$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: fQsBlTI8uAbhMIJMLNQwDFTteBbkG7b9bPSzcRvZSGc= Subject key identifier: 52:D7:74:9D:CD:6D:98:B5:55:63:CD:52:7E:BE:68:B5:94:04:54:0E Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0DF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0DDF Signing time: Mon 02 Mar 2026 02:17:17 +0000 Manifest this update: Mon 02 Mar 2026 02:17:16 +0000 Manifest next update: Mon 09 Mar 2026 02:17:16 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: MCUnzMw9K3GEhVW88Ee021WpbHmNSeawrJQnjw3Mlis=) 2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: tcWwtdWeFntp7WyE0rgHwY9okLQ7TF8dGNiywkpavhw=) 3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: /nObZEdhHIQ9A8Keqjb2QjCOjvfkh8nk67S98ZEYSvQ=) 4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: BCRlLiUr46FvVfviJkMIrseAlUW6YEGgn9i2WGsrrec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Mar 2 02:17:16 2026 GMT Not After : Mar 9 02:17:16 2026 GMT Subject: CN=69a4f32d-ef6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:ac:b4:88:b4:86:59:fc:00:5a:5f:ee:c0: 9c:af:d1:6d:68:d6:a8:3a:80:e5:10:f9:25:de:be: f5:ce:71:a0:26:05:87:5e:13:15:01:7f:3e:7a:dc: 3e:71:6c:01:b0:8b:30:07:34:85:c0:49:63:03:ee: 32:94:6b:c3:3c:2d:25:17:08:62:16:6f:54:ee:5d: 1b:46:43:07:ec:c8:b3:9e:cd:7c:00:a7:e2:36:96: f8:62:d5:97:6a:fb:c3:d8:74:f7:17:9c:f6:54:f1: 19:bb:9f:39:3d:dc:c3:c8:72:16:62:2f:31:77:a2: d8:92:05:bb:13:46:05:50:bd:f2:3e:79:19:3d:55: c5:99:0e:bf:a6:93:fc:9c:b3:b3:07:1c:cd:ec:29: 91:bb:12:f4:e7:ac:e9:41:a8:6c:df:3f:df:ea:0f: 31:d8:92:c7:3e:c7:36:42:9f:79:8c:6a:5e:8b:e4: 72:2c:b2:aa:78:40:73:b7:ef:da:f0:1d:d4:6b:70: 05:ac:af:72:6b:75:e7:db:be:6f:4d:b0:15:8e:0e: c3:db:7a:16:d5:94:19:62:b4:70:ff:ca:e8:78:9e: fc:fe:15:40:70:18:d2:73:7c:92:83:a2:b5:7b:2d: 9d:ba:eb:f4:a7:a7:9d:47:e3:8b:6e:3e:48:0e:cc: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D7:74:9D:CD:6D:98:B5:55:63:CD:52:7E:BE:68:B5:94:04:54:0E X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a6:1e:f8:9b:28:b7:19:13:84:6d:ea:a8:9d:fe:b4:2e:3a: 4c:b1:e1:26:11:9a:75:20:a4:1c:2b:a7:4d:f0:ca:0a:67:74: 25:5c:7d:28:dd:b2:a4:92:a0:2f:84:1e:12:b9:55:67:78:db: f5:9f:68:ad:62:eb:1d:d8:74:db:c1:15:a5:4e:87:d7:84:eb: 3b:0f:4b:eb:9c:f7:f4:34:30:cf:4c:80:49:64:fe:cf:b8:d0: 77:70:16:ac:19:92:3e:8a:34:ba:63:1f:68:b7:bd:e5:c5:70: 31:ee:f9:59:ca:33:ac:b7:f7:c8:83:fe:a8:48:a5:9f:f4:8f: 76:77:9f:19:21:de:7f:f5:c1:af:f3:ac:ea:2a:ee:ef:6b:b4: cb:f5:c2:30:90:ee:1f:7d:82:30:79:1f:e6:e6:3b:3e:16:98: 5f:ef:42:43:50:c6:6a:1b:56:de:6f:1b:37:37:01:84:ce:2f: 39:66:b6:d2:89:a3:60:ae:9c:32:70:f6:c7:f5:d8:9e:81:8f: 8e:b2:03:57:3e:bb:5a:4d:7a:d8:a2:1b:cb:11:96:3f:7d:b3: 0a:e6:ef:27:0b:91:7f:05:f8:77:fe:19:33:e3:e6:28:82:60: b1:88:da:de:07:7a:e9:38:3d:f1:ba:01:21:a0:1d:3b:85:73: b3:2e:af:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjYwMzAyMDIxNzE2WhcNMjYwMzA5MDIxNzE2WjAYMRYwFAYD VQQDEw02OWE0ZjMyZC1lZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oOstIi0hln8AFpf7sCcr9FtaNaoOoDlEPkl3r71znGgJgWHXhMVAX8+etw+ cWwBsIswBzSFwEljA+4ylGvDPC0lFwhiFm9U7l0bRkMH7Mizns18AKfiNpb4YtWX avvD2HT3F5z2VPEZu585PdzDyHIWYi8xd6LYkgW7E0YFUL3yPnkZPVXFmQ6/ppP8 nLOzBxzN7CmRuxL056zpQahs3z/f6g8x2JLHPsc2Qp95jGpei+RyLLKqeEBzt+/a 8B3Ua3AFrK9ya3Xn275vTbAVjg7D23oW1ZQZYrRw/8roeJ78/hVAcBjSc3ySg6K1 ey2duuv0p6edR+OLbj5IDszLYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLXdJ3N bZi1VWPNUn6+aLWUBFQOMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVqYe+JsotxkThG3qqJ3+tC46TLHhJhGadSCkHCunTfDKCmd0JVx9KN2ypJKg L4QeErlVZ3jb9Z9orWLrHdh028EVpU6H14TrOw9L65z39DQwz0yASWT+z7jQd3AW rBmSPoo0umMfaLe95cVwMe75WcozrLf3yIP+qEiln/SPdnefGSHef/XBr/Os6iru 72u0y/XCMJDuH32CMHkf5uY7PhaYX+9CQ1DGahtW3m8bNzcBhM4vOWa20omjYK6c MnD2x/XYnoGPjrIDVz67Wk162KIbyxGWP32zCubvJwuRfwX4d/4ZM+PmKIJgsYja 3gd66Tg98boBIaAdO4Vzsy6vMA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:51 2026 by rpki-client