$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft File: yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json) Hash identifier: s7Qx0ShZrfYwm5yhCot8XvDB6m635IVJ5jiXaF9JeOo= Subject key identifier: 1B:B6:A8:BF:06:5F:6A:A8:F1:7B:FD:46:D8:2A:90:BD:31:BE:56:32 Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft Manifest number: 0152 Signing time: Wed 25 Mar 2026 04:22:58 +0000 Manifest this update: Wed 25 Mar 2026 04:22:57 +0000 Manifest next update: Wed 01 Apr 2026 04:22:57 +0000 Files and hashes: 1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: 9Z1PPUJ9IEuK/TUFEyBYwX8OLF1Jd03f0ABlhS/+/ds=) 2: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: LCp+IefaBKjg+XGn+zhxSq3lJLzchE+i+vnMx628oTs=) 3: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: /tnWEO2C7/J5YS/vZWnJOnvgtrYevYzsvruplkJnMZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Validity Not Before: Mar 25 04:22:57 2026 GMT Not After : Apr 1 04:22:57 2026 GMT Subject: CN=69c36321-9d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:3e:ef:1f:b7:3c:d6:bd:f2:94:fd:6b:94: 28:c1:37:7a:45:6d:a7:44:2a:6f:de:cb:ee:a6:bb: 08:30:a7:69:9b:a5:47:3d:9c:9c:51:12:94:b9:0b: e8:aa:07:34:64:a6:44:89:09:a7:f6:e9:fe:4f:84: 6e:90:d4:c1:55:a6:52:2c:a1:7b:b7:00:18:d7:fb: 9b:87:a2:64:aa:c1:b9:38:dc:6d:40:77:e0:68:fd: 85:86:6d:b3:95:9e:d2:f3:56:62:93:7d:f0:8b:e7: 0e:85:05:4a:75:95:91:a9:83:52:3c:5c:21:43:11: b1:a2:13:a3:28:5d:6d:ef:fe:42:cf:b7:d7:dd:36: 56:c3:fc:0a:87:1b:dd:1a:20:32:65:3c:9c:28:b6: 3d:63:d2:fc:c8:1f:41:1a:33:2d:da:3f:c5:fc:5e: 99:23:1a:32:fb:24:2b:41:65:67:62:e8:92:bb:80: d6:3d:49:93:c1:9a:d8:2a:1a:be:25:f2:d1:b6:9a: 63:a1:7b:4b:30:da:28:e8:78:bb:b2:bc:c1:9c:00: 0f:3a:6f:82:08:11:80:5b:07:17:bf:5a:19:81:d0: 00:4d:fd:99:bb:9f:ee:38:fd:ed:33:2f:e7:68:76: 7f:12:70:a0:09:03:21:fa:fd:af:cc:da:3f:39:3e: 60:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B6:A8:BF:06:5F:6A:A8:F1:7B:FD:46:D8:2A:90:BD:31:BE:56:32 X509v3 Authority Key Identifier: keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:29:e3:83:a3:9c:08:53:fe:61:17:f6:38:1a:85:be:13:b4: 49:25:3e:67:b7:40:47:b5:7e:e1:58:a7:b4:6f:ee:56:3c:0b: 19:20:61:1f:78:61:44:b5:99:82:b3:32:8c:54:d6:17:05:42: 52:85:18:5b:d0:0b:7d:fe:77:80:dc:61:34:2f:31:ca:e0:93: 89:8e:af:af:ac:b2:1c:2c:6b:7a:70:fd:c4:95:14:8a:b7:4d: fe:87:f4:de:55:47:e9:c4:c6:38:38:9e:73:e8:77:56:b7:c7: 23:1c:f8:4f:ab:f1:3f:ad:32:a4:3d:19:88:a7:1f:30:34:8f: 29:50:ed:7c:f3:1a:02:64:78:cb:1a:9d:6f:5f:f6:6a:f6:77: 58:30:f6:31:66:b4:78:4d:7a:8e:f5:98:10:9c:16:0b:a4:f7: bc:0b:52:9f:ac:ad:cb:78:1d:ee:0c:37:05:55:cc:b1:bd:3e: 0d:ce:3b:47:c4:9e:97:54:10:c9:67:13:f4:ad:40:55:40:88: ef:be:95:cc:26:f0:51:f3:37:ce:88:d7:e9:70:29:dc:c1:e6: bc:64:3b:97:b1:ce:94:73:3d:cf:ea:09:c0:73:da:04:e5:52: ec:a0:55:c5:71:b7:69:ca:b5:46:ca:15:8b:35:0a:6b:43:28: 5b:f9:6a:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2RkYxMTAvBgNVBAUTKENBRTNEQjhBREVFN0ExNkFCNkNBNTM3RjIzNDdCMDIw NUJERjRGNzYwHhcNMjYwMzI1MDQyMjU3WhcNMjYwNDAxMDQyMjU3WjAYMRYwFAYD VQQDEw02OWMzNjMyMS05ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLI+7x+3PNa98pT9a5QowTd6RW2nRCpv3svuprsIMKdpm6VHPZycURKUuQvo qgc0ZKZEiQmn9un+T4RukNTBVaZSLKF7twAY1/ubh6JkqsG5ONxtQHfgaP2Fhm2z lZ7S81Zik33wi+cOhQVKdZWRqYNSPFwhQxGxohOjKF1t7/5Cz7fX3TZWw/wKhxvd GiAyZTycKLY9Y9L8yB9BGjMt2j/F/F6ZIxoy+yQrQWVnYuiSu4DWPUmTwZrYKhq+ JfLRtppjoXtLMNoo6Hi7srzBnAAPOm+CCBGAWwcXv1oZgdAATf2Zu5/uOP3tMy/n aHZ/EnCgCQMh+v2vzNo/OT5g+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBu2qL8G X2qo8Xv9RtgqkL0xvlYyMB8GA1UdIwQYMBaAFMrj24re56FqtspTfyNHsCBb3092 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTZGRi9EMjgxRTczMDJF MjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9XcTJ5bE5fSTBld0lGdmZU M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTZGRi9EMjgxRTczMDJFMjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9X cTJ5bE5fSTBld0lGdmZUM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGynjg6OcCFP+YRf2OBqFvhO0SSU+Z7dAR7V+4VintG/uVjwLGSBhH3hhRLWZ grMyjFTWFwVCUoUYW9ALff53gNxhNC8xyuCTiY6vr6yyHCxrenD9xJUUirdN/of0 3lVH6cTGODiec+h3VrfHIxz4T6vxP60ypD0ZiKcfMDSPKVDtfPMaAmR4yxqdb1/2 avZ3WDD2MWa0eE16jvWYEJwWC6T3vAtSn6yty3gd7gw3BVXMsb0+Dc47R8Sel1QQ yWcT9K1AVUCI776VzCbwUfM3zojX6XAp3MHmvGQ7l7HOlHM9z+oJwHPaBOVS7KBV xXG3acq1RsoVizUKa0MoW/lqeQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:52:19 2026 by rpki-client