$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: mXzwkIJctMgeT7DSfODXkcBv7gAIaT2LvcLxPEL02iI= Subject key identifier: C9:70:7C:B1:4F:8B:C3:77:7C:E2:89:92:C5:9E:49:9F:E6:8A:E3:4A Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: A2 Signing time: Sun 01 Mar 2026 08:35:02 +0000 Manifest this update: Sun 01 Mar 2026 08:35:01 +0000 Manifest next update: Sun 08 Mar 2026 08:35:01 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: Wpzfd0HW9+G5i6aqybl+h7u9rUAQTF/nFu1p/KAwfc4=) 2: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: hVkpqBz8Nr9HJbp7PiFoLwVsufH9j8FcqYll8CUZa9c=) 3: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: qPzJ/oeyp8XIlVlZetvJbilZBw8geUbM+mpNnzYDNLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Mar 1 08:35:01 2026 GMT Not After : Mar 8 08:35:01 2026 GMT Subject: CN=69a3fa36-65bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:b9:ba:56:e9:1e:bb:ac:97:77:5b:74:a7: a7:13:e9:4e:0a:53:2c:c5:c3:2e:ea:96:e2:af:c5: 54:8e:31:c1:e4:93:80:61:bd:10:db:45:63:d6:61: 4d:40:9f:26:91:c3:2b:26:1d:90:a8:ad:ab:da:52: 55:84:4a:95:7e:bb:ef:59:15:68:3b:fc:ad:02:c8: e8:2d:24:a7:d0:ef:e4:73:2d:4c:fb:64:e6:6b:ca: d6:cf:03:14:d1:3e:3b:20:eb:c9:3b:bd:5f:5c:ad: 74:96:c0:a0:6c:bf:11:25:0f:0a:b8:c3:23:96:10: 2f:64:c6:71:4b:97:24:d3:45:f0:1a:23:e1:bd:25: 38:12:a5:a0:ff:d1:43:b9:0a:8a:6e:99:da:b5:6a: a6:d6:7f:74:40:be:fd:42:57:d5:0d:63:b5:b7:40: 60:00:ef:1b:1a:a0:95:0a:97:3f:88:a2:65:f6:11: 72:59:b3:5d:9c:cc:2d:64:59:00:27:1d:56:3d:6d: 09:91:3b:02:43:e5:aa:37:1c:2a:04:2c:ba:17:b3: 42:cc:4c:0b:c7:4f:02:9b:95:cd:6a:64:62:76:fc: c9:89:fb:0c:24:79:db:b1:a8:8b:c3:a7:18:16:48: 45:b6:be:0a:8d:8f:8c:09:89:f5:a1:68:0a:a5:50: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:70:7C:B1:4F:8B:C3:77:7C:E2:89:92:C5:9E:49:9F:E6:8A:E3:4A X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:dd:10:48:42:39:8a:8c:90:a5:4d:ea:3e:ec:f7:a2:1e:89: 94:1f:94:d3:af:e0:47:75:50:38:88:30:a1:3b:cd:dc:ba:e2: 0a:d7:03:65:ac:a0:85:7c:db:f1:c1:0a:7d:28:0a:d0:28:14: c0:d0:28:05:a1:9c:18:40:23:b7:59:c6:34:4e:84:e5:b8:82: 89:31:7e:9d:7d:39:26:ff:4d:62:fe:df:e6:02:f6:4f:3d:49: 00:f5:4b:fc:a9:ff:c2:34:28:1c:42:93:f4:e3:d4:2d:a1:4e: ff:23:57:72:00:20:55:24:15:31:26:58:1f:ec:4a:40:92:4d: db:a5:63:91:24:2f:b8:4c:35:3a:cb:5b:0d:eb:c9:e4:9f:2d: ec:23:ea:ea:e3:fc:ef:56:e2:fc:9c:f7:ed:58:51:bd:50:6e: fa:b8:86:87:aa:e6:d2:5d:64:bf:08:fe:aa:8e:70:4a:07:cc: f7:42:f0:96:55:21:a6:ba:b4:1d:f6:00:a9:7c:ff:be:84:20: 6e:bd:84:28:33:e1:3d:ee:78:88:ac:47:0b:16:32:51:eb:5e: 0e:d4:0f:82:a2:b1:3c:94:d1:68:1b:93:6d:be:d7:d6:d7:71: d2:6c:8c:89:79:43:3c:58:cc:11:18:fa:aa:c1:4e:29:a0:a7: a3:61:13:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM0OTMxMTAvBgNVBAUTKEM4QjJCQzNCOEFCMUVCQUU0QTc0M0Y5MEQ4QzhBMURG RDFENENFMTcwHhcNMjYwMzAxMDgzNTAxWhcNMjYwMzA4MDgzNTAxWjAYMRYwFAYD VQQDEw02OWEzZmEzNi02NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHm5ulbpHrusl3dbdKenE+lOClMsxcMu6pbir8VUjjHB5JOAYb0Q20Vj1mFN QJ8mkcMrJh2QqK2r2lJVhEqVfrvvWRVoO/ytAsjoLSSn0O/kcy1M+2Tma8rWzwMU 0T47IOvJO71fXK10lsCgbL8RJQ8KuMMjlhAvZMZxS5ck00XwGiPhvSU4EqWg/9FD uQqKbpnatWqm1n90QL79QlfVDWO1t0BgAO8bGqCVCpc/iKJl9hFyWbNdnMwtZFkA Jx1WPW0JkTsCQ+WqNxwqBCy6F7NCzEwLx08Cm5XNamRidvzJifsMJHnbsaiLw6cY FkhFtr4KjY+MCYn1oWgKpVBuWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlwfLFP i8N3fOKJksWeSZ/miuNKMB8GA1UdIwQYMBaAFMiyvDuKseuuSnQ/kNjIod/R1M4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ5My8wNUVDMUQxNDFF RjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2NUtkRC1RMk1paDM5SFV6 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzQ5My8wNUVDMUQxNDFFRjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2 NUtkRC1RMk1paDM5SFV6aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM90QSEI5ioyQpU3qPuz3oh6JlB+U06/gR3VQOIgwoTvN3LriCtcDZayghXzb 8cEKfSgK0CgUwNAoBaGcGEAjt1nGNE6E5biCiTF+nX05Jv9NYv7f5gL2Tz1JAPVL /Kn/wjQoHEKT9OPULaFO/yNXcgAgVSQVMSZYH+xKQJJN26VjkSQvuEw1OstbDevJ 5J8t7CPq6uP871bi/Jz37VhRvVBu+riGh6rm0l1kvwj+qo5wSgfM90LwllUhprq0 HfYAqXz/voQgbr2EKDPhPe54iKxHCxYyUeteDtQPgqKxPJTRaBuTbb7X1tdx0myM iXlDPFjMERj6qsFOKaCno2ETgw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:39:19 2026 by rpki-client