$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: FbfPTX3WQYe/BhQIRqbBCeSbtw6iUKB3X9U+NTzFZ+A= Subject key identifier: DC:4F:AF:A2:38:9B:17:83:B1:1F:5F:A1:1E:3C:81:00:AB:AE:C5:2E Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1BFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1BED Signing time: Mon 02 Mar 2026 01:00:22 +0000 Manifest this update: Mon 02 Mar 2026 01:00:20 +0000 Manifest next update: Mon 09 Mar 2026 01:00:20 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: Uzl5ufRg8hMcY3h9g0mOIiSHL2wo/bKRRjZiNl+DY1M=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: oakuNuG9kd/AFmVVhisAkxuCxSSYDB3xaWupoVeGYJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7162 (0x1bfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Mar 2 01:00:20 2026 GMT Not After : Mar 9 01:00:20 2026 GMT Subject: CN=69a4e126-0465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:fa:15:99:5a:af:47:c6:12:95:8b:83:d4: c1:77:4b:73:e9:8b:86:4c:d4:96:8e:8d:c6:46:60: 38:8a:08:93:47:49:79:8d:d9:30:bb:0e:1d:24:8a: 8b:b1:ce:36:cc:8a:60:d7:46:c7:bd:44:83:11:b1: 69:f2:8a:cc:90:db:5e:6d:65:db:5c:39:2c:87:49: 0f:b4:0a:5e:25:e5:d3:2b:3a:c6:44:af:40:de:4c: 31:43:00:cd:ae:09:3c:1e:41:7a:e5:a1:5c:86:de: c8:64:d6:dc:ae:7c:e5:da:fe:2e:80:e1:72:ab:4a: 24:97:75:d1:0e:a4:b9:1b:d1:79:c8:bc:54:98:39: 11:fc:18:9d:23:f3:01:22:ab:8c:1e:f7:4b:7e:90: 68:74:e5:62:d7:6f:06:c1:23:c3:c8:fb:fe:74:32: 9f:43:41:e6:6a:ef:5b:d4:06:31:0f:54:ec:85:17: 2e:56:64:91:8b:47:46:63:b2:9a:15:bc:dd:d7:a0: 43:84:91:33:2e:b2:d2:51:46:6f:92:a0:dd:68:69: bb:26:5d:6f:de:1a:a4:dc:5c:71:ee:91:52:2a:7e: c1:90:ab:e9:f4:18:18:e6:d7:8d:78:35:62:40:83: 84:63:f0:9e:3e:a9:e7:b1:fc:d3:18:9a:51:6f:25: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:AF:A2:38:9B:17:83:B1:1F:5F:A1:1E:3C:81:00:AB:AE:C5:2E X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5d:39:05:03:8e:a5:a0:4c:b4:d1:94:79:ed:b8:56:3f:0e: a1:d8:90:10:0b:37:bc:30:35:fa:64:2e:63:04:8f:19:ba:1f: 30:4f:b7:59:27:b5:7c:f9:9d:f4:32:12:3f:ee:d1:f7:1d:22: 9b:cc:aa:d9:8e:52:86:76:a0:a2:0b:fa:db:02:b3:a2:74:b0: 14:b2:50:85:47:60:38:bd:6e:2f:eb:72:bf:50:ae:75:16:c4: d5:c9:86:c6:2a:f3:61:a4:65:cd:7b:7b:fd:06:bd:e7:0d:84: 29:73:d9:52:35:4f:19:27:a7:17:b1:29:40:fc:bc:75:dc:61: 32:e6:00:81:46:35:52:a6:fe:39:1e:7e:61:47:37:f6:d9:0d: f8:64:4e:47:1d:bd:c2:aa:ed:cf:1c:58:3e:eb:48:f9:c3:3c: bb:9e:29:39:20:80:a6:87:36:77:bf:ed:f3:00:52:f1:53:60: 0d:3f:95:0d:6d:72:3e:fa:a7:50:07:35:4b:26:51:52:cc:d2: 5a:91:80:a9:4b:be:23:fb:83:7d:b5:c4:45:95:e9:e8:24:fe: 40:d7:31:3f:c3:f4:9c:df:63:23:55:e4:6e:7f:95:20:b9:d9: 6e:f9:66:2c:bf:bb:9e:2f:58:04:de:ea:98:d9:85:2d:31:68: a2:f2:c8:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjYwMzAyMDEwMDIwWhcNMjYwMzA5MDEwMDIwWjAYMRYwFAYD VQQDEw02OWE0ZTEyNi0wNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0b6FZlar0fGEpWLg9TBd0tz6YuGTNSWjo3GRmA4igiTR0l5jdkwuw4dJIqL sc42zIpg10bHvUSDEbFp8orMkNtebWXbXDksh0kPtApeJeXTKzrGRK9A3kwxQwDN rgk8HkF65aFcht7IZNbcrnzl2v4ugOFyq0okl3XRDqS5G9F5yLxUmDkR/BidI/MB IquMHvdLfpBodOVi128GwSPDyPv+dDKfQ0Hmau9b1AYxD1TshRcuVmSRi0dGY7Ka Fbzd16BDhJEzLrLSUUZvkqDdaGm7Jl1v3hqk3Fxx7pFSKn7BkKvp9BgY5teNeDVi QIOEY/CePqnnsfzTGJpRbyWroQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxPr6I4 mxeDsR9foR48gQCrrsUuMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbl05BQOOpaBMtNGUee24Vj8OodiQEAs3vDA1+mQuYwSPGbofME+3WSe1fPmd 9DISP+7R9x0im8yq2Y5Shnagogv62wKzonSwFLJQhUdgOL1uL+tyv1CudRbE1cmG xirzYaRlzXt7/Qa95w2EKXPZUjVPGSenF7EpQPy8ddxhMuYAgUY1Uqb+OR5+YUc3 9tkN+GRORx29wqrtzxxYPutI+cM8u54pOSCApoc2d7/t8wBS8VNgDT+VDW1yPvqn UAc1SyZRUszSWpGAqUu+I/uDfbXERZXp6CT+QNcxP8P0nN9jI1Xkbn+VILnZbvlm LL+7ni9YBN7qmNmFLTFoovLImw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:32 2026 by rpki-client