$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json) Hash identifier: GsUIRRaN6idEtpLdFK8jF8cXS1Vdx+ZnHDJBu8FGk7M= Subject key identifier: 7F:ED:D7:DB:65:BD:6D:AD:12:F1:2C:92:9C:D5:32:5C:AB:78:B5:C7 Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft Manifest number: 3E Signing time: Wed 25 Mar 2026 07:42:50 +0000 Manifest this update: Wed 25 Mar 2026 07:42:50 +0000 Manifest next update: Wed 01 Apr 2026 07:42:50 +0000 Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: askmWNSh8522OpZWHg97PPjUS1McaEDNiG0lDQLBxyo=) 2: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=) 3: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Validity Not Before: Mar 25 07:42:50 2026 GMT Not After : Apr 1 07:42:50 2026 GMT Subject: CN=69c391fa-dc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:13:8b:e3:7c:99:9b:0d:c9:87:28:3c:f2: 59:8a:7f:6b:5d:7c:fd:d1:5f:6c:50:1a:1f:2d:ab: b4:ec:f2:51:54:3f:fd:81:82:4a:5e:9c:11:d6:59: d6:a0:86:fa:b1:08:6c:6c:1d:84:4b:76:08:68:31: 26:80:50:a3:66:6f:c3:d3:40:0b:9e:3d:a6:60:6c: f5:ab:bb:9e:af:fc:13:05:43:cb:23:61:06:f8:43: ca:7a:56:6d:c5:9c:67:4c:c3:7e:77:69:e7:3b:8a: d8:0d:6e:6e:cd:1b:62:6b:ca:e8:ba:07:6e:a5:aa: 71:99:bd:c2:f4:bf:fe:62:ab:8f:f9:6f:ff:12:a8: 52:d6:9d:ef:4e:fe:2a:49:02:16:7a:38:dc:df:38: a9:c8:f0:cf:a2:53:dd:4c:15:34:b9:96:6a:40:c2: 16:47:17:54:d8:c6:2f:f9:0a:2e:75:05:27:55:d0: 27:f4:96:f8:24:e6:b6:86:24:0b:a3:14:ca:5d:c0: 72:c4:0d:5c:87:9f:24:40:08:c0:19:08:6d:51:10: b5:63:fb:c1:e7:56:30:8d:cc:69:0d:db:8d:cb:97: 9b:b8:18:37:ae:9b:aa:4c:0b:d4:fc:85:7b:64:a0: e7:85:00:dd:6b:ca:a3:61:49:29:e1:e9:4d:ab:b3: 41:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:ED:D7:DB:65:BD:6D:AD:12:F1:2C:92:9C:D5:32:5C:AB:78:B5:C7 X509v3 Authority Key Identifier: keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:dc:22:95:8d:2d:58:c4:af:e9:45:f6:1e:91:69:99:f4:0e: 76:03:00:7d:0b:2f:74:a1:60:07:64:dc:f3:e8:7b:81:f2:5b: 18:2f:a2:d4:fe:20:ae:c2:7c:02:79:ad:68:f9:87:08:66:9e: 4b:ed:64:e6:4f:e5:5f:03:ef:3b:6b:aa:65:31:35:d7:d7:5d: bb:78:e3:68:7d:ac:47:f9:91:2f:d7:3e:7e:dc:03:68:95:51: 29:12:bb:72:a4:4f:78:d9:bc:36:85:dd:d3:19:88:d6:32:8b: 5e:e9:00:7c:34:8c:ec:c2:20:53:c1:50:a1:a2:56:51:74:5a: 62:c3:c3:bf:f4:64:b5:e5:dc:cc:9f:23:80:70:3c:63:36:db: 48:55:d9:c7:79:03:9d:23:34:5b:3a:a7:41:2b:4b:d8:c9:5b: a4:53:f6:d1:63:98:26:30:cd:a2:8c:c0:a3:09:b1:f8:81:da: c9:ed:c9:56:e8:3d:75:9c:37:26:2c:45:06:c9:b3:6e:78:10: c4:e4:b2:fb:d5:b8:b0:c2:a5:18:ea:69:44:af:18:6c:0b:5d: 83:e0:56:56:ee:7f:32:32:8e:99:a5:05:f5:1d:d9:30:f4:80: 7b:31:5e:e9:f9:8f:42:33:ab:a2:72:42:4c:f4:59:1d:cf:da: f5:79:7a:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoNTk4RjU4M0RGQUU5RkM5NERBQTMwQzM3OEIyMTZCRUM5 NzBFMzM5ODAeFw0yNjAzMjUwNzQyNTBaFw0yNjA0MDEwNzQyNTBaMBgxFjAUBgNV BAMTDTY5YzM5MWZhLWRjMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2AhOL43yZmw3Jhyg88lmKf2tdfP3RX2xQGh8tq7Ts8lFUP/2BgkpenBHWWdag hvqxCGxsHYRLdghoMSaAUKNmb8PTQAuePaZgbPWru56v/BMFQ8sjYQb4Q8p6Vm3F nGdMw353aec7itgNbm7NG2Jryui6B26lqnGZvcL0v/5iq4/5b/8SqFLWne9O/ipJ AhZ6ONzfOKnI8M+iU91MFTS5lmpAwhZHF1TYxi/5Ci51BSdV0Cf0lvgk5raGJAuj FMpdwHLEDVyHnyRACMAZCG1RELVj+8HnVjCNzGkN243Ll5u4GDeum6pMC9T8hXtk oOeFAN1ryqNhSSnh6U2rs0HtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf+3X22W9 ba0S8SySnNUyXKt4tccwHwYDVR0jBBgwFoAUWY9YPfrp/JTaoww3iyFr7JcOM5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGL0E5NUU5QTI4RDBF QTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pUYW93dzNpeUZyN0pjT001 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV1k5WVBmcnBfSlRhb3d3M2l5RnI3SmNPTTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGL0E5NUU5QTI4RDBFQTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pU YW93dzNpeUZyN0pjT001Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCG3CKVjS1YxK/pRfYekWmZ9A52AwB9Cy90oWAHZNzz6HuB8lsYL6LU/iCuwnwC ea1o+YcIZp5L7WTmT+VfA+87a6plMTXX1127eONofaxH+ZEv1z5+3ANolVEpErty pE942bw2hd3TGYjWMote6QB8NIzswiBTwVCholZRdFpiw8O/9GS15dzMnyOAcDxj NttIVdnHeQOdIzRbOqdBK0vYyVukU/bRY5gmMM2ijMCjCbH4gdrJ7clW6D11nDcm LEUGybNueBDE5LL71biwwqUY6mlErxhsC12D4FZW7n8yMo6ZpQX1Hdkw9IB7MV7p +Y9CM6uickJM9Fkdz9r1eXqB -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:08 2026 by rpki-client