$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: IorCyUcieM4WNjuMAzTdrPQQgpRsT0fv941AYyouDt8= Subject key identifier: 36:83:FE:B0:D3:C7:6A:2B:4B:04:5D:C7:C8:67:69:70:9D:B2:97:B9 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0C8E Signing time: Tue 24 Mar 2026 18:24:10 +0000 Manifest this update: Tue 24 Mar 2026 18:24:10 +0000 Manifest next update: Tue 31 Mar 2026 18:24:10 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: IooUtllAgTZ8lM0nkGVWK9gMYwQP8YQXM+goeBW7syY=) 2: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=) 3: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Mar 24 18:24:10 2026 GMT Not After : Mar 31 18:24:10 2026 GMT Subject: CN=69c2d6ca-494d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:76:18:fe:a6:14:24:36:c6:38:22:6d:45: 55:82:c3:cc:2b:83:65:c7:e0:83:6e:ce:de:d7:f0: 9c:6d:60:60:be:39:78:7e:bd:23:4d:69:66:c3:87: 87:53:00:08:c8:d4:b2:f6:49:67:49:2e:1d:1d:16: ea:1c:27:1d:6d:b9:ef:cf:9d:27:e9:bb:72:24:71: c8:56:e9:5c:86:21:7f:64:36:26:63:0e:51:67:26: 30:6d:09:f7:e1:25:43:3e:35:56:d8:4a:64:c1:7b: b7:24:74:e4:49:58:0c:15:ba:72:3a:b6:3d:2b:28: 10:06:52:c2:10:85:92:9e:b5:af:73:91:67:ab:4e: 17:e0:f5:bb:3d:83:52:6c:41:f4:93:4c:b2:49:2d: 42:c6:4d:15:10:5d:df:a2:9c:68:9e:33:8a:fb:09: 0e:46:ef:48:07:89:31:d3:33:12:e2:c8:e5:a4:40: 06:d6:68:a8:71:eb:a6:aa:3d:6e:e2:71:16:25:3e: 7d:f8:55:a0:6e:88:f0:73:50:5a:d4:04:73:f3:36: 31:3d:46:f4:ff:58:bd:74:ff:3a:f4:3e:e1:08:60: c8:18:f6:37:c4:94:6d:c3:ef:1c:09:8a:67:5f:24: 2d:b9:7b:06:7f:bf:45:aa:2d:ab:de:27:7c:07:10: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:83:FE:B0:D3:C7:6A:2B:4B:04:5D:C7:C8:67:69:70:9D:B2:97:B9 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e1:c1:22:6f:94:2e:2c:d5:63:cb:f5:ca:9b:78:17:0e:51: f8:70:bc:e4:b6:99:6c:12:19:7a:fa:b6:a9:6a:e2:69:0a:9f: 2d:a1:40:e6:10:41:eb:60:e1:e8:65:67:07:ac:a1:07:e3:fa: 2e:11:a1:0b:74:8c:fe:fe:9d:24:91:e2:09:50:ab:5a:f6:da: 01:82:ae:30:da:70:cd:7a:e9:29:a9:ff:9a:c9:7c:47:5a:3c: e3:0f:13:c8:71:d1:98:0d:b8:ce:bf:ad:07:55:7a:b6:63:6f: e4:12:bd:8b:bd:fc:5e:a7:a5:4a:f2:78:38:14:4d:93:c4:6e: 09:4c:f2:17:77:97:c9:3b:bb:4e:a7:63:31:19:aa:85:c3:c4: 79:76:d4:f0:6c:99:5a:ca:f0:dc:a1:b1:8a:0a:e3:eb:3b:bf: cd:bf:b4:8d:4a:ca:93:27:2b:66:07:a3:c2:70:cc:c7:6f:35: 66:ef:b9:bd:b0:5d:b0:0a:81:b4:7d:b6:88:19:e0:40:68:95: 84:b1:f3:18:5b:c6:76:54:59:cf:db:34:0c:0f:eb:ea:7c:02: c9:14:3e:2d:7a:61:9a:e1:ee:8f:b9:c1:ad:aa:88:e2:2f:d9: b3:f1:d4:83:43:8a:c1:db:34:75:b5:55:c2:29:90:91:57:7e: b3:29:6c:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjYwMzI0MTgyNDEwWhcNMjYwMzMxMTgyNDEwWjAYMRYwFAYD VQQDEw02OWMyZDZjYS00OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtJ2GP6mFCQ2xjgibUVVgsPMK4Nlx+CDbs7e1/CcbWBgvjl4fr0jTWlmw4eH UwAIyNSy9klnSS4dHRbqHCcdbbnvz50n6btyJHHIVulchiF/ZDYmYw5RZyYwbQn3 4SVDPjVW2EpkwXu3JHTkSVgMFbpyOrY9KygQBlLCEIWSnrWvc5Fnq04X4PW7PYNS bEH0k0yySS1Cxk0VEF3fopxonjOK+wkORu9IB4kx0zMS4sjlpEAG1mioceumqj1u 4nEWJT59+FWgbojwc1Ba1ARz8zYxPUb0/1i9dP869D7hCGDIGPY3xJRtw+8cCYpn XyQtuXsGf79Fqi2r3id8BxD7FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaD/rDT x2orSwRdx8hnaXCdspe5MB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALeHBIm+ULizVY8v1ypt4Fw5R+HC85LaZbBIZevq2qWriaQqfLaFA5hBB62Dh 6GVnB6yhB+P6LhGhC3SM/v6dJJHiCVCrWvbaAYKuMNpwzXrpKan/msl8R1o84w8T yHHRmA24zr+tB1V6tmNv5BK9i738XqelSvJ4OBRNk8RuCUzyF3eXyTu7TqdjMRmq hcPEeXbU8GyZWsrw3KGxigrj6zu/zb+0jUrKkycrZgejwnDMx281Zu+5vbBdsAqB tH22iBngQGiVhLHzGFvGdlRZz9s0DA/r6nwCyRQ+LXphmuHuj7nBraqI4i/Zs/HU g0OKwds0dbVVwimQkVd+syls8g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:28 2026 by rpki-client