$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: b4WHjoFmbR6UbMIHV2LPA0SPRv+VbOp/ABHaTOy6vS0= Subject key identifier: F2:80:0E:60:CD:FA:06:D6:36:7C:33:A8:93:2B:F3:1F:E6:9C:D0:4F Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0C69 Signing time: Tue 24 Mar 2026 18:31:57 +0000 Manifest this update: Tue 24 Mar 2026 18:31:57 +0000 Manifest next update: Tue 31 Mar 2026 18:31:57 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: d/KBpiaza0zrE7wCHUgRIOtB32ag0A43wkWO3zIp6a4=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: EHjk/F86ucLzY9sYVqsytzQA1yeTqJoqFn2Dz1cc9Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Mar 24 18:31:57 2026 GMT Not After : Mar 31 18:31:57 2026 GMT Subject: CN=69c2d89d-ee31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:cf:2d:e8:9d:8c:45:17:d4:e0:9a:6f:f7: 20:d1:64:a8:6e:c7:ad:e1:98:60:e6:2f:ad:7b:27: 4c:2a:ca:b4:53:6a:49:6d:82:66:4d:7a:eb:f0:26: 1d:7f:7f:a8:b0:0c:4a:e6:0c:0f:2f:8c:5d:63:d5: 9e:a4:69:8b:0d:a8:87:d2:29:0b:01:a1:bf:fa:f4: 4e:c9:22:a1:66:3f:cf:59:10:0d:52:4c:2a:92:5f: 0b:c3:1d:f3:d6:81:e9:dc:34:5c:5a:99:66:8d:d3: 10:20:74:2f:12:7a:e1:50:30:47:29:a8:fa:4e:c2: f3:58:f5:a1:b6:a0:7a:7c:a8:13:36:f2:f4:bb:25: 74:d6:17:9e:40:83:09:7a:99:c1:c7:93:b1:d8:d5: 22:ae:7e:dd:19:b3:58:4a:3c:24:51:f8:fc:61:3a: c9:e7:67:3f:26:3d:55:2c:34:e8:44:14:7a:56:90: e3:f3:67:08:a9:69:15:58:ca:ca:70:2b:61:8a:e0: ed:30:28:07:1e:b8:84:32:3d:43:ca:34:4b:d3:37: a0:5a:27:71:2d:91:8c:de:5e:fd:af:01:d1:81:17: 30:c4:bb:16:64:cd:3f:d7:0a:96:ae:7d:d8:73:fe: 43:13:c3:ea:10:db:83:23:3d:ec:75:e9:6c:2e:05: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:80:0E:60:CD:FA:06:D6:36:7C:33:A8:93:2B:F3:1F:E6:9C:D0:4F X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:db:03:38:05:50:3d:db:3e:21:37:8b:c3:c3:31:77:a5:3b: 9b:d2:37:a9:17:a3:f3:df:ce:16:ce:e3:e5:be:47:9e:04:c4: 94:00:e5:6c:18:f8:03:c3:7c:93:65:25:c6:36:d7:f5:da:98: 01:83:21:aa:52:fa:83:ff:c8:75:a3:bd:7d:95:83:75:6c:3d: d8:3d:ae:aa:59:80:44:f6:35:85:66:e8:d6:b0:26:ea:87:2e: 06:8f:19:9b:62:c4:fd:41:50:40:04:e0:2e:0a:95:66:eb:79: 73:50:9f:01:65:2e:c2:98:74:d9:27:0c:9a:65:fb:eb:d2:3c: 61:e2:3f:61:9b:7d:ab:84:05:23:b1:3b:88:6f:ed:ed:04:7c: a6:3b:6f:2a:5a:98:ad:e7:34:83:b3:ca:65:3c:84:c8:cb:35: 3c:40:ca:df:22:da:7f:45:91:34:81:f4:cf:af:f0:1f:af:1e: bb:7a:c4:79:52:71:32:c8:47:cd:d3:96:ff:c7:1a:5f:e9:2f: 0b:32:6e:48:21:88:5c:86:2c:b7:d0:8a:15:2f:89:fb:5c:13: 51:64:ea:71:da:7f:3a:52:e7:0d:40:92:1b:e5:e4:2a:34:a4: 9f:25:49:07:b1:a4:bf:07:89:fb:6f:f6:2b:3d:33:1d:ec:55: 91:22:69:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjYwMzI0MTgzMTU3WhcNMjYwMzMxMTgzMTU3WjAYMRYwFAYD VQQDEw02OWMyZDg5ZC1lZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGXPLeidjEUX1OCab/cg0WSobset4Zhg5i+teydMKsq0U2pJbYJmTXrr8CYd f3+osAxK5gwPL4xdY9WepGmLDaiH0ikLAaG/+vROySKhZj/PWRANUkwqkl8Lwx3z 1oHp3DRcWplmjdMQIHQvEnrhUDBHKaj6TsLzWPWhtqB6fKgTNvL0uyV01heeQIMJ epnBx5Ox2NUirn7dGbNYSjwkUfj8YTrJ52c/Jj1VLDToRBR6VpDj82cIqWkVWMrK cCthiuDtMCgHHriEMj1DyjRL0zegWidxLZGM3l79rwHRgRcwxLsWZM0/1wqWrn3Y c/5DE8PqENuDIz3sdelsLgV9XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKADmDN +gbWNnwzqJMr8x/mnNBPMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9sDOAVQPds+ITeLw8Mxd6U7m9I3qRej89/OFs7j5b5HngTElADlbBj4A8N8 k2UlxjbX9dqYAYMhqlL6g//IdaO9fZWDdWw92D2uqlmARPY1hWbo1rAm6ocuBo8Z m2LE/UFQQATgLgqVZut5c1CfAWUuwph02ScMmmX769I8YeI/YZt9q4QFI7E7iG/t 7QR8pjtvKlqYrec0g7PKZTyEyMs1PEDK3yLaf0WRNIH0z6/wH68eu3rEeVJxMshH zdOW/8caX+kvCzJuSCGIXIYst9CKFS+J+1wTUWTqcdp/OlLnDUCSG+XkKjSknyVJ B7GkvweJ+2/2Kz0zHexVkSJp6A== -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:38 2026 by rpki-client