$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: 0hbLGRCvs37VJ03Jng6hV9tcTLDHJUaRqyJtEF00jAg= Subject key identifier: 82:BB:CA:57:60:3B:BE:BA:F0:2E:BD:2A:72:DD:A5:A1:F9:ED:0B:D1 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 351B Signing time: Mon 02 Mar 2026 03:02:01 +0000 Manifest this update: Mon 02 Mar 2026 03:02:00 +0000 Manifest next update: Mon 09 Mar 2026 03:02:00 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: bPjH5IlGZlQVoCGpymrAcl/6HDsi4/2NJZ55dsHUDj8=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13604 (0x3524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Mar 2 03:02:00 2026 GMT Not After : Mar 9 03:02:00 2026 GMT Subject: CN=69a4fda9-7c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:68:bb:79:be:21:90:e6:de:ec:a2:89:76: 79:9b:ce:63:bc:86:08:71:db:8a:27:72:25:db:8b: c2:ac:55:05:4a:08:8a:d7:00:7b:77:e0:f7:33:47: 88:f1:88:d4:21:07:15:61:49:6d:f3:cd:15:3e:c1: 9f:06:57:c1:90:88:16:d6:42:82:e9:4c:45:30:ac: 6b:27:b5:04:aa:2c:0f:de:da:a5:44:c1:74:d8:c7: a5:fc:1c:5a:d7:be:41:79:99:d6:75:85:e8:dc:a2: 7b:95:a7:6a:73:9c:e2:b0:93:6b:df:6a:91:55:1d: fb:9a:48:00:f8:a7:21:16:45:6b:63:6a:68:ed:d4: 23:50:5f:c2:e3:fc:9b:2b:5b:c8:92:0b:3e:87:ff: 48:0d:e4:fb:14:91:a9:30:82:7f:bc:3f:21:57:7b: 8a:fd:cb:d5:6f:6b:0e:81:bd:09:b5:3e:e4:c0:c7: 32:61:05:47:ec:e1:13:09:7a:ae:e7:b1:3d:e0:d7: 6f:2a:ce:af:5b:9b:34:64:9c:b9:87:8a:1b:aa:83: 91:a9:01:79:98:42:d8:3c:72:89:84:6e:c7:8e:9b: 2e:8b:22:01:6c:f9:23:1e:8e:12:3c:79:28:d3:23: 29:64:84:c9:88:fb:c1:a1:60:78:0f:36:12:1e:35: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BB:CA:57:60:3B:BE:BA:F0:2E:BD:2A:72:DD:A5:A1:F9:ED:0B:D1 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:42:ba:e4:d4:ea:29:16:69:f6:52:09:65:70:90:7a:7f:2b: 67:6b:8a:89:90:e0:30:1b:60:84:75:bc:02:5b:36:b8:dc:50: 6f:6e:24:28:d8:38:2a:0f:4e:40:2b:e3:be:49:76:02:96:e3: ea:35:87:cd:a0:b7:92:4f:58:20:6a:2d:9e:25:f4:c7:4b:6e: 47:64:41:b3:50:00:b5:70:1e:13:ed:ac:e4:56:17:bf:ce:ae: ee:68:a7:69:61:9b:14:de:b8:a3:70:e1:27:46:6b:2a:1c:41: 9a:87:50:e3:8b:06:6d:f5:77:da:6b:a8:30:77:e5:97:cf:02: 82:8b:c1:07:06:ca:ae:77:b2:4e:c6:c6:90:e4:8c:8f:7b:50: fe:8f:63:ca:19:f4:c1:a4:08:df:4c:0b:fb:8a:ea:be:72:21: 3c:e0:12:7e:b7:07:54:77:88:09:b2:a3:be:3c:ce:c0:0b:63: a6:6c:cd:00:a3:48:cf:c3:4a:84:17:d2:74:7b:38:8d:22:d2: 75:2e:5d:1b:9c:ef:90:eb:40:57:af:ff:b4:cc:dc:75:16:56: 7b:ab:66:35:13:6c:a3:a4:87:0d:c5:be:d3:ce:91:b9:3c:e6: 57:32:02:53:2f:c0:7b:bc:45:38:61:5e:0d:c4:b9:86:ca:c4: e2:b1:e3:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYwMzAyMDMwMjAwWhcNMjYwMzA5MDMwMjAwWjAYMRYwFAYD VQQDEw02OWE0ZmRhOS03YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxhou3m+IZDm3uyiiXZ5m85jvIYIcduKJ3Il24vCrFUFSgiK1wB7d+D3M0eI 8YjUIQcVYUlt880VPsGfBlfBkIgW1kKC6UxFMKxrJ7UEqiwP3tqlRMF02Mel/Bxa 175BeZnWdYXo3KJ7ladqc5zisJNr32qRVR37mkgA+KchFkVrY2po7dQjUF/C4/yb K1vIkgs+h/9IDeT7FJGpMIJ/vD8hV3uK/cvVb2sOgb0JtT7kwMcyYQVH7OETCXqu 57E94NdvKs6vW5s0ZJy5h4obqoORqQF5mELYPHKJhG7HjpsuiyIBbPkjHo4SPHko 0yMpZITJiPvBoWB4DzYSHjUn8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIK7yldg O7668C69KnLdpaH57QvRMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApkK65NTqKRZp9lIJZXCQen8rZ2uKiZDgMBtghHW8Als2uNxQb24kKNg4Kg9O QCvjvkl2Apbj6jWHzaC3kk9YIGotniX0x0tuR2RBs1AAtXAeE+2s5FYXv86u7min aWGbFN64o3DhJ0ZrKhxBmodQ44sGbfV32muoMHfll88CgovBBwbKrneyTsbGkOSM j3tQ/o9jyhn0waQI30wL+4rqvnIhPOASfrcHVHeICbKjvjzOwAtjpmzNAKNIz8NK hBfSdHs4jSLSdS5dG5zvkOtAV6//tMzcdRZWe6tmNRNso6SHDcW+086RuTzmVzIC Uy/Ae7xFOGFeDcS5hsrE4rHj5w== -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:31 2026 by rpki-client