$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: HIQuBLB39BFUMhdD/NDXOTl8FACHdpuIFFl6ZPZmiBk= Subject key identifier: 2E:07:F7:09:77:5B:FC:6B:25:77:02:2E:D1:4C:B4:9A:E5:90:79:01 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 121E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 11EE Signing time: Tue 24 Mar 2026 17:03:31 +0000 Manifest this update: Tue 24 Mar 2026 17:03:30 +0000 Manifest next update: Tue 31 Mar 2026 17:03:30 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: us4H7yoBIXZ4GAjED2Zvnb/bInX1KMF4Nn2as06m244=) 2: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: dUhydAjgKVF+dvbmFcmWGDtSlwxZL+Vj3jLH5MNf/As=) 3: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: XX8/d75yXVIyhm6RsU1UGXYkE9gnpBtpyR447Qb5no4=) 4: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: VRl3r6QA/RiXbXiIjyAheH1mdihJQ/86RScyJbRxe14=) 5: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: pwjjrONYryQZDPYL16AJ0YNOVq8g4YjDqBcgaxhvzro=) 6: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: EHoRjwAgONgjkkJEwCnkFsQdVYjWFMTXWBDCSKhZ4nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4638 (0x121e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Mar 24 17:03:30 2026 GMT Not After : Mar 31 17:03:30 2026 GMT Subject: CN=69c2c3e3-934e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:2d:06:d4:ad:18:c5:ec:27:b7:50:e8:78: 63:c1:84:fc:fe:42:59:e9:07:e8:a5:3b:5f:ee:50: 85:86:ce:69:e4:2c:8f:1d:db:fb:47:f0:aa:2c:3f: bb:8f:e4:01:33:a7:64:c0:8a:0c:6f:85:17:19:9e: a4:56:e3:fa:56:50:51:b8:64:0f:29:b8:5e:84:9c: 5c:d7:97:27:93:76:e5:7b:88:69:04:5e:fe:d8:25: 6a:dd:73:51:4f:1d:0d:30:6e:fa:ad:15:40:e9:39: 60:e4:29:00:0c:dd:b8:76:92:bd:c0:18:c6:3a:8d: 79:b6:70:a7:0a:e0:92:2f:a8:51:50:1f:bb:e0:b1: ea:27:8e:fe:90:e4:4a:21:a1:c7:17:b5:87:c7:b2: f4:82:10:90:70:ce:d6:6a:08:33:f5:1b:52:4d:d5: ff:08:d3:af:5e:1a:2e:12:f7:80:93:03:2a:fd:8c: 24:5d:70:19:1c:f2:3a:c0:02:c3:a8:07:33:3c:e0: 87:16:a2:e9:27:e8:5e:11:fe:78:e9:28:bc:ea:da: 28:af:e5:71:d6:20:96:bf:24:b5:f5:da:fd:c3:07: f0:01:50:0d:e1:22:8e:a4:c1:77:21:51:8b:91:c5: d9:78:24:3e:b2:07:40:fc:a8:06:34:1b:e1:87:4b: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:07:F7:09:77:5B:FC:6B:25:77:02:2E:D1:4C:B4:9A:E5:90:79:01 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:19:50:81:bf:37:15:73:db:dc:54:59:c3:f8:50:b4:b9:1b: 17:c6:89:f5:f8:54:cc:53:a8:20:a1:3a:36:31:7c:58:46:03: e7:2f:69:bf:36:34:6e:a6:4e:58:11:40:7b:62:9f:2a:42:d6: 1e:a6:5c:67:4e:6f:9d:8c:28:f9:89:67:69:1a:ad:a2:15:10: e6:ce:5f:d3:a5:97:47:10:84:94:f5:34:6f:65:18:fa:09:da: dc:15:49:20:a1:24:fa:d1:4a:29:f5:08:92:23:da:cf:b7:ce: 26:02:61:8e:ef:c8:ca:89:43:f1:5c:bf:b6:b1:ba:0a:0f:dc: 83:6e:2a:1e:15:95:78:08:fe:24:42:f7:fb:30:f1:5b:b4:9a: 59:c0:01:cf:e8:bd:50:57:cc:08:0d:64:ed:81:80:27:a2:2d: 0a:e1:83:3e:2d:74:66:64:80:1b:9c:30:4c:e0:1c:45:93:ee: ce:a3:f9:ec:ad:0f:70:7e:89:26:19:19:31:f0:b4:f2:1b:9d: a3:fe:0f:5e:76:49:56:91:9d:36:68:04:f0:4f:a6:dd:7f:4f: 6c:c9:0e:9a:3f:10:49:63:15:5d:12:02:f9:da:8c:a6:a3:41: d6:0b:8e:fc:5e:4e:bd:d9:d5:85:cf:40:ae:6a:8c:07:1c:73: b6:94:36:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjYwMzI0MTcwMzMwWhcNMjYwMzMxMTcwMzMwWjAYMRYwFAYD VQQDEw02OWMyYzNlMy05MzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FEtBtStGMXsJ7dQ6HhjwYT8/kJZ6QfopTtf7lCFhs5p5CyPHdv7R/CqLD+7 j+QBM6dkwIoMb4UXGZ6kVuP6VlBRuGQPKbhehJxc15cnk3ble4hpBF7+2CVq3XNR Tx0NMG76rRVA6Tlg5CkADN24dpK9wBjGOo15tnCnCuCSL6hRUB+74LHqJ47+kORK IaHHF7WHx7L0ghCQcM7Waggz9RtSTdX/CNOvXhouEveAkwMq/YwkXXAZHPI6wALD qAczPOCHFqLpJ+heEf546Si86toor+Vx1iCWvyS19dr9wwfwAVAN4SKOpMF3IVGL kcXZeCQ+sgdA/KgGNBvhh0s+3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4H9wl3 W/xrJXcCLtFMtJrlkHkBMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANxlQgb83FXPb3FRZw/hQtLkbF8aJ9fhUzFOoIKE6NjF8WEYD5y9pvzY0bqZO WBFAe2KfKkLWHqZcZ05vnYwo+YlnaRqtohUQ5s5f06WXRxCElPU0b2UY+gna3BVJ IKEk+tFKKfUIkiPaz7fOJgJhju/IyolD8Vy/trG6Cg/cg24qHhWVeAj+JEL3+zDx W7SaWcABz+i9UFfMCA1k7YGAJ6ItCuGDPi10ZmSAG5wwTOAcRZPuzqP57K0PcH6J JhkZMfC08hudo/4PXnZJVpGdNmgE8E+m3X9PbMkOmj8QSWMVXRIC+dqMpqNB1guO /F5OvdnVhc9ArmqMBxxztpQ2Aw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:11 2026 by rpki-client