$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: wVqJb8sWdC6NG5W0wQph8aMBOPkOMSyVOZkNA6iCiDo= Subject key identifier: ED:F2:F4:9C:40:9E:3E:37:EA:03:8F:FE:1B:C2:C3:F3:46:73:FD:2A Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 03CA Signing time: Wed 25 Mar 2026 00:16:01 +0000 Manifest this update: Wed 25 Mar 2026 00:16:01 +0000 Manifest next update: Wed 01 Apr 2026 00:16:01 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: 4I2FMAyE+BCjXg1XWBMNJUF/p3WHz+VafuJJFRUf6Ig=) 2: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=) 3: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Mar 25 00:16:01 2026 GMT Not After : Apr 1 00:16:01 2026 GMT Subject: CN=69c32941-358d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:98:8d:5d:68:71:2c:0c:4b:a6:0d:f4:93: 87:76:23:bb:e3:e8:dd:14:2f:77:e9:5f:58:79:ee: aa:ff:3a:7a:89:38:eb:b5:44:25:7c:81:1e:ba:a6: 48:a9:2d:ba:c8:b3:8d:9c:90:36:39:7f:7d:9b:b5: e3:64:43:64:c2:c1:9d:ee:00:84:d7:76:c1:0a:73: 2c:f4:8b:9d:22:dc:0e:47:d3:6c:d7:67:50:cd:61: 73:6f:8f:db:a0:bc:19:84:ce:96:a3:1e:cc:e5:55: 75:5f:57:d7:d2:c4:f6:f1:0c:ed:a0:94:b4:02:ef: 1b:0e:6f:1d:9b:75:53:48:4e:6f:c8:fa:ee:0a:25: f3:b2:66:a7:59:e1:19:d5:99:47:d5:50:55:cd:0b: 71:cf:a6:e6:91:41:97:67:ff:de:43:1e:11:6b:99: 65:05:2b:00:eb:e0:78:d0:90:9f:7a:42:f3:39:41: 1e:d2:12:cd:72:a2:be:c8:85:e2:f4:72:16:e3:4d: 94:23:02:e4:26:42:d5:08:d0:e1:48:5f:ad:29:fe: b4:67:f3:53:e4:43:22:3f:cc:74:4c:e3:bd:f1:5e: 14:d1:93:00:50:d3:c0:c8:f7:4b:53:98:d5:90:4f: 45:4e:33:95:6f:ee:c5:e5:f6:b3:0b:58:71:b2:4c: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F2:F4:9C:40:9E:3E:37:EA:03:8F:FE:1B:C2:C3:F3:46:73:FD:2A X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4f:52:00:6d:a1:e5:41:ce:e1:47:bc:f9:1d:26:a4:ad:d5: 39:e2:07:79:f6:21:b3:69:c5:b7:46:d0:29:39:82:83:d6:83: 43:ec:b2:bb:29:9d:10:cc:9c:e4:34:27:70:cc:57:fc:45:c0: 4c:da:cf:47:54:c1:36:9f:b3:ed:6d:f9:d9:04:c6:12:1e:ea: e5:e6:ae:26:6f:85:df:b5:d5:6c:20:18:80:69:d5:1d:4c:f3: 9f:65:8c:f9:d1:75:57:fb:4c:97:e9:91:9a:00:f5:d0:40:da: b6:8b:10:02:35:53:9d:fa:26:c0:6b:56:9a:37:c3:88:d1:f4: 9f:be:16:a3:a8:33:27:b0:2b:46:01:4f:df:f2:fe:76:89:95: ab:00:aa:04:55:bc:7a:31:34:2d:08:34:24:7f:3c:05:97:a0: a3:ca:50:c8:dc:e8:e7:d2:4e:94:e2:78:7c:8d:9d:52:eb:09: d6:83:12:43:5b:10:40:0f:7a:a6:c2:3f:85:5a:9e:c0:e3:8e: 53:71:f9:a8:bf:d0:10:b2:0d:32:05:87:2e:b8:8c:c3:f7:ad: 56:e1:dd:c3:f3:a1:c7:2e:70:1c:28:1b:01:66:2e:54:0e:49: 1b:f9:5f:7a:c5:50:1f:e1:cb:8f:b3:1c:09:89:4e:1e:19:6b: da:79:d8:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjYwMzI1MDAxNjAxWhcNMjYwNDAxMDAxNjAxWjAYMRYwFAYD VQQDEw02OWMzMjk0MS0zNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyiYjV1ocSwMS6YN9JOHdiO74+jdFC936V9Yee6q/zp6iTjrtUQlfIEeuqZI qS26yLONnJA2OX99m7XjZENkwsGd7gCE13bBCnMs9IudItwOR9Ns12dQzWFzb4/b oLwZhM6Wox7M5VV1X1fX0sT28QztoJS0Au8bDm8dm3VTSE5vyPruCiXzsmanWeEZ 1ZlH1VBVzQtxz6bmkUGXZ//eQx4Ra5llBSsA6+B40JCfekLzOUEe0hLNcqK+yIXi 9HIW402UIwLkJkLVCNDhSF+tKf60Z/NT5EMiP8x0TOO98V4U0ZMAUNPAyPdLU5jV kE9FTjOVb+7F5fazC1hxskwefQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3y9JxA nj436gOP/hvCw/NGc/0qMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiU9SAG2h5UHO4Ue8+R0mpK3VOeIHefYhs2nFt0bQKTmCg9aDQ+yyuymdEMyc 5DQncMxX/EXATNrPR1TBNp+z7W352QTGEh7q5eauJm+F37XVbCAYgGnVHUzzn2WM +dF1V/tMl+mRmgD10EDatosQAjVTnfomwGtWmjfDiNH0n74Wo6gzJ7ArRgFP3/L+ domVqwCqBFW8ejE0LQg0JH88BZego8pQyNzo59JOlOJ4fI2dUusJ1oMSQ1sQQA96 psI/hVqewOOOU3H5qL/QELINMgWHLriMw/etVuHdw/Ohxy5wHCgbAWYuVA5JG/lf esVQH+HLj7McCYlOHhlr2nnYDA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:29 2026 by rpki-client