$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: N7EHn7IlMcHubn5va+CZLQdG1JNqixUi7r+6XiMQ+xE= Subject key identifier: 00:59:EB:B4:30:63:C8:E5:44:BD:47:66:19:AB:A6:44:12:0B:9E:51 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 0437 Signing time: Tue 24 Mar 2026 23:59:31 +0000 Manifest this update: Tue 24 Mar 2026 23:59:31 +0000 Manifest next update: Tue 31 Mar 2026 23:59:31 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: tswGdd/wKMsXU9qnGAOHjOsiRifimoNMRP449ggSa7c=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: dEISD/WDoWooLj71u5FYjt6CjHXEIUg8FSxxishj644=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Mar 24 23:59:31 2026 GMT Not After : Mar 31 23:59:31 2026 GMT Subject: CN=69c32563-787a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:e1:e4:95:63:50:1d:1d:3d:f7:08:3f:ac: 79:af:dd:06:e6:f5:3f:1e:29:28:ca:94:09:cf:ee: fa:e6:34:78:f7:11:98:66:6f:04:c8:5a:d1:fb:de: 5a:bb:34:76:b1:94:d4:ad:e3:0d:94:4b:4b:87:09: 83:54:d1:aa:61:a9:b8:35:fd:ad:3b:be:db:8d:c8: a2:fa:ef:7b:61:01:ae:f4:14:6f:04:35:1a:56:ab: 18:00:bd:50:f3:87:08:4b:94:2f:1c:3c:63:17:32: 92:2c:80:e0:4b:c7:b4:b9:a6:0a:d3:8b:e1:f6:28: 52:5c:5b:f3:07:89:32:78:7d:09:c2:80:9b:2f:25: aa:16:da:a9:de:70:e9:d3:b4:6f:3a:d9:f5:bb:1c: 1b:b1:ce:f9:2a:ed:95:cf:bb:2d:f0:3c:37:9b:94: 6b:93:2a:2a:ea:c2:ab:71:e5:2d:a7:16:cd:b0:df: 8a:ab:20:db:28:a9:ef:68:24:11:c5:0e:75:e9:8d: 2b:f7:ce:6b:18:7d:63:95:35:d2:99:73:57:af:46: 02:42:fc:1e:58:ed:6c:ad:29:6f:b2:18:1e:aa:5d: f9:00:4e:18:5a:35:c8:f2:4e:2f:ff:3f:57:6e:ef: 3d:03:a4:c6:fa:14:24:a6:33:fe:d6:b2:ca:25:6a: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:59:EB:B4:30:63:C8:E5:44:BD:47:66:19:AB:A6:44:12:0B:9E:51 X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:71:24:65:bc:92:3a:5c:be:b0:61:18:8b:ca:a5:aa:45:a4: cc:74:82:ff:59:66:a9:89:e7:91:a3:a9:a0:4e:e9:ca:bc:bf: 36:11:97:c4:ae:fb:72:f2:6f:9c:45:a4:90:e8:89:20:03:38: c0:c1:f9:37:ec:6e:d6:96:2a:ba:06:7b:36:9f:63:00:bb:5e: f3:36:20:10:16:f8:26:d5:77:56:60:77:86:df:86:21:33:91: 07:4a:06:57:dc:e0:80:b8:cb:e8:f1:ee:bb:07:47:6b:19:8c: ab:5d:9a:76:f0:12:ea:32:fd:6b:1b:b8:06:ba:00:8e:e0:35: 02:ee:61:53:97:20:45:17:3f:a7:5f:14:9d:0d:81:fd:54:0a: c1:c3:78:b1:c5:01:0b:3a:4a:e7:35:16:d7:3d:77:07:cb:f0: 68:8e:67:ac:69:30:75:82:83:c8:10:42:e9:3a:a5:9a:70:e1: 0c:ef:ca:90:dc:d7:32:f0:ca:02:93:d2:1d:3c:69:d7:18:60: 55:dd:81:55:e4:eb:7e:d7:c2:08:d8:54:35:f6:4d:cc:28:84: e7:d2:59:14:64:90:28:e9:b5:1b:57:ff:cc:08:f0:c3:a4:f3: 2a:a9:2e:72:59:ca:d7:c9:3b:d7:9b:4f:29:cd:8c:38:59:87: 26:a6:98:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjYwMzI0MjM1OTMxWhcNMjYwMzMxMjM1OTMxWjAYMRYwFAYD VQQDEw02OWMzMjU2My03ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSnh5JVjUB0dPfcIP6x5r90G5vU/HikoypQJz+765jR49xGYZm8EyFrR+95a uzR2sZTUreMNlEtLhwmDVNGqYam4Nf2tO77bjcii+u97YQGu9BRvBDUaVqsYAL1Q 84cIS5QvHDxjFzKSLIDgS8e0uaYK04vh9ihSXFvzB4kyeH0JwoCbLyWqFtqp3nDp 07RvOtn1uxwbsc75Ku2Vz7st8Dw3m5Rrkyoq6sKrceUtpxbNsN+KqyDbKKnvaCQR xQ516Y0r985rGH1jlTXSmXNXr0YCQvweWO1srSlvshgeql35AE4YWjXI8k4v/z9X bu89A6TG+hQkpjP+1rLKJWoDbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABZ67Qw Y8jlRL1HZhmrpkQSC55RMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA3EkZbySOly+sGEYi8qlqkWkzHSC/1lmqYnnkaOpoE7pyry/NhGXxK77cvJv nEWkkOiJIAM4wMH5N+xu1pYqugZ7Np9jALte8zYgEBb4JtV3VmB3ht+GITORB0oG V9zggLjL6PHuuwdHaxmMq12advAS6jL9axu4BroAjuA1Au5hU5cgRRc/p18UnQ2B /VQKwcN4scUBCzpK5zUW1z13B8vwaI5nrGkwdYKDyBBC6TqlmnDhDO/KkNzXMvDK ApPSHTxp1xhgVd2BVeTrftfCCNhUNfZNzCiE59JZFGSQKOm1G1f/zAjww6TzKqku clnK18k715tPKc2MOFmHJqaYMg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:41:22 2026 by rpki-client