$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: 7cwUIe+dceL7lTfWayzAlrdbGYo5o/k2/vMZ0KJQfLk= Subject key identifier: 2A:58:4F:E1:53:95:0E:A5:CA:BB:F5:91:DC:57:4D:A2:74:EF:60:F1 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 103D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 1035 Signing time: Tue 24 Mar 2026 17:18:33 +0000 Manifest this update: Tue 24 Mar 2026 17:18:33 +0000 Manifest next update: Tue 31 Mar 2026 17:18:33 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: NzAmiM4f+zLZQ3KhoTT63c+iD4153Ettubz+smtn7GA=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: zU0MbtIC/sni815VV780GyqRI85ejF71hmoOHkbu31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4157 (0x103d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Mar 24 17:18:33 2026 GMT Not After : Mar 31 17:18:33 2026 GMT Subject: CN=69c2c769-3b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:ab:cf:04:f0:41:ff:86:14:4a:93:2b:af: ff:e3:21:3e:b5:cb:eb:86:f9:96:fb:59:67:2d:24: 81:e9:56:e5:13:f2:c4:5d:e6:56:50:e2:18:b3:fd: 10:b1:f9:7e:ea:c4:80:cd:5b:7b:0f:88:60:64:1d: 74:17:2a:51:56:f7:ca:4c:39:bf:3e:ec:84:99:d5: 0a:58:4a:f2:9e:d9:64:4d:84:d0:52:50:f8:30:21: a3:ff:1d:cd:0d:0c:29:ef:d6:ce:6b:14:aa:69:fc: 64:08:19:e7:38:56:7a:ea:8d:88:ec:9b:a3:5b:cb: f4:9a:fe:33:93:27:b5:73:8d:af:75:b4:d6:de:3d: 82:78:a5:0c:d7:bd:04:98:5a:10:11:50:4f:aa:6d: 7d:d8:e8:8f:0c:2f:a6:b0:cd:cf:d6:e5:86:19:36: c9:9a:f6:94:7f:84:a6:ab:d7:04:06:a4:de:f5:f7: 6c:4e:33:0a:66:30:ef:f0:ff:9c:59:f9:11:7c:bb: 83:b7:54:1e:92:ea:a0:61:af:cf:c8:6c:01:ca:a4: 21:cd:e5:51:37:c2:03:cd:05:31:30:fa:b3:d0:e6: 0d:92:ff:b3:2d:65:b0:90:ac:59:60:84:86:62:35: 1b:95:49:22:da:ef:7e:08:d6:e6:a2:72:cc:77:8a: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:58:4F:E1:53:95:0E:A5:CA:BB:F5:91:DC:57:4D:A2:74:EF:60:F1 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a5:85:6b:8a:78:c4:21:0e:5d:0f:6f:b8:d3:ff:7b:89:24: ab:3d:fa:a6:5e:08:87:b4:e9:24:e2:e2:39:60:74:0b:8b:7f: 80:40:1e:8e:68:01:6f:60:bb:fa:45:26:e9:fc:1a:e0:02:57: 1b:9b:04:c7:72:40:bc:90:25:66:b2:48:c3:82:27:4c:21:22: a6:ce:d0:ea:9e:93:f7:ff:1f:7c:45:35:05:1b:55:b6:be:da: 48:21:a8:c8:6c:43:47:01:b8:8d:7e:80:5d:fe:30:ce:4a:19: f8:53:b7:4e:97:e7:f7:57:e2:c8:6f:0b:15:99:c2:bb:95:0f: 96:aa:ea:2a:47:c5:9b:07:6e:1b:b1:3e:d2:19:4e:19:46:e8: 99:d5:93:10:68:98:68:4c:a5:13:fb:cd:ae:fa:6f:41:1c:f2: e9:73:7e:eb:b3:0c:eb:26:98:d7:ab:13:1e:fe:3f:bb:37:93: e0:25:35:d2:cb:ee:37:61:28:18:bb:fc:d3:ab:20:ca:63:43: 93:da:5a:bd:81:58:b0:d4:9f:70:e5:49:ce:fe:f9:07:39:82: 4a:e3:5d:30:d2:5f:13:1e:8a:52:1e:87:8d:12:a4:bf:ce:3e: c4:ab:22:a8:b1:a9:7b:2c:4a:23:49:91:d0:ff:9c:a3:82:98: 67:6b:33:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICED0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjYwMzI0MTcxODMzWhcNMjYwMzMxMTcxODMzWjAYMRYwFAYD VQQDEw02OWMyYzc2OS0zYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcqrzwTwQf+GFEqTK6//4yE+tcvrhvmW+1lnLSSB6VblE/LEXeZWUOIYs/0Q sfl+6sSAzVt7D4hgZB10FypRVvfKTDm/PuyEmdUKWEryntlkTYTQUlD4MCGj/x3N DQwp79bOaxSqafxkCBnnOFZ66o2I7JujW8v0mv4zkye1c42vdbTW3j2CeKUM170E mFoQEVBPqm192OiPDC+msM3P1uWGGTbJmvaUf4Smq9cEBqTe9fdsTjMKZjDv8P+c WfkRfLuDt1QekuqgYa/PyGwByqQhzeVRN8IDzQUxMPqz0OYNkv+zLWWwkKxZYISG YjUblUki2u9+CNbmonLMd4qEWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpYT+FT lQ6lyrv1kdxXTaJ072DxMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAKWFa4p4xCEOXQ9vuNP/e4kkqz36pl4Ih7TpJOLiOWB0C4t/gEAejmgBb2C7 +kUm6fwa4AJXG5sEx3JAvJAlZrJIw4InTCEips7Q6p6T9/8ffEU1BRtVtr7aSCGo yGxDRwG4jX6AXf4wzkoZ+FO3Tpfn91fiyG8LFZnCu5UPlqrqKkfFmwduG7E+0hlO GUbomdWTEGiYaEylE/vNrvpvQRzy6XN+67MM6yaY16sTHv4/uzeT4CU10svuN2Eo GLv806sgymNDk9pavYFYsNSfcOVJzv75BzmCSuNdMNJfEx6KUh6HjRKkv84+xKsi qLGpeyxKI0mR0P+co4KYZ2szrA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:32 2026 by rpki-client