$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: VbQxKCnLzghS30ItL4j593mr/o/1SnwmI+8aLm3uvKA= Subject key identifier: C3:F7:CB:B9:AC:B6:09:0C:B0:E1:E4:52:F3:0F:34:21:1D:03:1B:05 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: F7 Signing time: Wed 25 Mar 2026 05:31:08 +0000 Manifest this update: Wed 25 Mar 2026 05:31:08 +0000 Manifest next update: Wed 01 Apr 2026 05:31:08 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: 4Hk4fkJYUKx5x4K41VBf98ws01wZXF/snJsC5m7ghhk=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: zNFgnvoA/0CMs26VKwtX8JS10QHmGc04Gpc4vtJA0LQ=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: 6KLtFcE2fvWR+tw55m57pBI0diDqJjyzD/r4YO1tgys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Mar 25 05:31:08 2026 GMT Not After : Apr 1 05:31:08 2026 GMT Subject: CN=69c3731c-6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:08:9d:3b:45:ea:1c:a3:8b:4c:2f:8e:eb: 55:82:2b:2b:9b:7c:9b:5c:bb:1d:43:54:5d:c8:e4: 3c:de:c2:34:2c:ac:a1:76:89:40:c4:86:70:cf:34: 17:47:71:01:0b:8e:73:a2:3a:41:cf:74:de:ff:ad: 86:3e:d2:36:6f:81:5f:26:b6:0b:1c:bb:07:35:76: b8:f2:5b:56:fd:ee:6e:2d:70:6b:a0:6b:82:ee:6d: ce:33:5a:c9:d4:51:58:ee:fc:f3:59:7d:87:ad:53: 70:84:9f:95:03:5a:79:7f:75:02:29:ab:bf:40:a8: b7:85:04:c9:43:bc:8e:41:c5:bc:83:95:b2:b7:32: 9e:a1:72:d0:c2:11:d0:6f:3b:99:9e:4c:7c:31:73: c3:54:36:62:aa:47:80:8d:6b:e1:57:d2:26:f6:d8: 8c:9c:a1:7e:9d:d4:ca:de:3d:1b:02:80:62:8f:8a: 4a:bc:8d:40:ee:b7:00:f8:3b:cf:6e:7f:12:66:e2: 5c:aa:4d:f9:c6:2d:70:42:c9:78:01:90:8b:b9:70: 8e:61:22:e9:ad:f3:14:e1:64:4a:13:a2:84:b3:e8: a2:4d:c4:53:49:45:65:4d:b3:2d:8e:4a:c7:ca:44: 59:7c:dd:c8:75:7c:05:a1:44:40:9b:15:c1:73:66: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F7:CB:B9:AC:B6:09:0C:B0:E1:E4:52:F3:0F:34:21:1D:03:1B:05 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b6:43:2a:b6:67:48:d3:ff:62:34:df:69:0f:fa:ef:02:cd: e0:e7:4f:0a:e9:ef:84:8a:d3:2b:00:5f:a0:0d:dd:68:fb:dd: 1e:bd:98:50:d8:bc:40:bd:c8:2e:d8:c5:63:8a:3f:3d:4b:f8: e5:40:42:46:a0:1c:4d:fe:cf:da:be:b5:ab:a2:82:3f:cb:2c: 42:02:48:87:50:d5:c8:cb:10:e3:d8:50:6c:eb:50:ac:98:fc: 48:37:a3:ee:65:65:13:22:28:e2:79:94:d0:39:45:71:a2:e6: 1d:39:4b:e2:19:d4:25:bc:af:ed:78:ad:82:27:11:eb:f6:15: 9b:2a:0e:b7:3e:16:bc:ae:4a:7b:ac:58:1c:a2:7d:a6:b2:10: fb:9e:38:37:11:b9:39:ba:0d:8e:44:07:08:d3:3e:9a:06:1a: a1:3f:5f:0c:0e:03:d4:73:06:71:4f:ed:00:0e:5b:29:33:47: 14:0e:77:8c:b9:0e:26:9e:66:ff:fd:13:54:e0:ca:66:07:45: 88:17:9b:57:5d:da:cd:ce:d2:4a:0c:ca:05:38:cc:65:8e:54: ab:4f:e6:cd:39:84:c9:87:44:4d:d1:23:0e:4f:fb:c1:41:f8: 03:d8:b6:69:f5:9b:3c:d1:b1:53:57:17:fa:b5:74:90:6d:bb: 0c:5f:b6:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYwMzI1MDUzMTA4WhcNMjYwNDAxMDUzMTA4WjAYMRYwFAYD VQQDEw02OWMzNzMxYy02NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk0InTtF6hyji0wvjutVgisrm3ybXLsdQ1RdyOQ83sI0LKyhdolAxIZwzzQX R3EBC45zojpBz3Te/62GPtI2b4FfJrYLHLsHNXa48ltW/e5uLXBroGuC7m3OM1rJ 1FFY7vzzWX2HrVNwhJ+VA1p5f3UCKau/QKi3hQTJQ7yOQcW8g5WytzKeoXLQwhHQ bzuZnkx8MXPDVDZiqkeAjWvhV9Im9tiMnKF+ndTK3j0bAoBij4pKvI1A7rcA+DvP bn8SZuJcqk35xi1wQsl4AZCLuXCOYSLprfMU4WRKE6KEs+iiTcRTSUVlTbMtjkrH ykRZfN3IdXwFoURAmxXBc2a/twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMP3y7ms tgkMsOHkUvMPNCEdAxsFMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT7ZDKrZnSNP/YjTfaQ/67wLN4OdPCunvhIrTKwBfoA3daPvdHr2YUNi8QL3I LtjFY4o/PUv45UBCRqAcTf7P2r61q6KCP8ssQgJIh1DVyMsQ49hQbOtQrJj8SDej 7mVlEyIo4nmU0DlFcaLmHTlL4hnUJbyv7XitgicR6/YVmyoOtz4WvK5Ke6xYHKJ9 prIQ+544NxG5OboNjkQHCNM+mgYaoT9fDA4D1HMGcU/tAA5bKTNHFA53jLkOJp5m //0TVODKZgdFiBebV13azc7SSgzKBTjMZY5Uq0/mzTmEyYdETdEjDk/7wUH4A9i2 afWbPNGxU1cX+rV0kG27DF+2sA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:53 2026 by rpki-client