$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: m80cVgedpWELBK7jafTBScHeAcxWbBP68HeIE8QqgAg= Subject key identifier: F4:E9:AB:37:7B:9C:BA:E2:B4:AF:73:CF:A3:64:53:DE:1A:D9:CB:E7 Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 082F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 0824 Signing time: Mon 02 Mar 2026 01:07:34 +0000 Manifest this update: Mon 02 Mar 2026 01:07:32 +0000 Manifest next update: Mon 09 Mar 2026 01:07:32 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: trw/rJyfHdsDXVQsnHLWjSqPOj5AbPt8ChEqqYvhHCo=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: zGD9lcUTmqWV8Ub5PXm3WZs7NlAXgc4Pjs1NPpumIiQ=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: OlWC46i6lVGRyQNBF4VXZE/tYTQkG/ur7HJmGVnjsmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: Mar 2 01:07:32 2026 GMT Not After : Mar 9 01:07:32 2026 GMT Subject: CN=69a4e2d5-9cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:94:98:00:df:99:bb:f6:68:8c:6c:37:cc: 5c:f8:1a:9b:09:02:75:00:77:cb:d4:6d:64:2e:17: 02:17:60:8c:c5:3f:a2:af:e7:b9:4a:db:2e:ed:53: aa:9c:dd:54:b9:39:80:84:1b:eb:b2:13:af:26:0b: 69:28:85:ad:32:7b:01:b9:09:5a:b4:b9:a5:ba:44: 2f:3c:2c:d7:ec:be:4e:ae:eb:59:03:17:2d:91:50: db:ae:73:00:4a:a0:f7:90:32:96:b1:b5:4b:af:a9: 21:85:40:e4:4e:29:00:53:0c:bb:90:3a:a2:9e:87: 32:e7:c6:f2:98:26:5c:82:ad:80:a7:18:07:a3:0c: d6:09:c8:4b:be:fc:78:74:87:f7:95:b3:58:ca:68: 6a:a9:44:03:be:fc:9c:27:28:ba:f1:4f:e1:02:0b: 6a:98:c9:71:4f:5b:a4:7e:10:8f:04:b7:41:a5:3a: d0:e2:ee:58:19:85:98:f2:50:6d:36:91:8e:b0:4d: ad:a9:70:c3:b0:b4:b3:7d:ca:0f:04:46:40:6e:64: ce:c8:2e:0a:80:6a:77:6e:35:bb:1e:fc:13:db:90: 45:6f:89:57:93:b9:ba:18:43:46:56:60:b5:5e:f0: 09:3a:39:c8:e8:0c:59:3f:71:a1:02:05:a4:5a:5c: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:AB:37:7B:9C:BA:E2:B4:AF:73:CF:A3:64:53:DE:1A:D9:CB:E7 X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e9:1c:fb:cd:5e:49:39:f7:d8:78:3b:f9:47:48:98:e4:64: ed:4a:25:b3:19:63:4f:44:21:a2:b0:6d:13:7a:a6:03:2e:a7: 24:8f:47:0a:78:53:5e:10:86:f7:a9:49:7d:73:b4:8c:3c:c8: e1:30:bf:cc:1a:2e:d9:9b:ff:6c:91:1d:a6:ee:26:e2:10:3b: 12:98:ef:34:6e:e9:89:0c:53:73:ba:48:d5:2f:a6:59:ad:1b: 66:b8:4a:0e:91:ec:6b:1e:3e:e6:4e:eb:24:b0:a0:30:90:b5: fa:2d:93:f1:93:f4:84:45:1d:0b:76:32:ce:d0:42:eb:b7:43: 98:13:63:b8:c1:ed:8f:42:83:4f:30:fd:23:4e:71:61:de:e5: 91:4c:6d:81:e9:b0:39:e1:dc:a0:12:14:11:5f:ee:df:df:e4: 6a:07:2c:ca:de:bb:d5:f6:72:5c:ee:bd:1e:5f:53:41:0b:3a: 51:dd:0f:2d:32:54:0c:ea:ca:af:42:ee:14:a1:96:1e:19:ea: 82:83:12:ec:76:84:c5:ed:61:8a:c7:5f:fd:2a:f4:53:51:24: 4f:81:f9:1a:af:33:42:4c:6b:96:fe:78:0e:28:67:42:0a:fa: 11:ce:4e:1a:e1:b7:03:2d:4c:80:d6:2b:80:f5:2e:0a:95:45: 74:26:78:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjYwMzAyMDEwNzMyWhcNMjYwMzA5MDEwNzMyWjAYMRYwFAYD VQQDEw02OWE0ZTJkNS05Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC+UmADfmbv2aIxsN8xc+BqbCQJ1AHfL1G1kLhcCF2CMxT+ir+e5Stsu7VOq nN1UuTmAhBvrshOvJgtpKIWtMnsBuQlatLmlukQvPCzX7L5OrutZAxctkVDbrnMA SqD3kDKWsbVLr6khhUDkTikAUwy7kDqinocy58bymCZcgq2ApxgHowzWCchLvvx4 dIf3lbNYymhqqUQDvvycJyi68U/hAgtqmMlxT1ukfhCPBLdBpTrQ4u5YGYWY8lBt NpGOsE2tqXDDsLSzfcoPBEZAbmTOyC4KgGp3bjW7HvwT25BFb4lXk7m6GENGVmC1 XvAJOjnI6AxZP3GhAgWkWlxYfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTpqzd7 nLritK9zz6NkU94a2cvnMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACekc+81eSTn32Hg7+UdImORk7UolsxljT0QhorBtE3qmAy6nJI9HCnhTXhCG 96lJfXO0jDzI4TC/zBou2Zv/bJEdpu4m4hA7EpjvNG7piQxTc7pI1S+mWa0bZrhK DpHsax4+5k7rJLCgMJC1+i2T8ZP0hEUdC3YyztBC67dDmBNjuMHtj0KDTzD9I05x Yd7lkUxtgemwOeHcoBIUEV/u39/kagcsyt671fZyXO69Hl9TQQs6Ud0PLTJUDOrK r0LuFKGWHhnqgoMS7HaExe1hisdf/Sr0U1EkT4H5Gq8zQkxrlv54DihnQgr6Ec5O GuG3Ay1MgNYrgPUuCpVFdCZ49g== -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:21 2026 by rpki-client