$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: qc8vNXGrf1Ta9HY2wsB843loJGWU8ctH5oHvBxQIfQw= Subject key identifier: 4C:FD:C8:FE:E3:95:A6:2A:A6:49:97:75:1E:36:36:C5:73:26:4A:CD Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0E08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0DED Signing time: Tue 24 Mar 2026 17:43:35 +0000 Manifest this update: Tue 24 Mar 2026 17:43:34 +0000 Manifest next update: Tue 31 Mar 2026 17:43:34 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: GiFmOUzn+RhzbazoT/h8J/2l7JrIfsEBM5D5cHfAUUM=) 2: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: YHt1SbNsyMG4Q62rnhZuMa3T8SKHY5G8WGqZLcUa22M=) 3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: nT2sh7uqTi1U5cwmoFpAbizu4Ra0Y+5JbyS+sH+1hZc=) 4: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Mar 24 17:43:34 2026 GMT Not After : Mar 31 17:43:34 2026 GMT Subject: CN=69c2cd46-7c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:14:cf:7a:f6:70:06:43:32:27:a0:1b:fd:06: c6:a2:43:fe:76:fb:57:6e:ba:9c:cc:46:a1:a3:0c: 32:c4:ab:8f:35:ae:18:51:b6:fd:7c:1f:7c:d4:c6: da:c8:5c:b5:21:a3:9b:b4:46:8a:cc:0e:40:81:d8: 43:69:c0:13:a5:0d:2f:1f:94:40:79:36:e0:b9:98: b0:c4:ee:cf:fa:e4:fa:33:07:fe:f0:37:33:02:30: a8:ad:66:ca:fb:70:c1:9b:b8:69:b8:33:d8:aa:53: db:a1:c6:a2:0e:6f:3c:1f:0a:66:5c:9c:4c:dd:52: 43:51:d1:ad:4c:02:0a:78:45:51:a7:73:5e:5a:56: f0:92:88:79:8e:bc:ab:e4:6e:4a:99:a6:85:e2:cd: 8f:eb:b7:2c:e7:23:07:70:95:84:eb:10:7b:4b:a2: d5:73:62:c4:43:b5:a0:0f:c9:50:cf:38:27:dd:25: 95:55:55:40:36:28:2c:19:1a:bb:cf:a6:bf:f7:a0: 4d:34:80:83:51:4f:43:99:47:2d:13:1e:ab:d7:94: ca:0f:4e:ba:da:80:99:9c:e7:9a:1c:8e:19:28:d2: 37:28:b4:89:5b:1b:5e:62:f9:f6:09:79:a2:be:f6: 0c:88:b5:a8:03:ba:15:cf:b4:9c:b6:5a:0c:fe:fd: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FD:C8:FE:E3:95:A6:2A:A6:49:97:75:1E:36:36:C5:73:26:4A:CD X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:55:02:99:66:d3:18:b7:e4:af:7a:f2:1d:5b:03:82:a0:7e: b7:49:2d:15:e3:73:e3:3e:3a:76:9e:0c:1e:4a:8d:2f:e1:75: df:4f:46:bb:57:ea:e2:bd:91:f7:1a:fc:ad:4d:c8:eb:e8:59: 18:38:9d:ce:1d:96:71:b7:4a:71:99:1f:1e:c4:d6:b6:35:fa: 82:30:06:f1:dd:81:73:f1:50:5b:20:ac:d2:2c:b5:53:4d:1b: a9:01:51:46:16:21:41:d7:34:33:44:3c:df:a0:66:07:44:d6: ae:51:37:2d:db:1d:58:0f:ec:b4:b4:dc:a1:3b:e1:ad:b7:1d: 01:e1:6d:35:d6:9b:de:07:1f:10:7f:68:9b:ae:b1:27:11:f6: 64:82:80:94:fe:f9:e6:e7:07:a6:ac:86:d7:40:f0:a7:d0:90: ce:1f:7d:7d:a5:73:43:c8:66:e0:80:2c:d7:1c:d3:c7:97:56: 2f:f9:cb:37:c4:5b:c8:cf:40:e9:b3:06:c5:9d:fd:38:6c:e2: 29:b4:34:f0:27:93:10:31:d8:96:59:3d:ab:72:30:b0:7b:d5: b8:47:d2:98:11:8d:1c:f1:66:15:84:b4:14:be:c9:0b:e2:22: f3:40:d9:2b:d0:56:1a:e6:44:aa:85:7c:bf:90:0f:16:e4:9b: f6:25:2d:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjYwMzI0MTc0MzM0WhcNMjYwMzMxMTc0MzM0WjAYMRYwFAYD VQQDEw02OWMyY2Q0Ni03YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiRTPevZwBkMyJ6Ab/QbGokP+dvtXbrqczEahowwyxKuPNa4YUbb9fB981Mba yFy1IaObtEaKzA5AgdhDacATpQ0vH5RAeTbguZiwxO7P+uT6Mwf+8DczAjCorWbK +3DBm7hpuDPYqlPbocaiDm88HwpmXJxM3VJDUdGtTAIKeEVRp3NeWlbwkoh5jryr 5G5KmaaF4s2P67cs5yMHcJWE6xB7S6LVc2LEQ7WgD8lQzzgn3SWVVVVANigsGRq7 z6a/96BNNICDUU9DmUctEx6r15TKD0662oCZnOeaHI4ZKNI3KLSJWxteYvn2CXmi vvYMiLWoA7oVz7SctloM/v1mfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEz9yP7j laYqpkmXdR42NsVzJkrNMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhFUCmWbTGLfkr3ryHVsDgqB+t0ktFeNz4z46dp4MHkqNL+F1309Gu1fq4r2R 9xr8rU3I6+hZGDidzh2WcbdKcZkfHsTWtjX6gjAG8d2Bc/FQWyCs0iy1U00bqQFR RhYhQdc0M0Q836BmB0TWrlE3LdsdWA/stLTcoTvhrbcdAeFtNdab3gcfEH9om66x JxH2ZIKAlP755ucHpqyG10Dwp9CQzh99faVzQ8hm4IAs1xzTx5dWL/nLN8RbyM9A 6bMGxZ39OGziKbQ08CeTEDHYllk9q3IwsHvVuEfSmBGNHPFmFYS0FL7JC+Ii80DZ K9BWGuZEqoV8v5APFuSb9iUtqw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:36 2026 by rpki-client