$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: QnByd92iinjjEzMiSqosIbEnECqYizm7XfuTURcqfy4= Subject key identifier: EB:3C:95:86:18:49:0F:0F:FD:93:58:0D:52:20:41:BB:A4:87:22:F1 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 07E9 Signing time: Mon 02 Mar 2026 02:17:11 +0000 Manifest this update: Mon 02 Mar 2026 02:17:10 +0000 Manifest next update: Mon 09 Mar 2026 02:17:10 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: INMcYVMlUjI3VjsdZNkTMl8vMsZe9wES5zu3PvMOdak=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: //kyIlIYFX3+08S3h9a7dEmLAcY3BX1jLjRJO0SJN6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Mar 2 02:17:10 2026 GMT Not After : Mar 9 02:17:10 2026 GMT Subject: CN=69a4f327-5e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:46:24:59:73:69:f0:0e:3a:d6:35:0e:3b: 25:a3:71:c6:a5:79:d6:96:c3:51:0b:05:fd:ae:bb: c4:61:19:fa:4a:e4:ee:bc:17:a6:33:98:fd:e0:ef: 65:20:ef:9d:1a:d9:7d:6d:07:87:76:6f:f3:a6:57: 14:71:4c:fa:57:9f:71:05:eb:e3:a6:9d:51:d2:75: 70:22:2a:3b:ab:cc:61:d2:81:04:21:aa:3c:b3:48: d8:9e:b3:d3:92:86:8a:11:6c:a5:c9:75:a2:4e:64: 74:b6:8a:1a:a5:bf:41:16:da:f8:96:91:c6:b3:fe: 23:4a:49:b2:b1:8b:0b:5c:d4:36:e7:26:43:67:b6: be:ba:18:4a:d4:9f:25:80:16:4f:c0:27:7f:fd:9d: 7c:ab:60:8b:dc:ec:59:99:e6:ff:f7:7b:ed:fd:a7: 7e:2f:b5:2d:86:b4:26:a7:f7:31:6b:91:1a:90:cd: f0:34:a4:12:3e:9e:6c:9d:64:6b:22:06:0c:0e:2a: 0d:9a:e5:11:06:76:fe:9e:e6:23:f6:2d:e5:3d:ca: 0d:2c:f0:50:36:f0:10:7d:2e:bd:b6:4a:47:55:dc: bf:34:79:8f:3f:7d:a1:08:d5:01:0e:60:ed:85:ba: 35:34:54:66:b4:9c:06:5d:5e:85:47:ab:7a:80:0b: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:95:86:18:49:0F:0F:FD:93:58:0D:52:20:41:BB:A4:87:22:F1 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c9:ef:d3:76:f1:be:65:f1:ed:fb:0b:6a:fa:b3:5d:4a:9a: c5:84:28:a4:63:47:7d:d3:70:d0:d8:7c:fa:4a:45:ab:9d:51: aa:b4:25:06:83:b2:42:a7:3c:56:e3:b4:89:10:fc:2d:5b:f9: e2:d0:a8:b2:a9:0c:02:58:1f:3c:fb:88:e1:19:af:c6:c2:dc: 30:cf:56:28:0e:81:6b:59:ae:98:7e:75:06:30:5c:42:bf:25: af:9d:a2:ee:1e:d9:53:48:3f:68:84:7a:1a:29:0f:50:97:d0: 73:39:bd:67:99:58:f4:cf:82:8a:97:2e:a7:c9:18:aa:dc:4f: 93:ab:0d:2e:e8:43:54:c5:37:ac:d7:e1:a2:52:a3:c1:4d:76: 56:ee:30:64:21:bf:1a:40:3c:9d:2a:26:46:ba:e7:7f:b9:c0: b9:77:dd:14:cd:bb:dc:fd:b1:30:24:3d:9e:72:bb:6e:1d:80: 02:7e:cc:be:fb:05:ae:d2:bb:7e:91:6a:ef:c4:be:99:5f:cc: e4:79:72:16:6a:45:00:c4:b7:7e:34:5f:96:30:dc:7a:f7:d7: 81:0a:e4:f9:d1:2b:bc:26:2a:b5:3d:1f:06:14:de:99:3a:b5: e8:fd:e9:bb:33:10:60:3f:22:cd:9f:6a:c0:e9:88:c1:0e:5c: f6:51:b1:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjYwMzAyMDIxNzEwWhcNMjYwMzA5MDIxNzEwWjAYMRYwFAYD VQQDEw02OWE0ZjMyNy01ZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvVGJFlzafAOOtY1Djslo3HGpXnWlsNRCwX9rrvEYRn6SuTuvBemM5j94O9l IO+dGtl9bQeHdm/zplcUcUz6V59xBevjpp1R0nVwIio7q8xh0oEEIao8s0jYnrPT koaKEWylyXWiTmR0tooapb9BFtr4lpHGs/4jSkmysYsLXNQ25yZDZ7a+uhhK1J8l gBZPwCd//Z18q2CL3OxZmeb/93vt/ad+L7UthrQmp/cxa5EakM3wNKQSPp5snWRr IgYMDioNmuURBnb+nuYj9i3lPcoNLPBQNvAQfS69tkpHVdy/NHmPP32hCNUBDmDt hbo1NFRmtJwGXV6FR6t6gAtqWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOs8lYYY SQ8P/ZNYDVIgQbukhyLxMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARcnv03bxvmXx7fsLavqzXUqaxYQopGNHfdNw0Nh8+kpFq51RqrQlBoOyQqc8 VuO0iRD8LVv54tCosqkMAlgfPPuI4RmvxsLcMM9WKA6Ba1mumH51BjBcQr8lr52i 7h7ZU0g/aIR6GikPUJfQczm9Z5lY9M+Cipcup8kYqtxPk6sNLuhDVMU3rNfholKj wU12Vu4wZCG/GkA8nSomRrrnf7nAuXfdFM273P2xMCQ9nnK7bh2AAn7MvvsFrtK7 fpFq78S+mV/M5HlyFmpFAMS3fjRfljDcevfXgQrk+dErvCYqtT0fBhTemTq16P3p uzMQYD8izZ9qwOmIwQ5c9lGx3w== -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:20 2026 by rpki-client