:e3:9a:c6:de:1c:f9: 58:d3:bd:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwMzI0MTkzNTIzWhcNMjYwMzMxMTkzNTIzWjAYMRYwFAYD VQQDEw02OWMyZTc3Yi01NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q+XtOdLK6vC3OBSI+4Hb90N0TET2jsAOKPKdUf07x2pOnekvbZMBI0/tSC/ HANm0gBG2OTd76Y3ZMEKDxYm5MNPn3cVUBJjW+bivAhP8e6rIlpO5CB/c7Vt4BPp Kyvq3Z2fKnGXm8PemUWtXGHFmjBe+p+AgspJB+UUmEqC3KEdFj0Uq9qlKwhBhYQT Q0lgoQfiCU8Jri+/VaZ3zmY4xit8xNGPV0LMFyCnM4J1RxBPFCEPzdYoTHl/ZwHq GHh8D/AZ6B/ZqfhldGD6bFhzSg6G4yHjct7ZuwgNFQ1FETJHDA1Py7+GmMgGv9I8 fViy2+vGWUvKaNlGQnDrrnpABwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVXeyW1 4i9GmvX+Y8aiyZWU3WmUMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq8OODLc3m2BgoInnSnqwm7C7ugf+S5o7hmBMFwK4yyqQbLtF9zbz/rqUI4cb cHSJUqsoJTL4Nqi7dgr7PBMuhEN+3Wp9vqLQ45hraij8SqTMgHF8oI3wu9OiNHBM LOPHl0CHTxv6mxklUIOrWSND95P9sGTPDKrIG53VJnAiB+/hnztqgzy8WWJkv01e HXTDxoCBPcmsx/Aw2Ok0Zk6u5mfGXDOVc1aeSVesM+BAgHsEC4bBUV04pku1D5Y1 00IceqxH6wxrI7KX08PR/xlcynjBVHEE7PyhkJhXfhJP503xsVFTwrSCQC+BlA/m bbvvPxw3MEfz45rG3hz5WNO9Ig== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:40 2026 by rpki-client