$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: UL6aTQaBZZkZxSFswcT/1MQm/RQkpNtV86xvcR1OYbg= Subject key identifier: F7:DD:5A:C0:63:53:21:C0:48:A6:C1:65:2A:BB:38:49:FB:31:08:09 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 01B8 Signing time: Wed 25 Mar 2026 03:12:39 +0000 Manifest this update: Wed 25 Mar 2026 03:12:38 +0000 Manifest next update: Wed 01 Apr 2026 03:12:38 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: 8olwIlTNht60TvN0sptNJLLTeHYaJxpx2GODHt4f1L8=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: PkkKjxmP3oqdz8rOsnvlI4lixs/LLzNeT38IVCT5f2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Mar 25 03:12:38 2026 GMT Not After : Apr 1 03:12:38 2026 GMT Subject: CN=69c352a7-fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:8b:e8:d0:84:06:4c:00:cb:ad:d3:7d:49: c1:fa:4b:78:81:c6:74:f4:69:98:12:cd:47:87:00: 70:bf:1f:aa:cf:e0:4e:b4:af:7f:83:89:52:26:30: 4f:ce:a9:13:9d:e5:b5:ee:06:44:09:38:36:a7:1c: 56:b3:1e:21:be:17:7e:f0:d9:dc:d6:21:26:d9:fc: 0f:ca:c3:e3:2f:c0:32:f9:56:a2:a0:3a:1d:ea:a3: e5:72:64:c1:cb:fa:1c:c3:c1:8a:e3:92:79:25:fe: 1d:18:5d:a0:41:47:85:10:4e:3d:63:fd:af:13:a8: 3d:d9:7e:fa:01:a4:21:6e:be:06:23:1b:15:6f:06: 86:e7:40:25:42:d0:26:42:bf:14:62:52:12:b0:33: 44:87:a2:26:14:56:e3:f5:2a:ee:82:45:a2:56:5d: 07:57:10:56:0b:21:a3:c6:9a:36:ca:e0:7c:5b:38: 5f:fb:60:10:e1:1e:7b:87:60:df:4a:cb:b0:80:4f: b8:58:a8:8e:d3:b3:ae:44:ff:e4:d0:bb:64:70:73: 18:69:f2:e9:99:be:76:8f:a9:c5:bc:7d:da:00:21: a7:0f:ca:1e:3f:b0:36:10:33:18:3c:bc:c0:6b:3a: d3:92:c9:e9:09:9f:86:b3:e8:f0:c7:22:2e:a7:9d: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:5A:C0:63:53:21:C0:48:A6:C1:65:2A:BB:38:49:FB:31:08:09 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e4:ba:c2:63:d9:51:92:17:07:fa:ab:78:9f:37:b1:21:d9: 3f:bd:3a:09:7b:b7:1f:44:f9:f8:7e:67:d7:f7:1d:2b:6e:ee: fe:70:1d:18:fb:ac:58:5e:0a:bf:2b:11:90:a7:e9:f0:e9:0d: 25:21:09:94:c8:5f:b5:e1:9e:cd:b9:72:b8:ca:75:96:de:53: d8:5e:a8:20:b9:45:b6:2e:70:3e:39:36:c0:4a:91:47:7d:26: 94:64:75:f2:38:93:5e:83:dc:1b:d0:c2:92:8f:a7:d6:a7:be: 4d:34:fe:28:cf:ef:c6:af:28:94:ce:98:18:f9:08:8f:e5:c1: 73:6b:48:c3:a4:d1:bf:f9:01:ee:b5:e5:6d:e9:a9:9b:b5:df: 76:d8:e9:0f:45:db:22:23:6e:68:cf:b7:eb:f6:e7:f5:0e:fa: 99:a7:a5:66:e6:28:55:27:5a:18:61:00:27:c2:4f:ab:cc:6f: 48:64:ad:91:2f:9c:9c:29:c8:27:2e:c6:91:ab:93:28:3a:ce: e7:15:43:d4:a1:5d:6f:ee:8b:42:21:3c:09:8b:6d:e1:95:d0: 99:3c:1c:71:b6:1f:63:8e:ec:43:e5:2d:fe:8e:c0:66:72:50: 65:e1:fd:de:e6:08:b4:91:9d:f9:88:3f:d5:0f:58:34:56:9d: a7:96:7f:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYwMzI1MDMxMjM4WhcNMjYwNDAxMDMxMjM4WjAYMRYwFAYD VQQDEw02OWMzNTJhNy1mYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2OL6NCEBkwAy63TfUnB+kt4gcZ09GmYEs1HhwBwvx+qz+BOtK9/g4lSJjBP zqkTneW17gZECTg2pxxWsx4hvhd+8Nnc1iEm2fwPysPjL8Ay+VaioDod6qPlcmTB y/ocw8GK45J5Jf4dGF2gQUeFEE49Y/2vE6g92X76AaQhbr4GIxsVbwaG50AlQtAm Qr8UYlISsDNEh6ImFFbj9SrugkWiVl0HVxBWCyGjxpo2yuB8Wzhf+2AQ4R57h2Df SsuwgE+4WKiO07OuRP/k0LtkcHMYafLpmb52j6nFvH3aACGnD8oeP7A2EDMYPLzA azrTksnpCZ+Gs+jwxyIup52qJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfdWsBj UyHASKbBZSq7OEn7MQgJMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbOS6wmPZUZIXB/qreJ83sSHZP706CXu3H0T5+H5n1/cdK27u/nAdGPusWF4K vysRkKfp8OkNJSEJlMhfteGezblyuMp1lt5T2F6oILlFti5wPjk2wEqRR30mlGR1 8jiTXoPcG9DCko+n1qe+TTT+KM/vxq8olM6YGPkIj+XBc2tIw6TRv/kB7rXlbemp m7XfdtjpD0XbIiNuaM+36/bn9Q76maelZuYoVSdaGGEAJ8JPq8xvSGStkS+cnCnI Jy7GkauTKDrO5xVD1KFdb+6LQiE8CYtt4ZXQmTwccbYfY47sQ+Ut/o7AZnJQZeH9 3uYItJGd+Yg/1Q9YNFadp5Z/2g== -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:53 2026 by rpki-client