$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: GBhV/LV0KbWP1stLel5cOREvSrt6wY1JXYVtJcx/1i0= Subject key identifier: 66:AC:8E:6B:64:2A:41:E5:90:89:ED:6D:BD:EC:C0:CC:4B:5B:6B:8F Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31E8 Signing time: Sat 28 Feb 2026 15:26:49 +0000 Manifest this update: Sat 28 Feb 2026 15:26:48 +0000 Manifest next update: Sat 07 Mar 2026 15:26:48 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: faZFLSZiuafpwJg3GqGJwMtjDZxSpyKIq0d63gTOvYo=) 2: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) 3: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: RCOZO/R0vt1DZeOKkzSP+ObtytYoLYrcRoyxwvbTRVE=) 4: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: lcVmEQAeS5XlQ1MtPWDksitABUyMj1pg2WbngUTI/uQ=) 5: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 6: 4B019258F78411F08F54609B4C6F56BC.roa (hash: rHSFrQgJ+OhFOvwIS86c51WqtoELZFmgA6GQCBeb2l4=) 7: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12803 (0x3203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Feb 28 15:26:48 2026 GMT Not After : Mar 7 15:26:48 2026 GMT Subject: CN=69a30939-0441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:5a:7f:d8:57:ea:3e:72:90:1c:29:a8:86: 9c:77:fe:8a:aa:de:57:36:8b:85:46:4a:02:30:be: 9b:15:14:13:5f:7f:f0:25:7f:6e:69:e5:c6:69:3f: 87:21:ef:da:56:82:77:85:67:e5:6c:e7:99:3d:c0: cf:9a:98:ca:10:34:8e:d2:1e:97:cd:9b:02:99:3b: e5:5e:a6:45:f6:02:ca:f3:4e:48:76:be:17:8b:39: 6b:d3:8c:cf:81:8c:77:74:37:e0:4b:5c:9e:0d:e2: 56:31:06:81:bf:10:46:e9:e3:51:1c:f4:dd:f0:c9: 2d:1b:28:87:e1:86:0c:8e:0f:7e:6c:c2:49:53:cb: 05:06:89:37:51:48:38:d6:64:5d:f2:74:92:b6:66: 30:93:1f:32:16:29:ec:22:f5:ad:b1:b2:10:57:ac: 67:e0:0a:60:a9:d5:d3:3b:92:b1:bd:68:94:8c:5e: 57:7f:36:b2:95:cc:7f:71:7f:12:9c:9d:ce:08:08: f0:d6:90:cf:76:14:e3:bc:db:a4:09:b5:48:b0:39: ca:8c:dd:80:a4:eb:b2:f8:cb:72:09:1a:50:28:08: 36:74:8e:9a:3a:72:df:60:ef:d6:0a:f5:c5:6b:83: 80:a4:c7:62:63:1c:fd:16:0f:b9:44:87:a1:94:07: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AC:8E:6B:64:2A:41:E5:90:89:ED:6D:BD:EC:C0:CC:4B:5B:6B:8F X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d4:86:24:1f:e9:8e:3e:2b:e2:66:9c:52:bf:58:f4:10:69: cd:36:61:e2:07:db:1b:0a:b7:55:b1:c9:21:0e:aa:0c:a3:32: 36:07:22:80:d0:23:7a:3f:1a:3c:94:7a:d6:1c:ff:4b:a8:d8: 03:73:88:e0:51:81:43:66:d2:2b:17:c8:49:a9:45:87:f0:43: 04:75:3a:c8:fb:58:13:5b:bd:57:d9:ff:6e:78:5d:85:47:cd: fd:e3:d0:59:c8:64:3d:1a:97:36:f4:01:86:68:ce:04:99:b1: e7:6a:99:57:18:41:62:5e:3a:d9:81:ba:82:c6:ca:f8:4c:de: 78:eb:6d:b3:93:85:70:df:f5:cb:4d:e7:55:dc:61:cc:22:59: 9a:6f:75:fe:b6:1b:78:71:8f:f1:c3:20:69:f6:02:19:17:52: 9a:e6:67:e0:0f:22:95:7c:ad:a0:ba:c5:dd:13:f3:9f:fa:22: 8c:8f:9a:16:fb:73:c3:05:30:2d:b3:43:27:cf:36:ed:aa:79: 3d:af:ab:36:2d:ec:57:f6:93:00:59:fb:19:eb:c4:40:4c:0a: 40:bb:b8:13:c8:5b:3d:e1:fe:0e:b5:70:81:34:03:c6:bb:b2: 8e:66:1e:d2:a3:6f:2e:3a:e1:b8:70:e2:28:83:28:d8:ca:72: c9:42:6c:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwMjI4MTUyNjQ4WhcNMjYwMzA3MTUyNjQ4WjAYMRYwFAYD VQQDDA02OWEzMDkzOS0wNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLdaf9hX6j5ykBwpqIacd/6Kqt5XNouFRkoCML6bFRQTX3/wJX9uaeXGaT+H Ie/aVoJ3hWflbOeZPcDPmpjKEDSO0h6XzZsCmTvlXqZF9gLK805Idr4Xizlr04zP gYx3dDfgS1yeDeJWMQaBvxBG6eNRHPTd8MktGyiH4YYMjg9+bMJJU8sFBok3UUg4 1mRd8nSStmYwkx8yFinsIvWtsbIQV6xn4ApgqdXTO5KxvWiUjF5Xfzaylcx/cX8S nJ3OCAjw1pDPdhTjvNukCbVIsDnKjN2ApOuy+MtyCRpQKAg2dI6aOnLfYO/WCvXF a4OApMdiYxz9Fg+5RIehlAesDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGasjmtk KkHlkIntbb3swMxLW2uPMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAntSGJB/pjj4r4macUr9Y9BBpzTZh4gfbGwq3VbHJIQ6qDKMyNgcigNAjej8a PJR61hz/S6jYA3OI4FGBQ2bSKxfISalFh/BDBHU6yPtYE1u9V9n/bnhdhUfN/ePQ WchkPRqXNvQBhmjOBJmx52qZVxhBYl462YG6gsbK+EzeeOtts5OFcN/1y03nVdxh zCJZmm91/rYbeHGP8cMgafYCGRdSmuZn4A8ilXytoLrF3RPzn/oijI+aFvtzwwUw LbNDJ8827ap5Pa+rNi3sV/aTAFn7GevEQEwKQLu4E8hbPeH+DrVwgTQDxruyjmYe 0qNvLjrhuHDiKIMo2MpyyUJs9g== -----END CERTIFICATE-----Generated at Sun Mar 1 22:48:47 2026 by rpki-client