$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: CURB3gHDcM5ZJ2PGRHJSIodBXHlO0uYbU5Uz6jypycI= Subject key identifier: 00:69:8C:31:CF:84:82:F9:25:93:8D:2B:E1:2B:DD:E1:65:89:40:7A Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: 0240 Signing time: Wed 25 Mar 2026 01:56:52 +0000 Manifest this update: Wed 25 Mar 2026 01:56:52 +0000 Manifest next update: Wed 01 Apr 2026 01:56:52 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: qjvtP8FyMQdPZX1TcRuyTlqFBm/6XGNjQxM7ecX/ZEc=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 3w67fjihibZok1qWjIP39FszAZUqgmCtMKGJLAm88jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: Mar 25 01:56:52 2026 GMT Not After : Apr 1 01:56:52 2026 GMT Subject: CN=69c340e4-82d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:6a:8f:07:40:0d:3a:da:60:40:b6:46:e3: 60:f4:96:88:ea:e8:e0:f6:51:f3:44:a3:e8:33:4b: f7:00:09:93:08:78:5b:e7:de:98:0b:92:f8:8d:9d: d6:8a:07:83:af:43:a1:16:1b:e1:8b:ed:b9:78:d8: 19:a4:c1:0d:d1:ed:6a:71:3e:ce:ea:6d:58:77:fa: ee:0a:0f:24:55:ed:d6:69:ce:8e:70:3b:25:c7:a4: 5d:72:09:e6:23:95:e6:0b:7f:43:4f:69:c6:53:fc: f8:1e:38:7b:0f:b3:c0:30:d0:51:70:9f:84:78:d1: bf:ce:4e:fb:34:47:5b:ca:fe:48:23:f8:78:1a:12: 95:ee:e8:01:eb:87:63:41:16:83:b6:ab:18:dc:52: 10:eb:c1:ce:a9:1c:33:90:9d:81:1e:41:55:78:aa: 70:2e:b7:45:61:1c:3b:12:48:79:e8:06:72:ab:33: d7:06:9c:79:02:ad:3d:35:a5:61:76:01:1b:88:4b: 47:b7:23:2b:c1:90:dc:37:e7:ca:c9:52:1e:63:26: 61:3a:5f:79:a3:83:f4:ac:7f:db:ab:f6:53:ca:54: 87:5a:38:77:84:35:c3:5c:30:3a:b4:39:8b:24:63: 7f:8b:22:2e:5e:9a:2d:e2:f6:25:2e:8d:ee:b3:6c: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:69:8C:31:CF:84:82:F9:25:93:8D:2B:E1:2B:DD:E1:65:89:40:7A X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c7:d6:ba:43:74:97:f1:dc:0c:fa:e4:94:f7:bc:3d:b2:22: 4b:eb:f5:ae:00:ec:f7:c9:01:0d:48:b2:bb:1c:8f:31:8b:61: 11:0e:a3:1b:95:96:e9:37:38:87:e9:2a:94:b9:0c:a0:36:22: c0:6a:42:0a:33:99:3d:e8:4c:6a:19:6c:5e:5c:b5:ab:0d:05: f5:1a:6f:93:7c:dc:e1:a4:d3:42:a1:26:9a:95:99:45:bf:8b: 6b:43:85:23:1e:26:ed:d7:5c:19:3d:02:4f:0f:9a:a8:c0:06: dc:0f:ba:91:8e:9a:9e:67:52:72:4e:65:71:de:60:7b:42:a3: 69:30:53:10:5c:6a:fc:fe:17:ff:de:b5:30:61:de:a9:3b:cd: 60:13:a1:9f:3b:fb:03:1a:23:62:4c:cf:21:ea:53:d7:72:1f: 8e:d2:be:4c:6d:72:78:fb:3b:21:97:2a:6b:f6:4b:30:38:f3: fa:52:a4:54:82:b1:49:8a:db:0c:3d:0b:d4:8d:5a:be:dc:3c: 19:d9:f9:5b:ad:0f:f1:16:e4:17:ee:40:cc:8c:d6:18:15:18: 00:bc:43:8f:fd:27:7b:ac:38:cc:d5:dc:0d:dd:8f:91:9f:28: 39:90:6a:80:77:ac:cc:f8:f1:8c:3d:fa:15:21:22:38:3e:72: 3c:9d:e2:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjYwMzI1MDE1NjUyWhcNMjYwNDAxMDE1NjUyWjAYMRYwFAYD VQQDEw02OWMzNDBlNC04MmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbNqjwdADTraYEC2RuNg9JaI6ujg9lHzRKPoM0v3AAmTCHhb596YC5L4jZ3W igeDr0OhFhvhi+25eNgZpMEN0e1qcT7O6m1Yd/ruCg8kVe3Wac6OcDslx6Rdcgnm I5XmC39DT2nGU/z4Hjh7D7PAMNBRcJ+EeNG/zk77NEdbyv5II/h4GhKV7ugB64dj QRaDtqsY3FIQ68HOqRwzkJ2BHkFVeKpwLrdFYRw7Ekh56AZyqzPXBpx5Aq09NaVh dgEbiEtHtyMrwZDcN+fKyVIeYyZhOl95o4P0rH/bq/ZTylSHWjh3hDXDXDA6tDmL JGN/iyIuXpot4vYlLo3us2wFJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABpjDHP hIL5JZONK+Er3eFliUB6MB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB8fWukN0l/HcDPrklPe8PbIiS+v1rgDs98kBDUiyuxyPMYthEQ6jG5WW6Tc4 h+kqlLkMoDYiwGpCCjOZPehMahlsXly1qw0F9Rpvk3zc4aTTQqEmmpWZRb+La0OF Ix4m7ddcGT0CTw+aqMAG3A+6kY6anmdSck5lcd5ge0KjaTBTEFxq/P4X/961MGHe qTvNYBOhnzv7AxojYkzPIepT13IfjtK+TG1yePs7IZcqa/ZLMDjz+lKkVIKxSYrb DD0L1I1avtw8Gdn5W60P8RbkF+5AzIzWGBUYALxDj/0ne6w4zNXcDd2PkZ8oOZBq gHeszPjxjD36FSEiOD5yPJ3iuw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:22 2026 by rpki-client