$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json) Hash identifier: B2ZJQUdnXRNRLTYlhI6RpCxFF4it+ln3fo3q9JvL1sw= Subject key identifier: 85:DA:46:F1:6C:C2:80:55:98:B6:F0:CE:9B:1A:C6:21:87:08:45:62 Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft Manifest number: 8C Signing time: Sun 01 Mar 2026 08:52:14 +0000 Manifest this update: Sun 01 Mar 2026 08:52:13 +0000 Manifest next update: Sun 08 Mar 2026 08:52:13 +0000 Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: Njt2LA0nCc7Wn9wXsmTzzCbHs6K2aB6SdMChrD7PeRU=) 2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: LZ1naTvUarjviQvh++Hnvfx//aqWYgS0zxraAu6o6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Mar 1 08:52:13 2026 GMT Not After : Mar 8 08:52:13 2026 GMT Subject: CN=69a3fe3e-7dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:aa:73:5d:49:7d:34:83:d4:79:74:ef:01: 8e:77:06:84:2b:d5:db:85:4a:7e:bd:34:fe:95:1e: e5:1f:ed:7c:6b:87:05:46:f0:69:01:75:a7:1f:d3: 66:89:3a:06:96:cb:4a:98:61:1c:53:07:82:cd:53: 56:d5:3f:bb:9f:ab:38:37:4f:82:20:a6:bb:ae:94: 84:d4:90:ad:1f:15:99:58:54:c1:9b:54:1b:9f:19: 35:cc:fa:17:61:08:ff:d2:3d:9d:33:52:c7:02:6e: e6:ab:38:d5:17:ae:fa:71:8f:9c:a5:46:aa:e0:28: 4f:16:50:c6:e6:df:28:36:72:e7:1b:d4:d0:bd:c3: 10:c5:41:b7:9e:74:40:c8:06:ed:9d:37:42:6d:4d: 5f:0d:0b:97:c3:2e:69:a8:53:82:41:20:78:fe:cd: 4a:a8:19:5d:b9:7d:ff:e8:1c:77:cc:19:9b:63:8e: f3:34:3e:28:0a:35:92:96:c1:e4:ad:d2:5e:a0:c8: 1b:e3:b3:07:74:9e:28:f5:0d:e3:b8:bc:4d:d4:6d: 2b:8e:a6:a6:6e:6c:19:38:10:c7:81:d7:6d:99:d6: 92:13:01:7b:c3:7f:d9:bb:eb:41:1f:9f:91:01:17: f3:24:a3:1f:90:7e:52:34:16:d9:80:5a:a1:b7:0c: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:46:F1:6C:C2:80:55:98:B6:F0:CE:9B:1A:C6:21:87:08:45:62 X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c2:89:f4:48:3a:6e:70:a9:0f:78:3a:d1:36:77:d3:6b:09: 21:40:9e:24:0e:4e:c2:80:b6:87:fe:83:89:0b:85:11:86:e0: 36:cc:f0:11:46:24:98:c4:74:47:2d:0d:68:f7:d7:7f:db:30: 55:c7:8c:60:a3:a7:ad:63:39:ee:6e:18:30:a7:3b:d4:77:d2: 1e:aa:79:56:eb:7f:73:0d:72:3b:04:d4:52:b2:ae:41:3f:b5: 12:80:7b:1d:f7:46:5a:09:45:7a:71:4c:ce:3b:6b:ca:d4:d3: b2:74:1e:7c:0e:69:5c:ce:62:8b:42:be:c9:fe:2d:74:f2:01: 33:7d:76:07:b0:83:37:e8:6c:07:7c:74:ca:4b:b1:2d:60:31: ae:64:40:0e:f6:94:3b:a1:c9:9f:5e:28:1d:99:13:06:26:01: 3d:62:f2:cf:2f:5d:b3:2b:d2:99:d1:8a:9e:6f:a4:13:59:f6: 99:05:e2:81:3f:3d:d1:8c:d7:02:99:a9:1c:bc:c6:68:20:47: 8a:96:2b:04:e5:3a:0f:e7:7d:70:18:24:75:f8:5a:73:cf:b9: cf:3c:77:ef:f0:00:3f:14:61:fb:11:c7:57:0f:01:ae:5d:18: 46:b2:0b:4b:58:2c:2d:41:70:6c:6b:05:b9:5a:41:1d:d3:ed: a0:f9:67:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKENCNTMxQzFFQzY5MjI1RjBEQ0FFNDRDRUNBNUUzNTk4 MENFOUMwRjIwHhcNMjYwMzAxMDg1MjEzWhcNMjYwMzA4MDg1MjEzWjAYMRYwFAYD VQQDEw02OWEzZmUzZS03ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMGqc11JfTSD1Hl07wGOdwaEK9XbhUp+vTT+lR7lH+18a4cFRvBpAXWnH9Nm iToGlstKmGEcUweCzVNW1T+7n6s4N0+CIKa7rpSE1JCtHxWZWFTBm1Qbnxk1zPoX YQj/0j2dM1LHAm7mqzjVF676cY+cpUaq4ChPFlDG5t8oNnLnG9TQvcMQxUG3nnRA yAbtnTdCbU1fDQuXwy5pqFOCQSB4/s1KqBlduX3/6Bx3zBmbY47zND4oCjWSlsHk rdJeoMgb47MHdJ4o9Q3juLxN1G0rjqambmwZOBDHgddtmdaSEwF7w3/Zu+tBH5+R ARfzJKMfkH5SNBbZgFqhtwxsEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXaRvFs woBVmLbwzpsaxiGHCEViMB8GA1UdIwQYMBaAFMtTHB7GkiXw3K5EzspeNZgM6cDy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9GNURCN0ExNjQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pmRGNya1RPeWw0MW1BenB3 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9GNURCN0ExNjQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pm RGNya1RPeWw0MW1BenB3UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtcKJ9Eg6bnCpD3g60TZ302sJIUCeJA5OwoC2h/6DiQuFEYbgNszwEUYkmMR0 Ry0NaPfXf9swVceMYKOnrWM57m4YMKc71HfSHqp5Vut/cw1yOwTUUrKuQT+1EoB7 HfdGWglFenFMzjtrytTTsnQefA5pXM5ii0K+yf4tdPIBM312B7CDN+hsB3x0ykux LWAxrmRADvaUO6HJn14oHZkTBiYBPWLyzy9dsyvSmdGKnm+kE1n2mQXigT890YzX ApmpHLzGaCBHipYrBOU6D+d9cBgkdfhac8+5zzx37/AAPxRh+xHHVw8Brl0YRrIL S1gsLUFwbGsFuVpBHdPtoPlnEw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:15:36 2026 by rpki-client