$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: w0CvMMjsfHJVzcjQFf8rGBiZXM3wBn5y2XpUIZz1QUA= Subject key identifier: A5:7C:E1:20:B8:6E:A1:F1:D2:AB:AA:CB:60:A3:F1:0C:41:46:78:15 Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: 69 Signing time: Wed 25 Mar 2026 07:12:34 +0000 Manifest this update: Wed 25 Mar 2026 07:12:33 +0000 Manifest next update: Wed 01 Apr 2026 07:12:33 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: qdFNECsWI1eT2AO2/4aG9zbW7UfRC78GLn+snuBaJrY=) 2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=) 3: 11CCFCD8DB0B11F0BC36350982D3641D.roa (hash: iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Mar 25 07:12:33 2026 GMT Not After : Apr 1 07:12:33 2026 GMT Subject: CN=69c38ae1-d249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:8d:35:66:f8:88:da:05:25:cc:82:54:80: 9d:54:ca:85:f4:a8:b1:75:1b:85:80:8f:15:46:5e: 78:9e:a4:c3:05:76:60:e4:f1:cf:b3:37:75:10:d9: dc:b8:a0:d9:ba:17:37:92:9d:5a:57:71:ce:cd:7f: 72:6d:a0:63:cb:e7:7a:b2:35:84:c1:5d:3f:0d:61: bd:a3:55:d2:82:63:1b:62:5f:9e:92:4b:c6:ab:7a: 32:1e:98:be:01:ba:11:54:72:b0:2f:84:0e:a0:cc: 61:e5:fb:a1:5d:1d:52:6e:c2:06:b2:a5:68:d8:41: ef:a5:c9:fe:52:cd:76:44:b9:4d:ce:0a:52:3b:89: f8:33:59:37:23:79:ae:df:97:c2:4c:45:d7:bc:c3: b1:fd:e5:43:f3:fc:a8:b0:7a:52:16:28:dc:d6:6f: 41:ea:ba:0c:61:63:ba:84:38:90:85:a5:43:3b:96: 09:49:d4:f9:03:35:8e:00:eb:39:c2:d1:2d:cb:33: c3:b5:ab:f1:58:a0:2b:5a:f0:ff:f7:07:b4:5a:90: 3f:e3:85:f5:04:c2:8b:aa:77:8e:4a:df:9b:7c:6a: 4c:b5:ef:f1:b1:ba:64:0d:3d:78:81:52:a5:84:46: d7:c4:6f:1a:77:4c:6c:19:43:c4:b9:fd:96:c0:a7: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7C:E1:20:B8:6E:A1:F1:D2:AB:AA:CB:60:A3:F1:0C:41:46:78:15 X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:6d:f6:9a:29:e0:dc:25:0e:f5:ae:f5:1d:14:cc:43:24:48: 0d:ed:c0:6b:ad:98:d7:15:8e:46:bf:78:8a:76:89:60:f5:15: 9d:33:29:c8:87:98:e3:82:71:2b:2d:a2:e7:28:07:74:11:f3: fe:31:46:5b:8c:70:1a:32:87:96:26:b4:8f:f3:a3:45:a6:0e: dd:fa:4d:a8:bb:6c:df:d8:51:05:d9:f3:df:dc:e8:0a:aa:b6: 4f:86:06:90:5e:e3:d0:24:0d:ab:be:72:3f:20:32:14:93:b8: 37:cd:46:ac:05:9d:fc:31:04:79:0b:6b:eb:9e:a0:d7:b8:ac: 9f:83:5c:83:7d:d4:f4:fb:d2:f1:be:a2:bf:c7:26:43:5b:d1: 1e:a3:2c:de:e4:aa:a1:df:d6:df:78:85:44:34:d2:df:55:6b: 39:1e:48:d8:9e:05:cb:35:6b:ef:4e:47:8c:06:86:3a:8d:d0: 50:23:cf:68:6d:83:26:0a:b0:fc:97:4e:29:2a:5a:7d:3f:2f: 49:f0:1a:53:68:f5:ba:3a:b7:4e:c9:40:4f:df:a2:2f:9d:79: c2:5c:21:3b:22:1d:7b:f5:d0:5f:a8:84:f8:6d:12:86:bc:60: 0c:b0:a8:df:be:81:1e:6a:05:19:d7:b3:fd:98:52:be:17:29: b3:32:30:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNjAzMjUwNzEyMzNaFw0yNjA0MDEwNzEyMzNaMBgxFjAUBgNV BAMTDTY5YzM4YWUxLWQyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkIo01ZviI2gUlzIJUgJ1UyoX0qLF1G4WAjxVGXniepMMFdmDk8c+zN3UQ2dy4 oNm6FzeSnVpXcc7Nf3JtoGPL53qyNYTBXT8NYb2jVdKCYxtiX56SS8arejIemL4B uhFUcrAvhA6gzGHl+6FdHVJuwgaypWjYQe+lyf5SzXZEuU3OClI7ifgzWTcjea7f l8JMRde8w7H95UPz/KiwelIWKNzWb0HqugxhY7qEOJCFpUM7lglJ1PkDNY4A6znC 0S3LM8O1q/FYoCta8P/3B7RakD/jhfUEwouqd45K35t8aky17/GxumQNPXiBUqWE RtfEbxp3TGwZQ8S5/ZbAp+3fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpXzhILhu ofHSq6rLYKPxDEFGeBUwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx TFY4ajN1Y25oNklibDJOVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDHbfaaKeDcJQ71rvUdFMxDJEgN7cBrrZjXFY5Gv3iKdolg9RWdMynIh5jjgnEr LaLnKAd0EfP+MUZbjHAaMoeWJrSP86NFpg7d+k2ou2zf2FEF2fPf3OgKqrZPhgaQ XuPQJA2rvnI/IDIUk7g3zUasBZ38MQR5C2vrnqDXuKyfg1yDfdT0+9LxvqK/xyZD W9Eeoyze5Kqh39bfeIVENNLfVWs5HkjYngXLNWvvTkeMBoY6jdBQI89obYMmCrD8 l04pKlp9Py9J8BpTaPW6OrdOyUBP36IvnXnCXCE7Ih179dBfqIT4bRKGvGAMsKjf voEeagUZ17P9mFK+FymzMjBg -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:36 2026 by rpki-client