$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: ZWluHR91V/LeBmUmyw5DFvLEf4TE861SIZ7ifc5WeAg= Subject key identifier: 20:E7:8C:6C:BA:26:35:17:25:12:1A:44:E5:B2:72:2F:8E:65:17:06 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: E6 Signing time: Wed 25 Mar 2026 05:49:52 +0000 Manifest this update: Wed 25 Mar 2026 05:49:51 +0000 Manifest next update: Wed 01 Apr 2026 05:49:51 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: h+4qiNKgoFFuXrORyewGdITlRFqV3PvBwicmNZuqJzQ=) 2: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=) 3: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Mar 25 05:49:51 2026 GMT Not After : Apr 1 05:49:51 2026 GMT Subject: CN=69c37780-437a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:f6:1d:2f:25:cf:16:7d:63:65:05:3e:9e: 47:d2:97:b2:0b:80:68:a6:d4:82:ab:61:2b:c0:60: 7d:05:cf:04:cb:9d:06:32:36:8f:87:56:64:d9:49: 70:4c:8f:1d:d1:d4:a9:cb:51:d3:e6:f6:03:41:7f: f0:f5:1b:6d:61:15:24:b8:ff:12:53:1b:6b:b7:c4: 5f:2d:c6:72:52:a4:2b:4d:83:91:94:07:d2:e3:a4: 5b:6b:50:ef:67:03:8e:da:6e:91:ad:03:0a:fa:70: f6:50:53:22:36:c7:72:8a:14:c2:0d:c2:4b:f1:39: 0b:60:8b:25:ec:c2:23:f6:28:38:88:22:e4:24:17: cd:41:43:cf:c5:af:e9:c3:68:7c:80:58:ff:4e:ca: 29:c1:dc:b1:ae:fc:75:5b:35:0d:1d:79:15:a5:84: fe:a6:9b:30:51:47:b6:4e:c7:bb:be:53:e8:da:d8: a0:74:9e:c7:9f:83:3a:e9:57:56:92:94:76:26:63: 14:53:2c:75:47:2c:a7:46:70:85:46:46:2a:2a:fc: 95:5f:ba:33:5b:b1:ce:b8:8e:01:a9:db:67:64:14: 75:38:2d:50:91:79:38:ef:d9:fd:87:8d:a5:04:52: 11:23:48:da:4c:36:f9:12:ba:f7:73:26:74:49:6c: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E7:8C:6C:BA:26:35:17:25:12:1A:44:E5:B2:72:2F:8E:65:17:06 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:9b:cc:45:5b:d0:b0:4b:1b:cc:31:37:50:55:81:3d:91:9a: 4f:df:1c:0f:60:5f:4f:67:76:fe:96:38:63:6e:95:0d:25:a5: 0a:e9:c7:7f:c0:ea:00:d4:b7:7f:0b:10:c5:3f:ba:98:3d:6b: 52:ce:fb:6c:ac:4b:37:5a:61:94:6e:b9:3c:24:b9:fa:d4:e8: 55:59:46:48:c9:8c:0a:09:b2:33:cf:86:c8:b1:17:92:a0:c2: 40:f0:64:de:bb:9f:ae:e1:b8:bd:ce:ec:70:db:c6:b4:54:06: 8d:48:ae:10:f4:1a:43:d7:52:f8:1a:08:e2:a1:1c:ba:af:20: a8:f1:1b:38:a7:b1:55:79:2f:bd:73:ff:53:e1:b6:92:f6:65: 10:49:d4:8c:4d:17:20:a6:95:75:7d:8c:a8:76:88:aa:ef:2c: c1:06:69:2b:62:64:13:10:15:09:f1:a4:44:5b:ce:db:62:36: 65:46:f6:df:1d:3c:d1:41:77:86:85:68:3d:0d:67:5a:81:d1: 5b:80:71:ab:e5:9a:41:b3:ed:9d:fe:90:3a:c5:17:25:02:54: 6e:a6:55:59:a6:63:41:c9:36:51:7a:05:f1:45:13:47:d5:cf: fb:1d:4c:77:16:05:ff:53:a0:a7:59:93:6c:eb:ee:00:04:4b: fc:cf:3f:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxMDMxMTAvBgNVBAUTKDYwMzFEMDYwMUQ1QzJEODdBRDY2MjM2MUU2M0JGRkQ5 MUUwNDA3MzMwHhcNMjYwMzI1MDU0OTUxWhcNMjYwNDAxMDU0OTUxWjAYMRYwFAYD VQQDEw02OWMzNzc4MC00MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30v2HS8lzxZ9Y2UFPp5H0peyC4BoptSCq2ErwGB9Bc8Ey50GMjaPh1Zk2Ulw TI8d0dSpy1HT5vYDQX/w9RttYRUkuP8SUxtrt8RfLcZyUqQrTYORlAfS46Rba1Dv ZwOO2m6RrQMK+nD2UFMiNsdyihTCDcJL8TkLYIsl7MIj9ig4iCLkJBfNQUPPxa/p w2h8gFj/Tsopwdyxrvx1WzUNHXkVpYT+ppswUUe2Tse7vlPo2tigdJ7Hn4M66VdW kpR2JmMUUyx1RyynRnCFRkYqKvyVX7ozW7HOuI4BqdtnZBR1OC1QkXk479n9h42l BFIRI0jaTDb5Err3cyZ0SWyGkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDnjGy6 JjUXJRIaROWyci+OZRcGMB8GA1UdIwQYMBaAFGAx0GAdXC2HrWYjYeY7/9keBAcz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODEwMy85M0RDNzU0RURF MDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZZXRaaU5oNWp2XzJSNEVC ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODEwMy85M0RDNzU0RURFMDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZ ZXRaaU5oNWp2XzJSNEVCek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7pvMRVvQsEsbzDE3UFWBPZGaT98cD2BfT2d2/pY4Y26VDSWlCunHf8DqANS3 fwsQxT+6mD1rUs77bKxLN1phlG65PCS5+tToVVlGSMmMCgmyM8+GyLEXkqDCQPBk 3rufruG4vc7scNvGtFQGjUiuEPQaQ9dS+BoI4qEcuq8gqPEbOKexVXkvvXP/U+G2 kvZlEEnUjE0XIKaVdX2MqHaIqu8swQZpK2JkExAVCfGkRFvO22I2ZUb23x080UF3 hoVoPQ1nWoHRW4Bxq+WaQbPtnf6QOsUXJQJUbqZVWaZjQck2UXoF8UUTR9XP+x1M dxYF/1Ogp1mTbOvuAARL/M8/hQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:09 2026 by rpki-client