$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: GXsTRrMldjThyAEMB71LPGcLb5Vsq+iFh+c9iwCB6Q4= Subject key identifier: 1D:EF:43:AC:36:C6:F0:38:1A:7A:E8:F9:85:9B:8A:EE:27:D1:8B:52 Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 0232 Signing time: Sun 01 Mar 2026 22:37:55 +0000 Manifest this update: Sun 01 Mar 2026 22:37:54 +0000 Manifest next update: Sun 08 Mar 2026 22:37:54 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: 5zCha9zo3h0UutUWn+zb+M5zWLkrNG0mj4PAMC/b4EU=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: vl+h0eEMr3VmoPDHe+TTuXESwajymLmFcVhGZQrpzQQ=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: hIupZmw2VypGCI0Ryv/lHKp2U+OO+3zUaWNDJXbUGS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Mar 1 22:37:54 2026 GMT Not After : Mar 8 22:37:54 2026 GMT Subject: CN=69a4bfc3-c4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:36:45:f6:71:72:0f:33:fb:3e:1a:0b:ca: f3:9f:3c:17:55:d5:85:72:ed:ee:8b:f6:e2:a4:98: 25:c8:9e:3d:59:57:0f:3c:16:a5:db:a7:d6:10:c3: 37:17:79:c2:73:e9:94:62:70:65:d1:21:e8:02:ca: f0:c4:2f:ff:da:97:cb:6f:ce:f6:df:dd:7f:e9:e9: cf:b9:d7:ea:57:08:af:e4:d7:a0:7d:9b:3f:cc:25: 2b:52:ef:72:64:4e:ef:a7:0a:9a:7e:62:42:54:bb: 6a:89:07:bb:84:60:d8:9e:fe:cc:af:f0:2a:97:3d: 94:af:e2:e5:4b:2e:bd:4e:77:ce:8a:ca:d7:f6:ea: 7a:69:ef:f5:df:7d:c3:29:b6:d8:f3:5d:5e:74:81: ac:f4:9f:85:9e:cb:53:b2:7a:cf:80:9d:9e:39:05: 15:9d:fa:98:85:f8:82:ce:82:a2:cc:27:5f:07:ab: ff:d8:14:5b:0e:0d:a9:48:3b:3f:0e:f7:86:e8:70: 4f:37:94:76:fb:10:c1:6e:a0:71:26:3e:df:1f:6b: c4:5f:da:20:7d:5e:7c:7b:cc:9d:85:9c:3c:b9:d4: 97:f1:09:a9:3c:6b:c5:af:3a:65:1f:29:ac:ef:b2: 05:13:59:1b:69:f1:5b:63:dd:82:9d:90:7a:76:b2: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:43:AC:36:C6:F0:38:1A:7A:E8:F9:85:9B:8A:EE:27:D1:8B:52 X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a7:80:fc:20:86:ce:68:ff:6f:ed:46:f6:90:2f:4a:df:7b: 6e:57:09:1b:6b:c5:b6:e5:ea:d2:5c:b8:8b:9e:45:d4:c9:0f: 35:eb:b5:2a:c1:9c:16:f8:b6:11:22:a3:9d:65:5a:bc:f5:f4: b4:de:f7:bb:88:d2:4b:7b:1c:a3:2a:b0:9f:73:a2:4f:cb:c5: eb:20:0e:ab:af:b8:fb:b0:fe:1c:bf:39:1d:cf:06:a0:c7:88: 39:89:0e:aa:58:52:62:a9:73:36:f7:77:b3:1a:df:81:d1:e8: b6:1f:91:26:b1:3d:bf:c6:f7:11:73:1f:07:ff:82:b4:34:57: 06:5f:19:dd:39:9e:f1:b1:b5:bd:d0:65:46:d9:44:da:7f:c9: 3e:37:fb:b0:ec:81:82:74:2b:ac:86:56:89:8e:0f:66:92:33: 04:44:d4:b0:3c:45:40:7d:57:8c:e7:23:ec:98:25:25:d8:78: 44:71:ff:49:e8:a2:18:18:93:57:91:a3:9c:05:cc:2d:a6:12: df:5c:09:6a:56:93:37:7d:b8:4c:64:74:0a:5f:17:36:a2:f3: c4:61:6b:57:3a:69:ef:b1:60:7a:b6:4b:33:4c:09:74:39:63: db:2d:b0:1d:17:91:23:90:91:02:c5:0b:e5:6a:41:52:41:28: 58:15:a2:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjYwMzAxMjIzNzU0WhcNMjYwMzA4MjIzNzU0WjAYMRYwFAYD VQQDEw02OWE0YmZjMy1jNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ82RfZxcg8z+z4aC8rznzwXVdWFcu3ui/bipJglyJ49WVcPPBal26fWEMM3 F3nCc+mUYnBl0SHoAsrwxC//2pfLb872391/6enPudfqVwiv5NegfZs/zCUrUu9y ZE7vpwqafmJCVLtqiQe7hGDYnv7Mr/Aqlz2Ur+LlSy69TnfOisrX9up6ae/1333D KbbY811edIGs9J+FnstTsnrPgJ2eOQUVnfqYhfiCzoKizCdfB6v/2BRbDg2pSDs/ DveG6HBPN5R2+xDBbqBxJj7fH2vEX9ogfV58e8ydhZw8udSX8QmpPGvFrzplHyms 77IFE1kbafFbY92CnZB6drIgQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3vQ6w2 xvA4Gnro+YWbiu4n0YtSMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZqeA/CCGzmj/b+1G9pAvSt97blcJG2vFtuXq0ly4i55F1MkPNeu1KsGcFvi2 ESKjnWVavPX0tN73u4jSS3scoyqwn3OiT8vF6yAOq6+4+7D+HL85Hc8GoMeIOYkO qlhSYqlzNvd3sxrfgdHoth+RJrE9v8b3EXMfB/+CtDRXBl8Z3Tme8bG1vdBlRtlE 2n/JPjf7sOyBgnQrrIZWiY4PZpIzBETUsDxFQH1XjOcj7JglJdh4RHH/SeiiGBiT V5GjnAXMLaYS31wJalaTN324TGR0Cl8XNqLzxGFrVzpp77FgerZLM0wJdDlj2y2w HReRI5CRAsUL5WpBUkEoWBWi+w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:17 2026 by rpki-client