$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: o1BPTQpP4RavbKkcfcYf7qA+g5ifMF9mOXGO7BF2Z5k= Subject key identifier: E5:A1:D4:49:E8:2D:99:B8:93:5D:AE:D8:05:8D:61:C0:3A:70:6C:49 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 01AA Signing time: Sun 01 Mar 2026 04:49:47 +0000 Manifest this update: Sun 01 Mar 2026 04:49:46 +0000 Manifest next update: Sun 08 Mar 2026 04:49:46 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: F1GLKbWzfYcBrwRXhD4wG7889oWNlks00rWg2lsr4PE=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: kfUd7cLCmHmQ/k7ENeRjEkFUrum5OXV/qc4Vt8EOcIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Mar 1 04:49:46 2026 GMT Not After : Mar 8 04:49:46 2026 GMT Subject: CN=69a3c56b-61c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:fd:dd:96:3a:a1:df:7b:d2:ea:f7:dd:cc: f9:4d:32:a8:2c:bc:d8:35:dc:86:0b:5e:ef:e1:3e: ac:72:eb:2d:01:05:a3:ee:a0:e7:60:53:5c:5f:5f: 88:81:46:24:2a:96:25:a9:0b:b9:64:1c:d8:85:df: a0:1b:0c:7b:fe:0c:44:1e:14:20:21:e0:d2:59:c4: d7:c7:6c:1a:e0:59:07:75:dd:21:51:36:da:a2:a5: d5:fd:1e:8b:67:6d:e5:de:9a:e4:23:2e:91:a0:5e: d0:8a:86:e7:50:00:a2:17:a3:fd:62:fe:f5:ea:d0: 9b:13:2f:95:48:99:02:6f:d0:c6:45:b1:5e:b2:0c: ac:ac:c3:67:5d:e5:70:7d:f4:69:6f:07:a1:4e:fb: 6a:ad:69:4a:f7:73:43:0b:68:cd:83:e8:2b:93:04: ed:6a:d0:56:40:8c:3c:bc:48:97:c6:ce:e1:72:8f: bb:31:6c:31:7e:0e:48:76:7d:17:4a:c7:77:6c:d5: a5:31:1c:40:dd:3a:c6:25:81:48:f1:86:ef:f1:45: b9:7f:53:3c:bb:46:04:ab:68:bd:8f:33:85:f4:26: 6d:18:2d:43:64:0c:f9:80:8d:06:77:4e:68:7e:04: e8:61:75:f4:13:74:10:67:7c:cc:43:c0:b6:9a:dd: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A1:D4:49:E8:2D:99:B8:93:5D:AE:D8:05:8D:61:C0:3A:70:6C:49 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:2d:06:b2:65:74:aa:54:d0:9f:ca:4b:a6:2e:5d:7e:45:4d: 53:2a:da:72:e2:9e:bd:e1:e5:83:86:06:d9:3e:5c:7f:dd:f4: 0e:8e:35:06:bf:74:c4:88:58:9b:a7:6e:eb:ba:77:ce:e9:79: 48:fc:bd:f7:c6:69:6c:7a:dc:18:62:60:97:65:35:f8:d8:09: 5b:4e:e3:ac:08:ab:04:49:2f:83:f3:37:06:5c:21:b8:8f:97: 80:23:95:9e:f0:df:a2:6e:62:9f:1b:e7:c0:ba:70:14:40:e7: 98:78:d9:e5:82:34:ca:d7:34:3f:d2:99:5d:19:9d:2f:73:b2: f1:bf:79:66:23:de:af:db:76:d5:38:84:28:6e:a2:b6:e2:cc: a6:12:0b:de:a8:80:f9:df:a9:54:19:58:e1:91:ea:8e:7c:80: 08:c8:5b:b8:f2:35:cb:66:0d:61:97:49:da:e3:ff:bd:28:4d: e6:63:a6:b4:57:e0:2e:50:e7:10:7a:36:08:9c:ae:a6:f5:b3: 8d:36:3f:43:1b:cc:f8:0d:38:25:01:39:12:f7:8b:43:60:88: 7d:a0:1f:2f:7e:91:29:a1:50:ba:fb:9e:9a:e1:f3:a4:e1:03: a0:8b:de:bd:6d:ed:ce:73:d7:8b:a7:7d:3b:f3:b2:ab:df:46: 74:45:84:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYwMzAxMDQ0OTQ2WhcNMjYwMzA4MDQ0OTQ2WjAYMRYwFAYD VQQDDA02OWEzYzU2Yi02MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkL93ZY6od970ur33cz5TTKoLLzYNdyGC17v4T6scustAQWj7qDnYFNcX1+I gUYkKpYlqQu5ZBzYhd+gGwx7/gxEHhQgIeDSWcTXx2wa4FkHdd0hUTbaoqXV/R6L Z23l3prkIy6RoF7QiobnUACiF6P9Yv716tCbEy+VSJkCb9DGRbFesgysrMNnXeVw ffRpbwehTvtqrWlK93NDC2jNg+grkwTtatBWQIw8vEiXxs7hco+7MWwxfg5Idn0X Ssd3bNWlMRxA3TrGJYFI8Ybv8UW5f1M8u0YEq2i9jzOF9CZtGC1DZAz5gI0Gd05o fgToYXX0E3QQZ3zMQ8C2mt2LDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWh1Eno LZm4k12u2AWNYcA6cGxJMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2C0GsmV0qlTQn8pLpi5dfkVNUyracuKeveHlg4YG2T5cf930Do41Br90xIhY m6du67p3zul5SPy998ZpbHrcGGJgl2U1+NgJW07jrAirBEkvg/M3BlwhuI+XgCOV nvDfom5inxvnwLpwFEDnmHjZ5YI0ytc0P9KZXRmdL3Oy8b95ZiPer9t21TiEKG6i tuLMphIL3qiA+d+pVBlY4ZHqjnyACMhbuPI1y2YNYZdJ2uP/vShN5mOmtFfgLlDn EHo2CJyupvWzjTY/QxvM+A04JQE5EveLQ2CIfaAfL36RKaFQuvuemuHzpOEDoIve vW3tznPXi6d9O/Oyq99GdEWEhQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:59:03 2026 by rpki-client