$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json) Hash identifier: /Fipz+0C1FAqJOwmCuAF2+CYiHujWHyTEcty/TtPBGw= Subject key identifier: CA:B6:81:CD:47:43:A6:09:4B:E4:CA:37:60:74:54:2C:41:5F:31:B1 Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft Manifest number: 0A9E Signing time: Sun 01 Mar 2026 22:51:54 +0000 Manifest this update: Sun 01 Mar 2026 22:51:53 +0000 Manifest next update: Sun 08 Mar 2026 22:51:53 +0000 Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: dlBAM51/NogB0eDUTLDc+uVeCoIOkfwdhktG+DSnmWI=) 2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Validity Not Before: Mar 1 22:51:53 2026 GMT Not After : Mar 8 22:51:53 2026 GMT Subject: CN=69a4c309-6e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:97:41:2b:26:6c:0f:f4:d5:d3:45:a2:ff: e2:ca:15:14:11:2a:03:e9:c0:79:a8:c9:03:44:8e: ae:7e:b7:02:b2:17:34:dc:5f:2f:f7:08:e6:c5:5d: 29:90:07:44:f9:3c:74:d8:bf:46:b2:6d:f4:36:6f: 95:04:e7:df:dc:ab:2e:db:22:df:b0:8e:49:3a:7d: 15:91:56:99:89:b2:12:4c:af:26:a9:80:bd:6f:6f: ff:d9:7c:6e:06:28:0f:73:ec:b7:cd:63:4b:ac:8a: e4:da:89:f5:d2:58:46:51:59:f0:8c:b4:8d:e8:53: 80:15:5f:d2:f8:ac:37:39:b7:e3:c9:f7:05:1c:d7: 76:d6:5b:52:62:bd:af:2d:48:f5:61:0f:a4:1c:61: 87:f3:57:54:69:fe:f6:95:81:62:7b:38:fb:92:d5: 6e:2d:17:82:5a:44:60:92:3c:d2:39:f4:16:8a:ac: e0:61:0d:13:f3:fd:e6:21:c9:8d:39:c0:d9:fb:9c: 0d:dd:6d:c2:78:26:3f:06:41:01:ec:63:b3:76:94: d7:24:f6:d3:1a:06:2d:d0:60:26:68:77:64:44:59: 2e:da:a6:21:eb:67:01:e6:a5:81:2c:fe:0c:11:e8: 35:af:ff:eb:22:f9:dc:3b:92:18:68:e3:b0:2b:59: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B6:81:CD:47:43:A6:09:4B:E4:CA:37:60:74:54:2C:41:5F:31:B1 X509v3 Authority Key Identifier: keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:68:4d:b1:9b:44:74:61:08:8c:b1:7e:ac:ae:2b:73:75: eb:af:c7:3d:46:f5:44:15:20:cc:68:0a:74:d9:57:62:c3:02: 0b:f6:6b:d7:2e:17:e3:99:e4:89:64:7a:ea:60:4c:ec:f7:71: d2:43:1e:19:05:d0:34:44:c7:c0:bf:f9:65:bb:35:64:59:83: 11:e5:72:e1:0e:fa:3f:47:0b:e7:13:c9:6a:39:bc:74:d9:a5: c4:b5:79:79:6d:a9:54:ff:18:7c:24:fa:60:9c:82:b4:00:66: 4b:67:df:b1:07:52:46:a0:b1:e2:28:bd:ed:51:33:1d:df:73: 43:52:ca:d4:ae:25:18:a1:c1:13:50:a9:ba:d3:c9:d7:0d:26: 4e:ad:6a:1c:3f:3a:38:38:f9:92:e6:42:35:51:a2:9b:a6:d7: 39:10:b8:71:c7:08:19:da:04:1d:3a:f1:f6:d7:84:8d:24:07: ae:4b:3c:3d:c8:e6:a5:8d:6a:3f:f5:97:49:42:fa:00:32:53: bd:20:9d:30:f9:2b:c7:79:4e:3a:74:6c:62:26:cf:40:d2:56: 9b:86:fb:66:54:c7:40:72:67:14:f5:44:af:84:34:02:c9:1c: 42:e3:8c:2c:89:02:40:64:e2:88:65:ad:6c:6a:99:da:0c:ad: 73:23:1c:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB QjJFNUQ1MTkwHhcNMjYwMzAxMjI1MTUzWhcNMjYwMzA4MjI1MTUzWjAYMRYwFAYD VQQDEw02OWE0YzMwOS02ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mOXQSsmbA/01dNFov/iyhUUESoD6cB5qMkDRI6ufrcCshc03F8v9wjmxV0p kAdE+Tx02L9Gsm30Nm+VBOff3Ksu2yLfsI5JOn0VkVaZibISTK8mqYC9b2//2Xxu BigPc+y3zWNLrIrk2on10lhGUVnwjLSN6FOAFV/S+Kw3ObfjyfcFHNd21ltSYr2v LUj1YQ+kHGGH81dUaf72lYFiezj7ktVuLReCWkRgkjzSOfQWiqzgYQ0T8/3mIcmN OcDZ+5wN3W3CeCY/BkEB7GOzdpTXJPbTGgYt0GAmaHdkRFku2qYh62cB5qWBLP4M Eeg1r//rIvncO5IYaOOwK1kduwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMq2gc1H Q6YJS+TKN2B0VCxBXzGxMB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG dXJkaG1IZlRsaWVyTGwxUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYEtoTbGbRHRhCIyxfqyuK3N166/HPUb1RBUgzGgKdNlXYsMCC/Zr1y4X45nk iWR66mBM7Pdx0kMeGQXQNETHwL/5Zbs1ZFmDEeVy4Q76P0cL5xPJajm8dNmlxLV5 eW2pVP8YfCT6YJyCtABmS2ffsQdSRqCx4ii97VEzHd9zQ1LK1K4lGKHBE1CputPJ 1w0mTq1qHD86ODj5kuZCNVGim6bXORC4cccIGdoEHTrx9teEjSQHrks8PcjmpY1q P/WXSUL6ADJTvSCdMPkrx3lOOnRsYibPQNJWm4b7ZlTHQHJnFPVEr4Q0AskcQuOM LIkCQGTiiGWtbGqZ2gytcyMcvQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:41:41 2026 by rpki-client