$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: CSzFI/S4Wx6zgDBTQofhcHcjjw8VfM+04GakeJp2li4= Subject key identifier: C7:C9:45:71:1F:45:0A:CE:16:61:0E:64:C6:EA:4C:49:8F:AA:5C:B0 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 01EA Signing time: Wed 25 Mar 2026 02:45:09 +0000 Manifest this update: Wed 25 Mar 2026 02:45:08 +0000 Manifest next update: Wed 01 Apr 2026 02:45:08 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: bmNiOsRYCpLG8HZ0rwBwRkHh4rCFDuKV+yyIfQU968o=) 2: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: h0j3mf/tfCqfATi6s2p0ZWyH9rfUorcBAbjHkKVPs1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Mar 25 02:45:08 2026 GMT Not After : Apr 1 02:45:08 2026 GMT Subject: CN=69c34c35-581e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:17:85:b5:e6:f4:9e:48:50:c2:a7:ca:76: 9c:94:7c:5a:50:8d:b8:67:9c:f2:ee:5b:c6:fa:f6: 11:be:fe:be:87:ef:85:4c:e0:0e:80:06:e2:2d:a9: b9:3b:03:a2:66:03:e9:1b:68:e7:39:42:21:83:52: 8a:af:17:cb:98:33:e5:d9:1c:c7:99:dc:b4:86:fc: 16:c8:42:00:8b:15:ba:ea:c0:af:87:fb:97:0d:20: 51:32:7a:c3:52:c3:7e:ff:fb:f4:a3:3d:b3:7a:9f: 23:9c:6a:75:28:30:e0:ab:a9:30:e0:1b:cc:a9:6a: 87:01:29:66:51:4f:2d:7e:fa:41:e4:0f:27:81:b1: fd:d3:c0:bd:70:c3:32:cd:29:85:b7:96:3a:30:da: e6:a9:78:c2:de:c1:5b:d8:37:f8:40:ef:9a:2f:2b: 75:80:8c:78:a2:45:55:6e:0e:d8:2e:52:53:f9:0b: e2:38:fb:39:55:47:7a:d4:07:a6:99:2b:1a:83:12: d9:87:57:64:4c:f6:94:00:06:bc:f2:bd:7c:d7:8c: 3c:e7:08:89:39:fa:eb:38:f0:18:47:78:84:53:b4: 93:89:7d:94:0e:2f:5c:ed:e6:25:59:72:73:d3:b8: 7e:0e:f6:c6:3d:2d:a6:3e:4d:c7:55:32:a8:2f:20: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C9:45:71:1F:45:0A:CE:16:61:0E:64:C6:EA:4C:49:8F:AA:5C:B0 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f2:80:47:54:1f:5c:48:a7:b9:85:79:2f:02:a1:52:f2:1c: 3a:43:cd:aa:13:af:e8:15:b7:7c:5c:44:30:59:d6:47:72:68: 45:35:4a:8c:59:44:ae:06:b3:c7:e8:a9:44:76:0e:31:3a:20: ce:6a:1a:09:d1:93:12:14:1e:fe:58:46:30:04:02:68:85:ef: e2:a6:37:1c:ee:d8:d7:66:ad:dc:97:c9:cf:0c:1b:a9:9a:32: 66:15:33:99:87:7a:ed:00:47:09:b6:97:62:7d:a0:d9:ff:24: aa:3a:cc:8b:29:37:31:9e:c1:3e:56:ae:25:03:c0:a4:e9:d3: d6:b4:2d:7c:99:f6:f8:2a:4d:43:f2:f8:18:95:23:6f:43:81: 49:ff:76:5c:9b:78:4c:1a:be:79:b9:58:7e:81:e9:78:92:e9: ac:4f:42:e6:0d:e5:bb:3d:db:6b:24:4d:f3:26:13:3e:3f:ac: 0f:e3:9b:cc:0e:d4:b0:60:77:ec:b3:17:d0:53:5c:9e:9e:a4: f2:0a:0f:10:2b:a0:85:1d:69:f4:cb:b5:7a:b5:d3:bc:34:13: c4:70:c2:97:6d:1a:aa:ac:3c:17:77:8c:3a:5c:b0:38:63:92: b5:b3:78:4b:01:25:d8:ab:03:f7:24:95:98:41:99:eb:69:ec: 66:c9:66:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjYwMzI1MDI0NTA4WhcNMjYwNDAxMDI0NTA4WjAYMRYwFAYD VQQDEw02OWMzNGMzNS01ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNUXhbXm9J5IUMKnynaclHxaUI24Z5zy7lvG+vYRvv6+h++FTOAOgAbiLam5 OwOiZgPpG2jnOUIhg1KKrxfLmDPl2RzHmdy0hvwWyEIAixW66sCvh/uXDSBRMnrD UsN+//v0oz2zep8jnGp1KDDgq6kw4BvMqWqHASlmUU8tfvpB5A8ngbH908C9cMMy zSmFt5Y6MNrmqXjC3sFb2Df4QO+aLyt1gIx4okVVbg7YLlJT+QviOPs5VUd61Aem mSsagxLZh1dkTPaUAAa88r1814w85wiJOfrrOPAYR3iEU7STiX2UDi9c7eYlWXJz 07h+DvbGPS2mPk3HVTKoLyANAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfJRXEf RQrOFmEOZMbqTEmPqlywMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPvKAR1QfXEinuYV5LwKhUvIcOkPNqhOv6BW3fFxEMFnWR3JoRTVKjFlErgaz x+ipRHYOMTogzmoaCdGTEhQe/lhGMAQCaIXv4qY3HO7Y12at3JfJzwwbqZoyZhUz mYd67QBHCbaXYn2g2f8kqjrMiyk3MZ7BPlauJQPApOnT1rQtfJn2+CpNQ/L4GJUj b0OBSf92XJt4TBq+eblYfoHpeJLprE9C5g3luz3bayRN8yYTPj+sD+ObzA7UsGB3 7LMX0FNcnp6k8goPECughR1p9Mu1erXTvDQTxHDCl20aqqw8F3eMOlywOGOStbN4 SwEl2KsD9ySVmEGZ62nsZslmwA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:22:04 2026 by rpki-client