$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: unky0VqAUSRVvsIdkKRGDzxx3nHFJlCtgrB6n/Bksys= Subject key identifier: 25:6D:68:03:FF:C9:BA:A7:31:CA:D0:B6:E3:0B:06:CF:88:12:8A:85 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 03BE Signing time: Mon 02 Mar 2026 00:53:19 +0000 Manifest this update: Mon 02 Mar 2026 00:53:16 +0000 Manifest next update: Mon 09 Mar 2026 00:53:16 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: Nnm+T/DM6I28VEY4xlPs42Gq+tDkiM3QyaFwF9PBnbQ=) 2: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=) 3: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Mar 2 00:53:16 2026 GMT Not After : Mar 9 00:53:16 2026 GMT Subject: CN=69a4df7e-536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:8f:99:e2:34:dd:f2:2d:99:9b:2a:ca:da: e7:90:3f:97:b2:02:d5:ad:d1:4e:70:79:ba:c9:d1: 21:61:58:8f:10:94:1a:19:03:09:d8:6f:96:a2:51: d9:ca:ce:9e:d3:80:04:1c:fb:f8:d5:8b:50:ee:be: d1:70:0e:f8:d8:ca:3b:b9:0b:15:4e:ba:0e:43:68: 4b:0b:ef:b7:04:19:8d:f4:01:e0:1f:29:e3:46:7f: 97:5a:26:89:50:09:01:67:79:d8:fd:74:9d:77:6e: 50:75:cc:ad:c2:cc:0a:07:09:d8:7f:b2:54:83:e7: 16:40:ea:ac:6b:64:03:45:df:c8:8e:b9:fc:7d:7f: bb:8f:63:88:c1:16:98:64:88:d6:b2:3b:8f:3b:9e: c9:4d:73:36:cb:1f:77:65:91:50:8b:1b:29:51:54: 9e:d7:31:d2:21:18:a9:07:ca:5e:46:48:ea:12:71: e7:46:a6:9e:b5:3c:1d:01:83:25:a0:c2:eb:d4:66: 64:fd:cd:b3:fa:03:20:4a:d6:fb:14:95:8e:bd:33: 77:d4:16:f1:f5:a6:59:56:72:9d:77:ad:b3:8d:93: 32:99:06:8d:54:db:10:06:d6:a3:a7:9b:97:a4:ce: af:12:12:44:22:bd:3e:ab:0c:20:52:ff:2b:66:a9: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6D:68:03:FF:C9:BA:A7:31:CA:D0:B6:E3:0B:06:CF:88:12:8A:85 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:e5:07:b5:df:09:be:9c:f2:9e:b3:d0:9d:af:35:7c:35: ca:6d:78:04:4e:48:db:4e:ef:82:46:d9:fb:21:80:bc:df:21: 56:6b:89:2d:59:9b:7d:89:49:99:7c:19:f1:74:e9:86:31:75: fd:d1:dc:57:08:66:cd:d9:98:c6:dc:2b:e5:cf:41:8f:ad:27: 4e:d2:c3:34:43:04:f4:84:a7:03:bc:89:f6:3d:43:31:59:26: c2:d6:b9:bf:b7:db:95:0d:f8:06:42:75:65:99:c5:2c:eb:6a: c9:be:72:1f:fa:be:f8:72:62:d2:eb:07:e6:0a:26:0f:f2:03: 21:6e:e6:32:14:ef:71:c7:35:3c:05:cf:42:8f:38:3c:68:81: c7:e7:78:92:a5:fb:97:d4:55:1b:f2:65:e2:49:e6:5f:b4:89: 63:c3:a5:b0:04:f2:67:b4:42:a2:24:7f:12:19:07:5b:4e:22: da:9b:10:24:3d:b0:b1:62:82:ee:72:1f:61:8a:11:c1:a3:87: b4:18:87:8a:fb:ac:93:58:1a:be:a4:6d:5a:32:5c:f3:87:c3: c5:ee:1c:17:64:6d:d1:eb:5f:02:e8:02:20:d3:b9:dd:61:8a: eb:66:8d:ca:8b:13:75:c8:dd:75:6d:9a:d2:78:32:11:0d:fa: 78:15:f2:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjYwMzAyMDA1MzE2WhcNMjYwMzA5MDA1MzE2WjAYMRYwFAYD VQQDEw02OWE0ZGY3ZS01MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouKPmeI03fItmZsqytrnkD+XsgLVrdFOcHm6ydEhYViPEJQaGQMJ2G+WolHZ ys6e04AEHPv41YtQ7r7RcA742Mo7uQsVTroOQ2hLC++3BBmN9AHgHynjRn+XWiaJ UAkBZ3nY/XSdd25QdcytwswKBwnYf7JUg+cWQOqsa2QDRd/Ijrn8fX+7j2OIwRaY ZIjWsjuPO57JTXM2yx93ZZFQixspUVSe1zHSIRipB8peRkjqEnHnRqaetTwdAYMl oMLr1GZk/c2z+gMgStb7FJWOvTN31Bbx9aZZVnKdd62zjZMymQaNVNsQBtajp5uX pM6vEhJEIr0+qwwgUv8rZqmcdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVtaAP/ ybqnMcrQtuMLBs+IEoqFMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKFTlB7XfCb6c8p6z0J2vNXw1ym14BE5I207vgkbZ+yGAvN8hVmuJLVmbfYlJ mXwZ8XTphjF1/dHcVwhmzdmYxtwr5c9Bj60nTtLDNEME9ISnA7yJ9j1DMVkmwta5 v7fblQ34BkJ1ZZnFLOtqyb5yH/q++HJi0usH5gomD/IDIW7mMhTvccc1PAXPQo84 PGiBx+d4kqX7l9RVG/Jl4knmX7SJY8OlsATyZ7RCoiR/EhkHW04i2psQJD2wsWKC 7nIfYYoRwaOHtBiHivusk1gavqRtWjJc84fDxe4cF2Rt0etfAugCINO53WGK62aN yosTdcjddW2a0ngyEQ36eBXyLg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:27 2026 by rpki-client