$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: 8A8y7CIIYSXJaSns2WZhcKyXeMhx/6gkmySphE5kU6Y= Subject key identifier: E9:9F:2A:E0:9E:F9:24:88:F2:74:53:FA:C2:25:16:F4:91:EA:1A:E0 Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0CC1 Signing time: Tue 24 Mar 2026 18:14:12 +0000 Manifest this update: Tue 24 Mar 2026 18:14:12 +0000 Manifest next update: Tue 31 Mar 2026 18:14:12 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: deMY9sDrVG6Qzyzd6Lkos18WSpVUIlnXZB5vhe313V4=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: Og8kggLWLgVMfPp3OlQnblKMTWi+r7xJXzXK2YD03aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: Mar 24 18:14:12 2026 GMT Not After : Mar 31 18:14:12 2026 GMT Subject: CN=69c2d474-eb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:99:41:02:10:b5:cd:b0:6b:41:44:93:18:bd: cc:39:89:14:9f:dc:06:0b:88:ca:0b:55:ef:a4:c1: 1c:d8:a7:18:a1:f8:9d:70:b4:1e:46:f3:7d:10:b4: 6b:d4:95:29:0b:61:c4:b5:26:83:88:22:1e:d8:37: 25:33:c4:5b:24:47:4c:4f:86:0d:36:2b:ba:7d:16: c5:0e:e2:56:9f:03:14:bc:73:82:03:0d:b0:80:53: 2b:a9:2e:e4:73:a7:8d:7b:df:9d:fc:cc:a2:bd:96: 80:40:c6:94:7f:52:fe:5a:27:58:17:1f:eb:a2:b1: d2:da:c8:f7:f4:d0:7b:89:df:12:a9:c0:89:ab:ed: de:4c:c9:cd:59:45:41:13:81:93:d7:6f:21:d0:ee: cc:2f:e0:19:3a:11:96:04:db:6a:59:fe:4a:b6:8c: 79:c3:1e:b5:49:63:7e:3c:70:70:c7:91:30:b2:69: c5:7f:97:29:10:0e:14:c9:63:cb:14:2f:4a:fb:4d: 43:82:fb:47:0e:51:28:c8:3b:46:9f:fc:49:31:ea: fe:ba:d3:d1:22:8c:c5:ee:1d:7f:57:f5:cc:bb:b1: 5a:80:cf:b1:11:f7:cb:a5:e6:71:e6:35:bf:da:3f: b3:c0:87:3f:38:98:12:3b:a1:c1:dc:16:94:06:f0: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9F:2A:E0:9E:F9:24:88:F2:74:53:FA:C2:25:16:F4:91:EA:1A:E0 X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9e:5b:c2:21:67:05:7b:cf:21:8b:66:08:3c:2e:c2:14:93: e6:4b:26:08:28:d1:38:1e:c2:ca:ef:0d:9d:1d:8e:6f:60:69: 31:54:89:91:b3:a6:b2:4e:1d:4b:31:60:7f:c4:94:25:17:61: 10:ab:2a:0d:7f:e9:03:3a:c0:65:6f:65:93:4f:c7:43:a5:04: 3b:e5:bc:5f:32:bc:f2:77:df:49:60:ba:53:4c:d1:f0:57:d8: 3d:09:18:d8:9f:2e:c0:3a:1e:32:e7:f3:ac:9c:50:ba:44:95: 13:98:b5:81:ee:c9:3e:27:c0:36:11:34:ad:9f:f7:b9:89:e6: 93:ca:e5:a5:8b:31:c9:b0:07:ea:1b:2f:5b:09:26:b4:6c:c2: bf:97:22:87:f2:37:95:e1:9f:78:72:61:e8:2d:f7:02:7a:86: b6:31:2c:ce:40:e9:07:08:67:7c:51:d2:3b:30:39:3f:61:2c: 20:44:8d:16:d2:84:f8:ad:26:43:9f:a6:70:07:87:ef:dd:c4: 8a:25:ac:85:cd:77:cb:95:3a:d0:88:63:f6:f4:9b:ac:de:82: 50:46:04:7a:cf:88:d0:3d:33:40:2f:da:ed:ab:9e:15:f1:55: e1:6d:71:0b:71:e2:df:fe:15:27:cd:30:63:09:74:53:b2:66: 73:9c:52:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjYwMzI0MTgxNDEyWhcNMjYwMzMxMTgxNDEyWjAYMRYwFAYD VQQDEw02OWMyZDQ3NC1lYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85lBAhC1zbBrQUSTGL3MOYkUn9wGC4jKC1XvpMEc2KcYofidcLQeRvN9ELRr 1JUpC2HEtSaDiCIe2DclM8RbJEdMT4YNNiu6fRbFDuJWnwMUvHOCAw2wgFMrqS7k c6eNe9+d/MyivZaAQMaUf1L+WidYFx/rorHS2sj39NB7id8SqcCJq+3eTMnNWUVB E4GT128h0O7ML+AZOhGWBNtqWf5Ktox5wx61SWN+PHBwx5EwsmnFf5cpEA4UyWPL FC9K+01DgvtHDlEoyDtGn/xJMer+utPRIozF7h1/V/XMu7FagM+xEffLpeZx5jW/ 2j+zwIc/OJgSO6HB3BaUBvBRnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmfKuCe +SSI8nRT+sIlFvSR6hrgMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtp5bwiFnBXvPIYtmCDwuwhST5ksmCCjROB7Cyu8NnR2Ob2BpMVSJkbOmsk4d SzFgf8SUJRdhEKsqDX/pAzrAZW9lk0/HQ6UEO+W8XzK88nffSWC6U0zR8FfYPQkY 2J8uwDoeMufzrJxQukSVE5i1ge7JPifANhE0rZ/3uYnmk8rlpYsxybAH6hsvWwkm tGzCv5cih/I3leGfeHJh6C33AnqGtjEszkDpBwhnfFHSOzA5P2EsIESNFtKE+K0m Q5+mcAeH793EiiWshc13y5U60Ihj9vSbrN6CUEYEes+I0D0zQC/a7aueFfFV4W1x C3Hi3/4VJ80wYwl0U7Jmc5xSgA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:44 2026 by rpki-client