$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: Sdk4A7glu7tam5NVyCubhfaRJPl9f6/Ary7yFtNoE7Y= Subject key identifier: FE:26:65:7E:9C:37:81:44:54:D5:B7:FA:1E:63:E6:44:D6:DD:D5:C9 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0974 Signing time: Tue 24 Mar 2026 19:50:17 +0000 Manifest this update: Tue 24 Mar 2026 19:50:16 +0000 Manifest next update: Tue 31 Mar 2026 19:50:16 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: qcS3pGgJF6CZdVKijsYQgkLSNgN5uHOHuuTzz1CeJvE=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ejDpkAx5M2yCpAT9/wej1RqvA3FAVvmv79SZ5ZjmZWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Mar 24 19:50:16 2026 GMT Not After : Mar 31 19:50:16 2026 GMT Subject: CN=69c2eaf9-f425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:9e:b4:69:d9:f1:68:4b:dd:29:c8:00:9a: c8:7d:aa:d6:12:11:b8:78:4c:1e:99:cc:b6:8f:84: 5c:7f:46:ae:93:99:b2:bd:22:fd:1a:a8:6c:cf:7c: 91:7d:32:3e:97:98:ee:e2:8e:a1:ee:bd:55:ca:17: e7:27:d0:bb:6a:cc:16:ec:a9:65:ed:f2:11:44:54: 52:f2:9d:d8:69:d4:dd:a0:34:1c:6c:77:9c:b7:df: 69:57:0e:b6:ef:8b:f2:ce:5b:f2:54:c1:fa:e3:a7: cc:7b:52:90:08:6d:45:aa:4e:a3:ce:76:a3:fc:24: 60:b8:b3:2d:c6:5d:80:c9:db:8e:cd:cc:1b:6d:e4: 5d:37:ec:72:b7:9a:85:57:9a:65:f9:e2:00:40:1b: d6:c5:14:01:ff:28:40:a3:7d:2a:b2:6e:16:96:cd: 0d:cd:51:93:ac:72:15:28:83:6e:67:d9:a5:e7:f4: b5:72:7e:7f:67:83:89:8e:34:d4:27:05:56:75:05: df:b8:26:b5:66:eb:4f:95:e1:82:74:16:cf:57:3a: b2:55:e9:04:da:d1:24:2b:c0:9b:41:fe:27:b6:66: 8b:2a:fa:c9:82:06:e6:a2:cc:47:6e:80:ae:1e:d5: 80:63:db:61:ad:ea:9c:b9:af:d9:38:01:c3:dc:98: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:65:7E:9C:37:81:44:54:D5:B7:FA:1E:63:E6:44:D6:DD:D5:C9 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c0:61:a2:86:62:a8:15:26:50:72:b7:2c:43:a4:de:7e:47: 33:70:7d:fe:6e:bb:60:fb:6b:c4:1c:1a:40:a5:dc:63:21:43: 56:ca:3d:46:51:fd:92:d5:ff:bd:8a:30:13:6c:14:ac:c3:39: f6:b0:b4:71:ed:b1:c6:24:24:fe:2e:5e:fc:b3:e0:19:91:c8: aa:78:d0:02:e9:be:52:c3:02:4b:84:3f:53:6a:06:41:a9:1e: c6:80:2e:db:0f:9b:b6:c5:b4:2e:79:29:a8:bc:63:e9:e9:96: 56:3b:aa:54:59:32:14:4c:30:f7:f7:6b:d1:e9:2d:d4:11:1e: 35:80:a1:92:84:cb:00:fc:a9:da:78:fb:51:0d:7c:28:77:25: 95:fe:34:eb:75:6a:2a:97:a7:9b:11:06:00:8c:25:69:38:99: 70:04:39:e1:b8:59:9e:f0:16:79:01:82:8d:67:ba:a5:cb:df: 05:07:89:c3:76:a6:19:6c:43:fe:4e:9a:a0:72:9c:95:4c:69: 2c:ee:8c:81:b2:4f:2e:de:c7:9a:36:77:a1:7d:fd:10:89:57: 36:6b:6e:25:df:53:79:b8:1b:10:3f:8f:be:c3:e5:07:4c:8f: 66:34:0d:1f:7f:60:15:18:b1:5b:e4:e5:48:c3:b4:73:54:69: e1:3c:88:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjYwMzI0MTk1MDE2WhcNMjYwMzMxMTk1MDE2WjAYMRYwFAYD VQQDEw02OWMyZWFmOS1mNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4qetGnZ8WhL3SnIAJrIfarWEhG4eEwemcy2j4Rcf0auk5myvSL9Gqhsz3yR fTI+l5ju4o6h7r1VyhfnJ9C7aswW7Kll7fIRRFRS8p3YadTdoDQcbHect99pVw62 74vyzlvyVMH646fMe1KQCG1Fqk6jznaj/CRguLMtxl2AyduOzcwbbeRdN+xyt5qF V5pl+eIAQBvWxRQB/yhAo30qsm4Wls0NzVGTrHIVKINuZ9ml5/S1cn5/Z4OJjjTU JwVWdQXfuCa1ZutPleGCdBbPVzqyVekE2tEkK8CbQf4ntmaLKvrJggbmosxHboCu HtWAY9threqcua/ZOAHD3Jjh8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4mZX6c N4FEVNW3+h5j5kTW3dXJMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL8BhooZiqBUmUHK3LEOk3n5HM3B9/m67YPtrxBwaQKXcYyFDVso9RlH9ktX/ vYowE2wUrMM59rC0ce2xxiQk/i5e/LPgGZHIqnjQAum+UsMCS4Q/U2oGQakexoAu 2w+btsW0LnkpqLxj6emWVjuqVFkyFEww9/dr0ekt1BEeNYChkoTLAPyp2nj7UQ18 KHcllf4063VqKpenmxEGAIwlaTiZcAQ54bhZnvAWeQGCjWe6pcvfBQeJw3amGWxD /k6aoHKclUxpLO6MgbJPLt7HmjZ3oX39EIlXNmtuJd9TebgbED+PvsPlB0yPZjQN H39gFRixW+TlSMO0c1Rp4TyI6g== -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:03 2026 by rpki-client