$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: TLarZgIHpAoRofg5o6VKWVVPgp79zLoNCLfWTJ+k9Pw= Subject key identifier: 41:F5:B7:34:A8:E8:23:91:C7:D4:C8:D2:A4:C0:44:EB:54:F7:A1:8D Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 01E3 Signing time: Sun 01 Mar 2026 04:15:18 +0000 Manifest this update: Sun 01 Mar 2026 04:15:17 +0000 Manifest next update: Sun 08 Mar 2026 04:15:17 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: bhPcGIM4XPy/TsAme4oauItBloiLG7/WxGziBQUrjv8=) 2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: N6Bn0tjkAYOIirhCnX+L9qAa4FcrjkrvnPohqveujZw=) 3: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: TcFb5btGGuGcCTENXu84bKs3B+lnqciAGdu0W4Z7mP0=) 4: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: V8EYXGGM5ehfMXNVHQoJfhAKwYo57AeE/3ynyZdkMrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Mar 1 04:15:17 2026 GMT Not After : Mar 8 04:15:17 2026 GMT Subject: CN=69a3bd56-db36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:a0:e9:f1:3c:da:46:cb:05:d5:cd:47:35: a7:4d:18:ed:1c:ff:39:0c:a5:33:87:94:5e:ca:2a: 7d:af:43:74:56:02:6c:4d:8e:38:9b:f3:e0:85:8b: 58:8c:4a:1e:98:f9:b5:96:8a:7c:cb:9e:ab:3b:29: f7:15:e9:5a:f9:ea:ad:92:a2:82:ee:dc:9f:48:a4: 9b:7b:b2:7f:1a:17:3d:c7:0c:96:5e:2b:58:b9:8a: 43:76:45:9c:b6:64:b8:4d:c6:e0:f2:ac:c6:7d:4c: 48:ac:de:d0:6b:f1:05:e4:0c:6f:2b:a0:44:00:0a: 81:5a:04:3c:9c:0f:8f:b2:15:c6:dd:fc:f2:f7:2c: bf:ca:42:17:fc:51:8f:11:44:f9:f1:13:65:b1:94: 7e:b0:9b:c2:eb:c2:de:65:ec:b6:d2:30:39:a5:3a: d6:ef:34:7d:19:54:be:d3:db:a1:f4:55:04:f0:77: 55:b3:7e:a6:ca:95:9c:0d:8c:68:c7:c4:5f:ef:ca: 9a:29:d6:ba:66:e4:89:22:76:e9:ce:a4:e5:9c:6b: 61:e6:67:eb:4c:62:4e:2d:ff:5e:b0:a8:44:71:40: 63:0c:5d:91:0c:29:a7:24:6a:6b:ae:25:e8:97:76: 50:6b:26:bd:96:a0:be:f2:2c:e9:13:c4:cf:ab:13: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:B7:34:A8:E8:23:91:C7:D4:C8:D2:A4:C0:44:EB:54:F7:A1:8D X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d8:a3:3d:fa:40:12:fc:d0:45:d8:c0:fe:ac:83:f8:63:b5: a7:3e:12:48:7d:a5:ce:86:e9:b7:b8:71:ef:02:c7:54:65:52: a0:cb:75:0f:57:1b:be:df:b5:64:df:4d:23:08:7b:7a:dd:66: 76:20:29:ee:14:b9:53:a3:be:aa:61:2d:8f:f5:60:c0:ae:68: 0a:42:d6:cf:ee:d1:74:eb:7c:c8:59:cc:9d:22:d9:7a:c6:a4: 89:a1:fa:65:aa:c2:4b:7b:a0:58:c0:86:89:e8:8a:94:28:7f: ec:f9:39:e1:9e:56:84:24:ce:ac:76:ac:15:4e:ba:6a:f6:4a: e8:13:20:07:f7:5d:86:e9:e4:f3:5b:3a:00:53:86:d8:b8:b3: dd:33:c6:be:4f:a3:03:89:ea:04:6b:2e:9c:da:3a:82:d7:ff: e9:3f:8d:c8:d0:98:10:9b:b3:98:62:b4:79:4e:f3:cc:9d:28: 38:87:e9:ac:87:7e:80:50:73:99:9d:dd:24:7a:b1:44:c5:cf: 4c:9e:fa:93:ec:57:92:17:66:9d:db:8a:eb:27:f7:92:51:80: fc:32:9b:55:8f:9c:a0:9c:5b:45:4d:3d:51:55:66:75:0d:e6: 2c:8d:ee:4b:5b:c2:89:7a:a8:04:6d:e3:8a:3e:f2:cb:8d:0b: 43:65:cf:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjYwMzAxMDQxNTE3WhcNMjYwMzA4MDQxNTE3WjAYMRYwFAYD VQQDDA02OWEzYmQ1Ni1kYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFyg6fE82kbLBdXNRzWnTRjtHP85DKUzh5Reyip9r0N0VgJsTY44m/PghYtY jEoemPm1lop8y56rOyn3Fela+eqtkqKC7tyfSKSbe7J/Ghc9xwyWXitYuYpDdkWc tmS4Tcbg8qzGfUxIrN7Qa/EF5AxvK6BEAAqBWgQ8nA+PshXG3fzy9yy/ykIX/FGP EUT58RNlsZR+sJvC68LeZey20jA5pTrW7zR9GVS+09uh9FUE8HdVs36mypWcDYxo x8Rf78qaKda6ZuSJInbpzqTlnGth5mfrTGJOLf9esKhEcUBjDF2RDCmnJGprriXo l3ZQaya9lqC+8izpE8TPqxPAJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEH1tzSo 6CORx9TI0qTAROtU96GNMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb9ijPfpAEvzQRdjA/qyD+GO1pz4SSH2lzobpt7hx7wLHVGVSoMt1D1cbvt+1 ZN9NIwh7et1mdiAp7hS5U6O+qmEtj/VgwK5oCkLWz+7RdOt8yFnMnSLZesakiaH6 ZarCS3ugWMCGieiKlCh/7Pk54Z5WhCTOrHasFU66avZK6BMgB/ddhunk81s6AFOG 2Liz3TPGvk+jA4nqBGsunNo6gtf/6T+NyNCYEJuzmGK0eU7zzJ0oOIfprId+gFBz mZ3dJHqxRMXPTJ76k+xXkhdmnduK6yf3klGA/DKbVY+coJxbRU09UVVmdQ3mLI3u S1vCiXqoBG3jij7yy40LQ2XPMw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:35:23 2026 by rpki-client