$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: K8hTBGhEICttRviSf+1ecfUUdH4EFoYYNbX5o+G12hk= Subject key identifier: 41:DF:BE:A8:BE:59:72:DF:4A:37:90:59:09:F0:1E:19:B3:29:DF:3B Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0C5D Signing time: Sun 01 Mar 2026 23:48:19 +0000 Manifest this update: Sun 01 Mar 2026 23:48:18 +0000 Manifest next update: Sun 08 Mar 2026 23:48:18 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: RBswtETiHzIktYi23aKvEqnwJ/G7qfmfeieOygckz+0=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: EHjk/F86ucLzY9sYVqsytzQA1yeTqJoqFn2Dz1cc9Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Mar 1 23:48:18 2026 GMT Not After : Mar 8 23:48:18 2026 GMT Subject: CN=69a4d043-535c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:b3:b4:ac:9b:79:b9:cb:9c:04:2c:ad:5a: 35:b9:0f:71:9d:dd:a0:81:c4:31:c3:23:de:e6:1e: 47:6e:fe:17:40:e9:ac:b7:07:5b:47:b4:b5:1d:05: 1f:8f:25:db:ab:ff:b0:46:26:55:73:0b:07:11:21: 05:24:3c:a8:41:72:d5:69:27:0a:68:23:61:5e:7e: 65:9a:3c:dc:a9:0b:30:44:ef:01:9c:46:ef:55:3d: 1b:3f:85:80:e4:e2:b3:9d:23:ea:96:57:8a:20:64: 26:a5:83:ab:44:c3:ce:15:8e:ab:5a:02:3d:52:e3: 45:cf:3c:5f:dc:96:0b:73:84:1f:09:9c:e7:ff:a4: f3:b2:e5:64:10:37:a6:5d:63:b0:cc:41:17:ff:e0: 10:d3:5c:64:06:82:5c:dc:cc:0d:46:99:d0:84:eb: 28:c6:9f:94:44:18:d3:10:0a:18:13:8f:4c:c3:b7: ac:5e:c5:06:25:df:3e:be:97:56:69:ed:08:81:ed: f5:01:83:07:8a:46:a5:be:6b:97:4c:24:6f:28:71: 05:a9:1a:31:77:22:b3:8c:a0:89:c3:35:98:f6:48: 40:7f:91:f8:6b:2b:c9:96:e8:e2:4a:61:d5:98:a2: 13:b6:10:ba:ae:c1:60:d4:dd:d5:d3:d9:b8:a6:3b: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DF:BE:A8:BE:59:72:DF:4A:37:90:59:09:F0:1E:19:B3:29:DF:3B X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:23:2d:55:7a:6f:0c:63:8b:f4:e9:05:69:a3:1f:a5:99:df: ef:5d:cf:e3:31:1e:4c:13:b4:4c:19:1a:75:e9:fe:77:33:cc: af:6f:10:bd:a6:62:2b:00:d8:5a:7b:0f:a2:b3:f7:cb:62:0c: 26:72:fc:fe:f0:7c:07:bf:e5:4c:0c:ad:9f:fb:16:1e:83:75: f7:b9:42:e6:ad:ee:f3:81:c4:8b:a2:a6:d4:0f:43:a2:21:06: 26:ac:15:93:1b:5f:98:29:a6:fd:86:ca:a0:78:db:87:6a:6a: 4d:42:de:68:f1:7d:93:c8:f4:5c:c4:0c:1c:c4:65:00:fe:0f: 56:e9:30:66:0f:17:aa:9f:b5:5d:de:18:8a:74:c4:83:f2:8e: df:c7:76:31:92:41:84:6d:f9:0e:69:e0:57:b2:03:bb:01:36: 2c:e2:91:6a:59:40:4b:98:46:02:59:76:df:c8:3e:bc:56:6f: 78:da:3b:ba:0b:20:39:25:c4:b6:0f:f0:e9:c3:ca:08:08:b4: d2:ef:83:77:f6:8b:38:83:f2:69:e7:ac:45:21:a7:a6:4b:d7: 71:8e:40:93:69:da:ca:b8:56:f9:e8:82:cd:18:f4:74:d9:93: fb:1d:f0:15:47:01:8c:95:1b:85:b5:03:af:c9:ae:40:ee:ea: 05:0a:97:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjYwMzAxMjM0ODE4WhcNMjYwMzA4MjM0ODE4WjAYMRYwFAYD VQQDEw02OWE0ZDA0My01MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRCztKybebnLnAQsrVo1uQ9xnd2ggcQxwyPe5h5Hbv4XQOmstwdbR7S1HQUf jyXbq/+wRiZVcwsHESEFJDyoQXLVaScKaCNhXn5lmjzcqQswRO8BnEbvVT0bP4WA 5OKznSPqlleKIGQmpYOrRMPOFY6rWgI9UuNFzzxf3JYLc4QfCZzn/6TzsuVkEDem XWOwzEEX/+AQ01xkBoJc3MwNRpnQhOsoxp+URBjTEAoYE49Mw7esXsUGJd8+vpdW ae0Ige31AYMHikalvmuXTCRvKHEFqRoxdyKzjKCJwzWY9khAf5H4ayvJlujiSmHV mKITthC6rsFg1N3V09m4pju4qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHfvqi+ WXLfSjeQWQnwHhmzKd87MB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSMtVXpvDGOL9OkFaaMfpZnf713P4zEeTBO0TBkaden+dzPMr28QvaZiKwDY WnsPorP3y2IMJnL8/vB8B7/lTAytn/sWHoN197lC5q3u84HEi6Km1A9DoiEGJqwV kxtfmCmm/YbKoHjbh2pqTULeaPF9k8j0XMQMHMRlAP4PVukwZg8Xqp+1Xd4YinTE g/KO38d2MZJBhG35DmngV7IDuwE2LOKRallAS5hGAll238g+vFZveNo7ugsgOSXE tg/w6cPKCAi00u+Dd/aLOIPyaeesRSGnpkvXcY5Ak2nayrhW+eiCzRj0dNmT+x3w FUcBjJUbhbUDr8muQO7qBQqXKA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:22 2026 by rpki-client