$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: WFS0xiw96wKIYLSuX0HrQopWhcJy+wBSs4KTpYyVrog= Subject key identifier: BD:EC:EB:5F:AA:42:F7:99:9B:11:95:6D:99:C6:16:F3:D8:F6:D0:67 Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: DD Signing time: Wed 25 Mar 2026 05:48:09 +0000 Manifest this update: Wed 25 Mar 2026 05:48:09 +0000 Manifest next update: Wed 01 Apr 2026 05:48:09 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: f+O4LfhOmxnUmSChwIcykdma1LZkbuOVfLe7a7Sj6mk=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: eYKV4envgCgs3WvH6pBo9YBy1q8A8VpKoNaaI9QRSww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: Mar 25 05:48:09 2026 GMT Not After : Apr 1 05:48:09 2026 GMT Subject: CN=69c37719-ebcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:9b:24:2a:c5:c0:68:88:d1:5f:2d:aa:54: 02:21:11:c3:0b:7d:2d:2f:4f:da:d8:6c:d2:97:9a: 86:d6:e0:e2:80:bf:5b:d6:1e:ae:56:00:67:a5:6e: 42:72:2b:52:41:0e:78:5e:6b:00:b2:54:7e:85:1e: 11:c3:93:15:1d:3f:0b:52:28:68:2e:91:b7:bc:17: df:7f:21:67:e4:e0:f9:07:3a:63:36:b7:d5:b4:16: ae:ca:a2:2c:bd:d2:85:38:be:cb:5c:7e:7b:45:53: ae:e7:88:46:b5:9b:37:65:a6:3a:b3:fb:f4:84:13: 61:b0:b3:6e:f6:de:b8:61:c4:a9:c8:4c:38:a4:75: a1:72:03:dd:97:cd:8e:ce:d6:14:9f:07:0d:0d:58: 01:a2:25:a2:8f:4b:69:07:f0:e1:98:ed:be:e8:c6: e8:06:0d:87:73:52:57:ab:63:b5:fe:7f:53:42:5a: d5:09:f0:22:84:0c:41:06:33:2c:07:d9:bd:bd:98: 25:dd:bb:6d:19:f4:e8:f7:63:83:c6:66:52:2d:67: 2c:40:ca:76:c5:68:21:6b:ec:1e:eb:fb:d0:3c:5b: 2e:d3:de:0c:5e:0f:dd:54:0b:72:7a:c9:91:be:1a: 3e:4a:86:76:b5:8a:7c:e4:f2:93:7c:ce:81:4f:98: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EC:EB:5F:AA:42:F7:99:9B:11:95:6D:99:C6:16:F3:D8:F6:D0:67 X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:bb:11:7f:d2:c0:26:88:57:38:67:ad:84:a8:68:b2:7f: ab:b3:73:3d:f7:9e:74:32:d1:d4:9d:78:e3:20:e6:66:c5:dc: 3b:67:a5:44:f6:8e:ee:11:57:97:7b:1a:91:31:a6:b3:a0:e8: ff:f2:bf:73:d2:65:93:5b:a4:66:22:20:79:03:6e:40:f4:b2: ee:d8:a2:74:b7:0d:0e:2e:6e:34:b3:01:15:77:15:c3:32:b3: d9:b1:23:5b:dd:14:cc:e4:42:30:f1:f8:af:1d:53:69:b0:84: b1:dc:a9:65:3e:9e:a4:15:48:34:86:13:ce:48:b9:b9:fa:44: f0:21:30:ea:70:5a:c6:7d:ed:07:99:c4:be:6a:6b:e1:e5:6f: a9:f2:54:2a:f1:f3:f5:92:41:57:46:d7:5f:b9:3c:9f:a8:c2: 2c:59:44:96:36:77:f5:c5:b0:41:96:eb:52:6c:97:0f:1a:9d: ed:a7:64:d3:ee:c9:27:48:d4:32:d7:f7:10:e7:26:3c:bf:61: 9e:72:59:33:17:fc:54:9f:71:95:e1:c0:ea:2b:65:a2:5b:50: f8:7e:f2:41:56:32:48:57:b1:46:89:cf:24:70:43:5d:01:c2: 99:83:da:43:ea:a9:f7:58:65:39:e3:3d:25:8d:22:07:51:fa: b3:df:ed:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEN0IxMTAvBgNVBAUTKDYxNEQxRUM4QjY5M0U3QkI1RjMyQ0ZBNTI3QjUwMjgz MjY5REZFMkIwHhcNMjYwMzI1MDU0ODA5WhcNMjYwNDAxMDU0ODA5WjAYMRYwFAYD VQQDEw02OWMzNzcxOS1lYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnt2bJCrFwGiI0V8tqlQCIRHDC30tL0/a2GzSl5qG1uDigL9b1h6uVgBnpW5C citSQQ54XmsAslR+hR4Rw5MVHT8LUihoLpG3vBfffyFn5OD5BzpjNrfVtBauyqIs vdKFOL7LXH57RVOu54hGtZs3ZaY6s/v0hBNhsLNu9t64YcSpyEw4pHWhcgPdl82O ztYUnwcNDVgBoiWij0tpB/DhmO2+6MboBg2Hc1JXq2O1/n9TQlrVCfAihAxBBjMs B9m9vZgl3bttGfTo92ODxmZSLWcsQMp2xWgha+we6/vQPFsu094MXg/dVAtyesmR vho+SoZ2tYp85PKTfM6BT5h9xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3s61+q QveZmxGVbZnGFvPY9tBnMB8GA1UdIwQYMBaAFGFNHsi2k+e7XzLPpSe1AoMmnf4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ3Qi9BNzRGNUVEQ0Q4 NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3dGZNcy1sSjdVQ2d5YWRf aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ3Qi9BNzRGNUVEQ0Q4NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3 dGZNcy1sSjdVQ2d5YWRfaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMa7EX/SwCaIVzhnrYSoaLJ/q7NzPfeedDLR1J144yDmZsXcO2elRPaO7hFX l3sakTGms6Do//K/c9Jlk1ukZiIgeQNuQPSy7tiidLcNDi5uNLMBFXcVwzKz2bEj W90UzORCMPH4rx1TabCEsdypZT6epBVINIYTzki5ufpE8CEw6nBaxn3tB5nEvmpr 4eVvqfJUKvHz9ZJBV0bXX7k8n6jCLFlEljZ39cWwQZbrUmyXDxqd7adk0+7JJ0jU Mtf3EOcmPL9hnnJZMxf8VJ9xleHA6itloltQ+H7yQVYySFexRonPJHBDXQHCmYPa Q+qp91hlOeM9JY0iB1H6s9/tZw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:06 2026 by rpki-client