$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: RaCxAuosUTd1E6W0lpJrzGRAJQ30t5yP8FLIRyoGihc= Subject key identifier: 21:9E:13:D6:98:2D:1E:A9:EC:04:15:42:E8:FE:27:A5:4F:03:9A:28 Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 356D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 3547 Signing time: Thu 26 Mar 2026 15:03:35 +0000 Manifest this update: Thu 26 Mar 2026 15:03:34 +0000 Manifest next update: Thu 02 Apr 2026 15:03:34 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: rznef5Mr0vQz5aO7TIMSXERrg5AKVlclwAuhYwL6MP8=) 2: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: m731XVB6b1xAGYHDb9IkvhodV8wFo5nHOoj74jQNmhY=) 3: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: OqYW8F4250vX2cVPr/WKUGN/bLRsN60JeF92JnIapyY=) 4: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: hOPjAACYFIMnZpYQK50BQrHSZKRavg8kb8cFoUPdabA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13677 (0x356d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Mar 26 15:03:34 2026 GMT Not After : Apr 2 15:03:34 2026 GMT Subject: CN=69c54ac7-8dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:a7:4b:d5:f9:7d:e0:26:b4:bc:90:45:a1: 93:5a:9e:3c:0f:68:12:33:d7:a6:75:1e:75:ee:56: a6:31:0a:87:7f:f9:96:fe:88:b8:79:2b:f0:1c:28: 2a:92:00:27:e2:9a:9c:12:09:3b:1f:6a:db:c8:ed: 5d:bb:88:ad:ce:62:2e:e3:59:0f:9c:6f:8e:f6:d6: d8:04:00:5d:fb:95:90:6c:3a:d1:d8:6c:21:10:ad: 75:fb:2b:36:8a:f2:36:81:8c:83:d5:17:a6:ab:c8: 05:cb:c9:11:dd:6a:80:fa:e2:76:5f:b8:2c:47:97: 56:fc:23:67:a3:c6:dc:18:19:87:30:d5:34:c6:d6: 35:72:52:e5:da:d4:79:ad:66:92:04:2c:7e:c6:b6: 85:aa:b3:7b:ec:85:cd:f0:24:74:35:9b:db:89:2e: fc:24:38:3e:f1:3b:1c:08:d1:a6:b6:a0:fc:7e:dc: 82:cf:e4:1b:86:f6:10:a8:3c:47:21:dd:42:fa:29: 0a:22:e6:56:5e:62:b3:b7:26:31:1f:d4:aa:cc:86: 39:42:b6:e6:6c:37:d3:c3:f8:6e:c9:69:5f:f2:a5: 6e:3c:a1:d7:31:12:a4:26:cb:1c:88:7d:d2:ca:30: c3:fb:e7:82:7a:c8:7b:e1:01:34:28:ad:b1:a0:ac: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9E:13:D6:98:2D:1E:A9:EC:04:15:42:E8:FE:27:A5:4F:03:9A:28 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ac:22:2d:2d:6f:1f:55:ca:42:87:80:a3:f4:f1:1d:74:12: fc:95:7d:07:31:85:82:cd:d2:7b:e6:1f:ff:a4:97:84:51:f5: 7c:bd:bb:a7:1f:09:ce:e3:f0:a6:33:e6:2a:6a:e5:d9:da:f4: 18:4f:97:d2:d8:b8:c4:b5:b9:f1:7c:6e:f0:ec:a6:f7:f9:f4: b6:8b:c4:aa:ce:b2:1b:6a:79:8d:9d:a6:13:7e:fb:6a:33:23: 88:55:a9:7e:01:23:29:de:7d:8e:5c:79:5e:f7:61:c3:83:c5: ac:18:0e:ec:5d:7c:7a:f1:b7:4c:2c:b9:81:97:d0:ed:f5:53: eb:92:8f:cf:fb:fa:6a:45:78:7a:f3:29:bb:db:ac:c0:85:ed: 31:8f:a8:62:9b:47:4c:1b:d7:2d:65:0d:bf:3d:5a:10:11:55: 7f:89:2e:13:eb:47:6a:34:bf:7d:e0:e6:85:67:04:dd:98:46: 27:0b:41:fe:21:6e:fe:5a:7f:6e:76:26:09:63:4b:99:eb:02: 70:2b:f8:79:2a:1a:5e:41:9d:de:e6:d5:fd:c2:ef:0d:50:c2: be:cc:ac:8b:9d:d0:1a:05:d9:36:9a:7b:b9:1a:3b:d4:bb:a1: b8:43:8e:82:8a:81:05:99:9c:e7:57:18:fb:d6:fe:03:2a:6c: dc:a3:43:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYwMzI2MTUwMzM0WhcNMjYwNDAyMTUwMzM0WjAYMRYwFAYD VQQDEw02OWM1NGFjNy04ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXunS9X5feAmtLyQRaGTWp48D2gSM9emdR517lamMQqHf/mW/oi4eSvwHCgq kgAn4pqcEgk7H2rbyO1du4itzmIu41kPnG+O9tbYBABd+5WQbDrR2GwhEK11+ys2 ivI2gYyD1Remq8gFy8kR3WqA+uJ2X7gsR5dW/CNno8bcGBmHMNU0xtY1clLl2tR5 rWaSBCx+xraFqrN77IXN8CR0NZvbiS78JDg+8TscCNGmtqD8ftyCz+QbhvYQqDxH Id1C+ikKIuZWXmKztyYxH9SqzIY5QrbmbDfTw/huyWlf8qVuPKHXMRKkJssciH3S yjDD++eCesh74QE0KK2xoKyLHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGeE9aY LR6p7AQVQuj+J6VPA5ooMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArqwiLS1vH1XKQoeAo/TxHXQS/JV9BzGFgs3Se+Yf/6SXhFH1fL27px8JzuPw pjPmKmrl2dr0GE+X0ti4xLW58Xxu8Oym9/n0tovEqs6yG2p5jZ2mE377ajMjiFWp fgEjKd59jlx5Xvdhw4PFrBgO7F18evG3TCy5gZfQ7fVT65KPz/v6akV4evMpu9us wIXtMY+oYptHTBvXLWUNvz1aEBFVf4kuE+tHajS/feDmhWcE3ZhGJwtB/iFu/lp/ bnYmCWNLmesCcCv4eSoaXkGd3ubV/cLvDVDCvsysi53QGgXZNpp7uRo71LuhuEOO goqBBZmc51cY+9b+Ayps3KNDmA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:39 2026 by rpki-client