$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: h1HluR1YdTfow9HPcRIbKY3QYDDzpnoBYFoXreLkvTc= Subject key identifier: 43:35:37:5C:B6:78:D5:6D:1A:6D:26:4E:58:C3:53:06:F2:35:16:A5 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: E9 Signing time: Sun 01 Mar 2026 07:34:18 +0000 Manifest this update: Sun 01 Mar 2026 07:34:18 +0000 Manifest next update: Sun 08 Mar 2026 07:34:18 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: p6mR4VV077bdmhtIgRzg0H7+kxOeb2RlblHfWWbkG2c=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Mar 1 07:34:18 2026 GMT Not After : Mar 8 07:34:18 2026 GMT Subject: CN=69a3ebfa-9cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:b8:12:0c:d9:b9:3b:69:cf:1f:5e:bc:35: e1:1f:76:6a:c0:31:25:9d:29:cd:c2:2e:06:8e:4a: 78:78:f1:51:29:97:bc:9e:57:1a:06:14:0e:c4:ff: ba:3f:80:7e:3c:66:31:82:5b:7d:5f:fb:86:4a:8c: 72:0d:16:48:53:60:47:62:db:2b:b7:b8:c0:56:bb: d1:61:ad:d2:63:91:fc:34:30:9b:3b:d7:03:47:10: 0f:ba:ce:f9:f3:ad:fb:1f:46:a4:a1:f2:e8:e1:5f: a1:f9:de:1f:15:14:ff:50:45:dd:7e:92:db:01:cb: 71:6f:29:c3:90:70:38:d7:de:e7:04:79:a8:ad:89: 00:40:bc:3e:54:f3:48:13:44:06:fb:0d:a4:ec:dd: 06:6f:36:57:62:db:48:75:fc:e0:bd:f5:b1:60:c4: 44:44:1d:b4:3f:af:e4:84:c0:13:dc:6f:51:e4:09: ea:31:66:c6:04:45:9f:ff:8d:3d:82:b3:53:c0:e3: 04:dc:c6:11:22:2e:75:f0:c9:0e:3a:c6:59:29:f9: 55:3c:a1:5e:8d:22:67:9d:31:11:95:df:5e:f2:80: f4:48:03:f9:2d:d3:23:c4:2c:09:b1:4b:d5:ce:06: de:a8:cc:26:82:ce:09:52:d7:0b:4a:87:f0:ef:14: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:35:37:5C:B6:78:D5:6D:1A:6D:26:4E:58:C3:53:06:F2:35:16:A5 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6d:0d:75:d1:38:39:f3:3d:5f:5d:fa:4a:3d:1e:84:9b:4d: 80:f8:52:4e:9f:af:d5:ee:19:e0:d0:81:d7:7c:89:f6:32:fa: aa:81:09:1c:2b:d3:05:dc:b2:00:f7:47:53:77:d8:f0:19:a0: 73:d0:53:90:c7:05:a2:7f:43:f5:a7:0d:dd:f8:ec:d8:96:1e: 1a:ab:3c:ad:f5:20:ea:ca:a1:67:8d:dc:70:c0:a8:37:51:2e: 7a:a8:5b:69:a6:83:d4:4a:29:5e:53:7c:8f:af:6a:78:3a:76: d1:1a:d5:5a:2b:ed:32:bb:89:97:30:a7:95:53:ed:b1:d5:36: 53:76:c7:7e:95:69:67:37:3e:f7:14:fc:a7:69:a5:1b:0d:01: 6b:c8:c2:88:3d:5d:5f:4e:44:fd:87:0c:c5:89:cc:ec:39:48: 7d:37:d9:1e:9f:7a:63:72:b8:55:24:59:75:b3:81:f0:d8:2c: 67:05:88:61:6e:19:75:8e:af:a3:c8:d9:7a:1e:c2:8c:79:e2: 4c:0d:c1:86:4f:f4:e9:59:fc:d1:18:ae:b0:06:be:82:e9:0f: 1f:19:38:a3:43:d9:3f:f4:ab:82:6e:94:e8:c8:f9:0b:c2:03: a1:20:75:46:2c:50:e4:4a:10:e7:08:5d:0b:62:65:7a:be:11: 27:13:20:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYwMzAxMDczNDE4WhcNMjYwMzA4MDczNDE4WjAYMRYwFAYD VQQDEw02OWEzZWJmYS05Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U24EgzZuTtpzx9evDXhH3ZqwDElnSnNwi4Gjkp4ePFRKZe8nlcaBhQOxP+6 P4B+PGYxglt9X/uGSoxyDRZIU2BHYtsrt7jAVrvRYa3SY5H8NDCbO9cDRxAPus75 8637H0akofLo4V+h+d4fFRT/UEXdfpLbActxbynDkHA4197nBHmorYkAQLw+VPNI E0QG+w2k7N0GbzZXYttIdfzgvfWxYMRERB20P6/khMAT3G9R5AnqMWbGBEWf/409 grNTwOME3MYRIi518MkOOsZZKflVPKFejSJnnTERld9e8oD0SAP5LdMjxCwJsUvV zgbeqMwmgs4JUtcLSofw7xSDyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEM1N1y2 eNVtGm0mTljDUwbyNRalMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATG0NddE4OfM9X136Sj0ehJtNgPhSTp+v1e4Z4NCB13yJ9jL6qoEJHCvTBdyy APdHU3fY8Bmgc9BTkMcFon9D9acN3fjs2JYeGqs8rfUg6sqhZ43ccMCoN1Eueqhb aaaD1EopXlN8j69qeDp20RrVWivtMruJlzCnlVPtsdU2U3bHfpVpZzc+9xT8p2ml Gw0Ba8jCiD1dX05E/YcMxYnM7DlIfTfZHp96Y3K4VSRZdbOB8NgsZwWIYW4ZdY6v o8jZeh7CjHniTA3Bhk/06Vn80RiusAa+gukPHxk4o0PZP/Srgm6U6Mj5C8IDoSB1 RixQ5EoQ5whdC2Jler4RJxMgdQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:11 2026 by rpki-client