$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: nY3EiFPowRkegdxoagcjINQM0rteYmANfKXjEefNYmQ= Subject key identifier: 74:E0:68:E1:5A:72:81:73:E5:D2:6B:E5:DD:80:8F:29:CC:53:94:A8 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0ECB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 209B Signing time: Mon 02 Mar 2026 00:01:53 +0000 Manifest this update: Mon 02 Mar 2026 00:01:52 +0000 Manifest next update: Mon 09 Mar 2026 00:01:52 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: q4I07JXrE+oX316FvwyjPWeVclTBrJjyjma0u/xo+NY=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: AYQZd3Y0PGKdt/QYc1qUz62ONuF+3jgY9h6xrxYSOX4=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: L/I6A9plhN6USnjgLdGxyH5OWxl92q8t5ZhdH2QZxKo=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: vwjjv+5sqcKmdcJ+2TblUGDFKJ/vFoOagGQtoy9fEng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3787 (0xecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Mar 2 00:01:52 2026 GMT Not After : Mar 9 00:01:52 2026 GMT Subject: CN=69a4d371-99fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:18:10:6c:a1:80:a1:e0:e3:b5:c5:75:ca: 6a:58:2d:e9:43:a5:73:d2:7f:0b:00:b5:d0:a4:9a: 75:6f:87:d1:62:9b:50:6c:14:b8:2f:9c:2d:ed:c7: 96:21:b4:a3:85:8c:b3:44:5f:69:14:38:7f:1b:44: 8c:3e:50:50:41:ef:f2:22:0b:1f:29:02:d3:7c:20: a6:f4:37:4c:a7:03:9f:9a:06:85:4c:c4:2a:55:4c: 68:10:a6:17:f3:f4:44:3b:72:2f:50:e1:68:19:43: bf:f1:ce:6f:fc:a1:aa:47:8e:7d:ee:cb:04:3d:a9: 81:12:5b:f3:05:a9:a7:30:c2:e5:73:88:32:9e:4a: b1:15:d4:35:a3:7e:84:71:c7:60:36:e1:9d:15:0f: 8d:8b:9b:e1:ba:de:1d:f2:b8:70:fa:0c:3f:bb:10: f5:e7:1a:b8:6d:e8:46:a7:a1:2a:7d:32:7f:e4:3f: 3d:f8:9a:7b:eb:67:fd:f8:31:af:18:ad:e2:60:ce: 5c:6a:c6:3a:d4:15:e2:9d:ac:1e:c8:2c:1f:56:e6: 8f:5e:73:e6:6a:c7:41:3c:56:23:85:25:38:7b:54: 8e:17:8f:db:da:21:93:49:03:b1:b1:22:5a:d3:28: 17:b9:ff:d6:1c:e7:37:5f:c9:b8:f4:cc:b5:5e:bd: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E0:68:E1:5A:72:81:73:E5:D2:6B:E5:DD:80:8F:29:CC:53:94:A8 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2e:a4:f6:67:1f:a6:e7:18:cf:8a:27:c4:46:fe:6c:aa:4c: 86:ff:d4:fe:48:65:b1:28:1e:fe:17:b1:0a:96:af:0d:91:47: 1d:66:76:25:04:cd:42:75:a2:b5:20:7a:18:c2:85:67:73:a4: 68:d2:29:97:9e:bf:1e:e6:63:be:ba:2e:cf:69:d2:7d:a3:3e: cf:a0:73:3c:f1:a0:c3:a2:61:6c:3b:57:32:3f:8b:c8:bc:f8: 36:f5:e0:dd:08:05:3d:75:6f:71:33:c4:5f:24:4b:c3:2b:4b: 0a:ca:43:7a:c8:b5:e7:3d:c6:ad:1f:f3:26:6d:2c:d4:92:ae: 1d:ac:85:92:eb:a9:96:b5:30:48:68:1a:91:28:4f:24:6f:b2: 90:5d:0f:a8:c5:04:05:3c:eb:07:38:ee:f2:12:fd:6a:c7:68: 42:6e:18:f9:da:c6:71:eb:a3:50:ef:20:95:c5:40:8a:f8:8e: 9c:e9:f4:79:98:1f:72:18:eb:28:37:e1:d8:56:bf:b6:df:ff: f6:19:a0:77:57:f9:9e:cc:6a:fe:7e:33:4e:74:5d:03:64:bc: 2a:bb:c9:12:60:e3:d4:36:99:d1:c3:e0:3c:2f:67:df:43:2a: cb:52:8f:95:06:9c:c2:1e:46:e9:f9:76:bd:d8:ed:30:af:fa: a0:b5:d8:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjYwMzAyMDAwMTUyWhcNMjYwMzA5MDAwMTUyWjAYMRYwFAYD VQQDEw02OWE0ZDM3MS05OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomIYEGyhgKHg47XFdcpqWC3pQ6Vz0n8LALXQpJp1b4fRYptQbBS4L5wt7ceW IbSjhYyzRF9pFDh/G0SMPlBQQe/yIgsfKQLTfCCm9DdMpwOfmgaFTMQqVUxoEKYX 8/REO3IvUOFoGUO/8c5v/KGqR4597ssEPamBElvzBamnMMLlc4gynkqxFdQ1o36E ccdgNuGdFQ+Ni5vhut4d8rhw+gw/uxD15xq4behGp6EqfTJ/5D89+Jp762f9+DGv GK3iYM5casY61BXinaweyCwfVuaPXnPmasdBPFYjhSU4e1SOF4/b2iGTSQOxsSJa 0ygXuf/WHOc3X8m49My1Xr3ZPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTgaOFa coFz5dJr5d2AjynMU5SoMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAay6k9mcfpucYz4onxEb+bKpMhv/U/khlsSge/hexCpavDZFHHWZ2JQTNQnWi tSB6GMKFZ3OkaNIpl56/HuZjvrouz2nSfaM+z6BzPPGgw6JhbDtXMj+LyLz4NvXg 3QgFPXVvcTPEXyRLwytLCspDesi15z3GrR/zJm0s1JKuHayFkuuplrUwSGgakShP JG+ykF0PqMUEBTzrBzju8hL9asdoQm4Y+drGceujUO8glcVAiviOnOn0eZgfchjr KDfh2Fa/tt//9hmgd1f5nsxq/n4zTnRdA2S8KrvJEmDj1DaZ0cPgPC9n30Mqy1KP lQacwh5G6fl2vdjtMK/6oLXY3Q== -----END CERTIFICATE-----Generated at Mon Mar 2 08:34:51 2026 by rpki-client