$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: Wvo3nuql6TZ+D8Oth3IiW+b1c8G3MXqgg9LSBaNl0wI= Subject key identifier: D7:14:EC:A9:63:67:BA:F4:E2:2B:11:2D:9A:E1:38:51:8B:55:C2:34 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 14E8 Signing time: Tue 24 Mar 2026 18:41:09 +0000 Manifest this update: Tue 24 Mar 2026 18:41:08 +0000 Manifest next update: Tue 31 Mar 2026 18:41:08 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: uGGQke8Y6ZgF8Vr2Uf4ualimxO5nu+QRb8tvJAS0MnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Mar 24 18:41:08 2026 GMT Not After : Mar 31 18:41:08 2026 GMT Subject: CN=69c2dac4-babd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b3:37:35:1f:de:f7:3b:55:40:f3:98:c1:bc: 49:e9:bd:c9:04:43:5e:b5:6c:18:8f:f6:2c:e2:05: e7:d7:d6:dd:82:05:a6:8b:c4:b1:45:4e:c5:ad:28: 8a:57:7d:50:4a:65:13:54:a3:bd:71:eb:45:16:e7: 71:88:94:1b:b6:ae:bb:d6:43:b8:ec:93:72:54:3d: 97:e0:c2:ed:23:4f:68:a2:b3:fd:2a:d2:d1:c4:8e: 9a:a0:f1:c2:9a:f0:d2:04:b7:cf:e3:1a:dd:27:2a: 1e:ff:01:87:78:62:58:d2:13:91:ee:f6:7d:40:8f: 09:c8:25:68:a7:36:ac:7d:d1:ab:83:5f:c1:1d:bb: 22:7e:ba:c8:d2:5a:42:06:23:7a:5a:7a:8e:cf:dd: 11:d2:94:30:04:95:cf:00:87:1a:fd:bb:67:9b:a7: aa:42:d6:35:ce:75:1f:54:bd:07:37:73:a1:52:6d: 1d:e9:26:01:4c:d2:64:9a:97:a2:cf:5b:2b:55:c7: 76:29:82:f2:62:d5:79:5d:5e:a3:90:bf:7a:61:44: ef:b1:f6:11:2a:39:d8:7e:63:bc:8b:d0:4d:92:dd: 42:d1:5b:f4:04:68:b5:91:b5:6b:6f:b4:97:0d:10: 49:63:20:04:e9:ca:dc:8b:f4:c6:8c:e7:11:86:17: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:14:EC:A9:63:67:BA:F4:E2:2B:11:2D:9A:E1:38:51:8B:55:C2:34 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1e:77:97:22:74:2f:de:56:dc:e7:89:0a:6e:ca:c6:20:8c: 44:80:97:27:c9:59:a2:26:be:fb:d5:a8:f2:8a:ee:e1:23:54: 7b:1b:e1:74:d3:c5:6f:87:d0:2c:26:93:a8:8d:7a:aa:76:3a: c6:b1:61:0f:b6:e5:2b:49:10:99:9e:ab:a7:27:d4:40:1b:19: ad:2a:eb:74:45:83:17:5c:7d:0f:19:04:a1:4a:fd:90:2e:ee: 72:a4:89:94:bd:18:b8:8a:02:c3:dd:40:72:ea:bb:f2:a3:9c: 8b:d5:4f:99:19:2d:0d:36:2a:6b:24:0c:a8:1a:00:95:50:08: 3e:ef:95:93:b3:93:b2:e2:d7:4e:f7:5a:90:1e:7d:a3:ff:e6: d7:ce:fc:f8:77:f8:27:98:28:82:6f:47:ed:23:a2:09:97:4c: 98:64:b1:27:f8:7c:1e:f6:51:3b:bb:2c:da:73:94:47:e0:15: 69:2f:34:57:c6:28:12:31:d3:27:8e:7e:00:9b:7e:7a:2a:22: 0f:06:fd:85:82:1c:4c:10:4c:9d:2b:2e:7a:b8:1a:57:22:85: b3:aa:b4:13:d9:c0:18:38:a0:b3:3f:c0:66:88:59:95:23:f2: 42:e8:3b:0e:91:2b:22:bc:c0:e6:e1:96:f6:57:04:ff:4e:bb: 4b:ab:f2:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjYwMzI0MTg0MTA4WhcNMjYwMzMxMTg0MTA4WjAYMRYwFAYD VQQDEw02OWMyZGFjNC1iYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97M3NR/e9ztVQPOYwbxJ6b3JBENetWwYj/Ys4gXn19bdggWmi8SxRU7FrSiK V31QSmUTVKO9cetFFudxiJQbtq671kO47JNyVD2X4MLtI09oorP9KtLRxI6aoPHC mvDSBLfP4xrdJyoe/wGHeGJY0hOR7vZ9QI8JyCVopzasfdGrg1/BHbsifrrI0lpC BiN6WnqOz90R0pQwBJXPAIca/btnm6eqQtY1znUfVL0HN3OhUm0d6SYBTNJkmpei z1srVcd2KYLyYtV5XV6jkL96YUTvsfYRKjnYfmO8i9BNkt1C0Vv0BGi1kbVrb7SX DRBJYyAE6crci/TGjOcRhhcSQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcU7Klj Z7r04isRLZrhOFGLVcI0MB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADB53lyJ0L95W3OeJCm7KxiCMRICXJ8lZoia++9Wo8oru4SNUexvhdNPFb4fQ LCaTqI16qnY6xrFhD7blK0kQmZ6rpyfUQBsZrSrrdEWDF1x9DxkEoUr9kC7ucqSJ lL0YuIoCw91Acuq78qOci9VPmRktDTYqayQMqBoAlVAIPu+Vk7OTsuLXTvdakB59 o//m1878+Hf4J5gogm9H7SOiCZdMmGSxJ/h8HvZRO7ss2nOUR+AVaS80V8YoEjHT J45+AJt+eioiDwb9hYIcTBBMnSsuergaVyKFs6q0E9nAGDigsz/AZohZlSPyQug7 DpErIrzA5uGW9lcE/067S6vyRA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:02:29 2026 by rpki-client