$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft File: YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json) Hash identifier: bit+kA42TybLt6vlCLQ/jha77MgHG43adBOEYWlPXeE= Subject key identifier: 32:04:20:71:3A:34:07:67:53:11:23:8E:B7:D9:0E:E5:A2:2C:F0:66 Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47 Certificate issuer: /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft Manifest number: 23 Signing time: Sun 01 Mar 2026 10:17:43 +0000 Manifest this update: Sun 01 Mar 2026 10:17:43 +0000 Manifest next update: Sun 08 Mar 2026 10:17:43 +0000 Files and hashes: 1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: 4d3HQUEOGWkFB6Ee5FNJxOHGJeW79G1V/1hmk1Qz6Tc=) 2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: yobUiX8bmVSBMajQKQhWppuaywNIixpGXvwM94nK4cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447 Validity Not Before: Mar 1 10:17:43 2026 GMT Not After : Mar 8 10:17:43 2026 GMT Subject: CN=69a41247-3a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a5:94:e6:50:5c:6b:d5:80:6e:66:28:7c:1c: f3:a0:31:39:8b:f6:b9:36:89:ed:05:89:7c:3e:48: 88:22:ed:ff:02:68:34:39:75:81:2e:16:b4:fc:af: e9:b3:9c:33:45:9e:f0:ab:c6:69:1a:b9:0e:22:bf: 9e:7e:de:9a:f3:bd:72:e7:08:a4:cb:5c:cf:af:0f: 63:bd:d5:80:00:e4:6d:7a:fe:9c:7f:16:2c:54:83: c7:b7:7c:11:61:96:e9:71:0b:28:c2:7a:1a:49:a2: 69:1d:5a:4c:98:9b:f1:7b:33:44:c1:06:f0:16:7d: 94:e0:30:1b:5a:ce:38:ec:4d:b3:53:cb:9e:99:f6: f3:68:07:93:af:a9:68:5f:2c:37:16:c1:c4:85:6f: 7a:65:52:d4:c2:4f:8f:70:dd:ce:40:4a:c0:4f:22: f3:4b:ea:1f:2f:63:dd:7a:e0:a0:e7:04:3d:4f:a1: c8:84:69:5c:28:5b:61:82:26:ce:e8:db:25:bd:f3: 8c:bd:18:2e:ba:9a:15:14:1e:41:c0:15:4b:7a:7c: b1:47:e7:b2:9f:7b:e6:fe:56:35:3a:47:fe:f6:d1: 38:9c:5f:83:35:68:ce:27:bd:c5:f0:0c:99:83:09: 64:df:97:0b:6b:58:77:84:2a:65:60:cf:77:60:7b: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:04:20:71:3A:34:07:67:53:11:23:8E:B7:D9:0E:E5:A2:2C:F0:66 X509v3 Authority Key Identifier: keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:41:f5:7e:8c:5c:cf:76:95:2c:ad:5b:c9:ed:71:56:e3:91: e0:5f:ee:b2:73:bc:c5:ae:55:5a:eb:72:7e:e0:41:81:7d:1a: d0:2c:86:cc:56:9d:c1:04:a3:08:6a:79:9f:41:59:b2:3f:23: a7:77:21:c0:4c:28:cd:84:b8:4d:26:9a:ce:29:cf:a1:b5:c1: df:ba:65:77:09:94:2d:38:d8:4f:8c:9f:bd:ef:b8:86:c6:43: 19:8a:23:e5:09:28:43:5b:e4:68:52:3a:03:f1:43:6e:9f:a4: 13:af:e0:99:6c:f5:43:05:93:ea:af:ac:b7:90:53:05:90:5e: 72:2d:d0:d6:78:6a:10:51:87:21:5c:46:f6:df:24:79:04:a4: c5:51:a9:5b:52:54:c2:d7:6b:fe:7d:12:59:f0:12:36:c7:76: b3:1b:05:08:fc:a7:41:bd:f9:22:49:22:7d:91:29:31:bc:09: 7a:0a:78:27:59:b6:b8:c9:e3:a5:05:ad:6b:8f:be:b1:da:9f: db:c0:33:a8:d8:b9:f0:f0:d5:86:6d:45:1d:e0:57:13:db:8e: 5a:5d:50:0d:98:95:82:92:98:f0:21:05:19:9b:d7:c5:1c:3c: 35:21:b3:13:b3:e1:75:31:d9:61:69:77:ba:ca:7f:1b:96:7b: e2:df:9c:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjUwOTExMC8GA1UEBRMoNjJBMjNGMzNFOTBCNzIwNjA1NTM3MTk1MTREMEM1QUJD MkUyMzQ0NzAeFw0yNjAzMDExMDE3NDNaFw0yNjAzMDgxMDE3NDNaMBgxFjAUBgNV BAMTDTY5YTQxMjQ3LTNhM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDpZTmUFxr1YBuZih8HPOgMTmL9rk2ie0FiXw+SIgi7f8CaDQ5dYEuFrT8r+mz nDNFnvCrxmkauQ4iv55+3przvXLnCKTLXM+vD2O91YAA5G16/px/FixUg8e3fBFh lulxCyjCehpJomkdWkyYm/F7M0TBBvAWfZTgMBtazjjsTbNTy56Z9vNoB5OvqWhf LDcWwcSFb3plUtTCT49w3c5ASsBPIvNL6h8vY9164KDnBD1PociEaVwoW2GCJs7o 2yW984y9GC66mhUUHkHAFUt6fLFH57Kfe+b+VjU6R/720TicX4M1aM4nvcXwDJmD CWTflwtrWHeEKmVgz3dge5QJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMgQgcTo0 B2dTESOOt9kO5aIs8GYwHwYDVR0jBBgwFoAUYqI/M+kLcgYFU3GVFNDFq8LiNEcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNTA5LzlCMUNFMjEyRTQ4 MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtMY2dZRlUzR1ZGTkRGcThMaU5F Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWXFJX00ta0xjZ1lGVTNHVkZOREZxOExpTkVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy NTA5LzlCMUNFMjEyRTQ4MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtMY2dZ RlUzR1ZGTkRGcThMaU5FYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1QfV+jFzPdpUsrVvJ7XFW45HgX+6yc7zFrlVa63J+4EGBfRrQLIbMVp3BBKMI anmfQVmyPyOndyHATCjNhLhNJprOKc+htcHfumV3CZQtONhPjJ+977iGxkMZiiPl CShDW+RoUjoD8UNun6QTr+CZbPVDBZPqr6y3kFMFkF5yLdDWeGoQUYchXEb23yR5 BKTFUalbUlTC12v+fRJZ8BI2x3azGwUI/KdBvfkiSSJ9kSkxvAl6CngnWba4yeOl Ba1rj76x2p/bwDOo2Lnw8NWGbUUd4FcT245aXVANmJWCkpjwIQUZm9fFHDw1IbMT s+F1MdlhaXe6yn8blnvi35xw -----END CERTIFICATE-----Generated at Sun Mar 1 23:51:25 2026 by rpki-client