$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json) Hash identifier: xNsPW2Isbf8f9SO3yr+HrkwkcXC6yUt4/A8PKRp2JLI= Subject key identifier: 6F:FF:BA:CA:62:A4:0C:73:75:92:19:12:59:07:3B:58:20:9D:F9:E6 Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft Manifest number: 011A Signing time: Mon 02 Mar 2026 13:51:54 +0000 Manifest this update: Mon 02 Mar 2026 13:51:53 +0000 Manifest next update: Mon 09 Mar 2026 13:51:53 +0000 Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: GDrgMw0qTvAso2DUYYx0IgkndChcgG9PXeXb0mAQTnY=) 2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Validity Not Before: Mar 2 13:51:53 2026 GMT Not After : Mar 9 13:51:53 2026 GMT Subject: CN=69a595fa-e9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:cb:5d:bc:97:0e:45:3b:b9:37:1a:97:f5: 73:c5:92:fe:64:e4:a5:b3:58:75:96:97:45:1a:eb: a1:a5:67:49:aa:9b:13:e6:7e:7e:47:11:c0:14:24: 91:48:06:c6:59:eb:d1:63:6a:81:05:3d:24:9f:7c: 37:de:97:4c:73:55:4f:85:ec:d2:59:4c:1a:a9:d7: be:0a:8b:51:99:a8:b9:b0:12:52:56:24:b7:c0:06: ed:88:a9:af:5b:b8:ef:f1:52:59:1b:f1:27:8f:ba: 88:f3:d8:79:44:b8:8a:d5:e9:5a:66:de:3b:0b:6e: a7:e4:47:e0:84:0c:b8:94:37:10:bd:52:8d:c7:97: b4:3f:d5:2a:c3:e7:8f:94:a6:e1:41:28:2f:b8:6f: 16:d1:24:cb:7e:49:e4:5d:0c:5e:84:10:a4:10:7f: 5f:c3:de:d9:38:97:da:59:39:53:0c:70:83:e6:3e: 9a:cc:29:fc:50:a0:01:3f:8d:ea:59:20:9f:5c:66: da:50:fe:0a:c4:58:8f:91:34:ea:08:03:43:ee:92: 8a:33:a1:7f:8d:e0:dc:6e:f9:d8:31:80:e7:ca:59: 69:66:f2:66:9b:3d:fb:ef:e0:c3:dc:71:50:4a:c7: eb:c1:69:42:ee:a6:36:ef:7c:d1:82:e5:fe:f4:f4: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FF:BA:CA:62:A4:0C:73:75:92:19:12:59:07:3B:58:20:9D:F9:E6 X509v3 Authority Key Identifier: keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:bd:e6:5b:95:82:82:b9:12:60:6c:24:78:ae:b8:4b:da:09: 33:48:24:3a:12:70:e1:6e:ee:42:e4:04:2a:61:7d:3f:e8:41: 55:3d:b6:1c:85:53:19:eb:db:2d:11:da:14:f8:b8:b9:93:1d: 88:82:f4:17:65:dd:8f:73:bf:4b:f4:4f:f1:19:6d:bc:96:b5: cb:df:1e:d9:a6:a4:26:40:1b:75:52:d1:0a:64:03:bf:7c:b9: 6c:47:5c:ca:88:dd:5e:7e:7c:d8:6f:0a:4c:28:d4:8b:6f:fe: 5c:0a:4f:b9:f7:a8:cc:0b:68:36:73:9d:3b:6c:bd:f0:fe:c1: ce:3c:7c:3e:b5:1d:16:eb:76:06:a6:d4:3f:49:60:f7:f3:ca: 11:99:a2:69:c4:15:f4:04:80:77:2b:82:27:84:d0:bf:27:6f: a7:47:e2:4d:8c:97:73:0c:8c:e8:9d:40:83:aa:fb:35:14:00: 18:70:b5:d0:4c:ec:68:e4:db:df:cf:0c:0c:47:a5:3c:42:eb: ee:8f:f3:80:d9:96:64:6d:10:27:74:b5:6c:11:5a:61:e4:c6: d5:f5:91:67:4a:e2:86:a7:ff:6f:33:3e:6a:60:3f:0a:f2:a6: 88:d4:54:f0:cf:71:34:72:ad:c9:10:5b:cf:1b:59:6e:a2:9f: a0:0b:ce:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDQkExMTAvBgNVBAUTKDhEOEE4MEVDNzIwQUU3RUQ1M0ZEMjEwM0U4RTY5Qzg1 NTVBRDBGODYwHhcNMjYwMzAyMTM1MTUzWhcNMjYwMzA5MTM1MTUzWjAYMRYwFAYD VQQDEw02OWE1OTVmYS1lOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjjLXbyXDkU7uTcal/VzxZL+ZOSls1h1lpdFGuuhpWdJqpsT5n5+RxHAFCSR SAbGWevRY2qBBT0kn3w33pdMc1VPhezSWUwaqde+CotRmai5sBJSViS3wAbtiKmv W7jv8VJZG/Enj7qI89h5RLiK1elaZt47C26n5EfghAy4lDcQvVKNx5e0P9Uqw+eP lKbhQSgvuG8W0STLfknkXQxehBCkEH9fw97ZOJfaWTlTDHCD5j6azCn8UKABP43q WSCfXGbaUP4KxFiPkTTqCAND7pKKM6F/jeDcbvnYMYDnyllpZvJmmz377+DD3HFQ SsfrwWlC7qY273zRguX+9PRpFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG//uspi pAxzdZIZElkHO1ggnfnmMB8GA1UdIwQYMBaAFI2KgOxyCuftU/0hA+jmnIVVrQ+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUNCQS81ODNFMkI5QTZC NjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUtMVRfU0VENk9hY2hWV3RE NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUNCQS81ODNFMkI5QTZCNjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUt MVRfU0VENk9hY2hWV3RENFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg73mW5WCgrkSYGwkeK64S9oJM0gkOhJw4W7uQuQEKmF9P+hBVT22HIVTGevb LRHaFPi4uZMdiIL0F2Xdj3O/S/RP8RltvJa1y98e2aakJkAbdVLRCmQDv3y5bEdc yojdXn582G8KTCjUi2/+XApPufeozAtoNnOdO2y98P7Bzjx8PrUdFut2BqbUP0lg 9/PKEZmiacQV9ASAdyuCJ4TQvydvp0fiTYyXcwyM6J1Ag6r7NRQAGHC10EzsaOTb 388MDEelPELr7o/zgNmWZG0QJ3S1bBFaYeTG1fWRZ0rihqf/bzM+amA/CvKmiNRU 8M9xNHKtyRBbzxtZbqKfoAvOng== -----END CERTIFICATE-----Generated at Mon Mar 2 21:57:46 2026 by rpki-client