$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json) Hash identifier: 1avxY2BBrs2wVH0HF6kjDaAR3MbWQbTfLIP4zleyPn4= Subject key identifier: 82:CA:61:C0:C0:00:32:6E:6E:3D:7A:5F:44:BB:56:3F:93:59:DA:78 Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft Manifest number: 01C1 Signing time: Sun 01 Mar 2026 23:56:39 +0000 Manifest this update: Sun 01 Mar 2026 23:56:36 +0000 Manifest next update: Sun 08 Mar 2026 23:56:36 +0000 Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: SUTeP5R5XcqK3NT5nJJJA4m5YNslXMIDSd/mAXwJdrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Validity Not Before: Mar 1 23:56:36 2026 GMT Not After : Mar 8 23:56:36 2026 GMT Subject: CN=69a4d236-b327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:60:b1:99:3b:5d:1c:da:34:84:0d:a9:de: 02:44:df:63:a5:55:89:12:af:1b:30:22:dd:f0:23: 46:07:99:17:0a:57:4f:eb:48:d1:4a:e0:cf:a5:f6: 8b:2e:c7:a6:f8:f1:30:3e:4b:3c:ba:8f:d9:ab:02: 4a:cb:65:83:f9:2b:df:70:77:af:ae:92:ce:bc:80: d6:06:d1:3d:95:c4:25:8e:c3:b4:8c:8b:22:d3:a3: c4:90:a1:9a:07:82:a2:06:2b:07:46:00:69:2a:80: bb:ea:39:6d:3c:08:be:40:68:20:fc:da:f1:65:5e: 9a:92:f0:ec:a6:4f:7c:d5:27:d6:8a:fb:73:cd:5e: 7f:f5:a0:b0:26:22:bf:dd:bf:0f:e3:c9:d8:d3:ad: 2b:93:95:56:95:e4:60:55:f0:26:f2:ea:d9:3f:a9: 38:47:5d:a3:55:0f:62:68:a3:a1:08:d5:38:fb:c1: c7:b6:75:f4:22:ea:99:e1:f5:e6:65:4a:81:91:ee: 10:13:1e:f1:73:64:cb:93:ba:c9:63:b5:57:aa:67: f4:aa:3c:05:7e:5d:1a:41:e4:cb:05:5b:29:e3:3a: f8:48:58:07:97:84:2c:d4:12:cc:9f:ab:99:8e:9f: ad:97:38:53:aa:cc:60:db:05:ec:d3:2e:15:04:b3: ff:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CA:61:C0:C0:00:32:6E:6E:3D:7A:5F:44:BB:56:3F:93:59:DA:78 X509v3 Authority Key Identifier: keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:73:bc:19:eb:ca:69:77:c4:12:da:0e:6e:66:a0:f4:c5:60: f6:f0:a6:e3:70:49:ac:eb:ff:f4:7e:66:1e:7b:1c:dd:e3:e6: 14:23:99:d5:55:34:fa:77:eb:16:66:06:82:5d:97:24:0f:36: 04:03:ab:43:cb:f7:3d:d2:38:3d:4d:e8:9e:08:e0:50:59:33: 19:97:df:35:c8:ce:f6:80:82:4d:56:28:2f:c7:37:a1:8b:38: 63:bd:2b:7d:2c:4c:ca:a1:b8:02:6a:e5:54:7b:39:1b:d6:b8: 87:74:90:d8:40:4b:34:24:53:55:01:bc:35:bc:18:94:7b:a7: 17:f5:00:24:ee:af:97:3b:2c:af:a2:8b:4a:ce:88:14:84:3b: c4:a6:76:fb:d2:e2:96:9f:51:21:c6:5a:33:60:04:78:e9:cb: c0:0c:b7:64:15:89:85:69:d8:ef:dd:e4:7a:bd:69:ca:6e:31: 54:4f:15:a0:20:9b:d3:c6:c1:e5:ba:b1:c2:d7:8c:72:d0:22: d5:49:1b:a8:ac:ed:22:43:fa:2a:a9:b2:10:2a:6f:80:24:42: 24:a1:b7:cf:b2:af:1e:4a:24:8f:5e:6c:13:c9:70:0d:1e:89: b3:59:29:7a:2d:ae:23:5f:68:0c:c8:9b:b7:46:c8:85:73:9c: 1d:92:df:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKENCOERCOEUxRjE3QkM3NzIzNDZERDlGRkJCMjA3MkNG QThGREE2NTIwHhcNMjYwMzAxMjM1NjM2WhcNMjYwMzA4MjM1NjM2WjAYMRYwFAYD VQQDEw02OWE0ZDIzNi1iMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst1gsZk7XRzaNIQNqd4CRN9jpVWJEq8bMCLd8CNGB5kXCldP60jRSuDPpfaL Lsem+PEwPks8uo/ZqwJKy2WD+SvfcHevrpLOvIDWBtE9lcQljsO0jIsi06PEkKGa B4KiBisHRgBpKoC76jltPAi+QGgg/NrxZV6akvDspk981SfWivtzzV5/9aCwJiK/ 3b8P48nY060rk5VWleRgVfAm8urZP6k4R12jVQ9iaKOhCNU4+8HHtnX0IuqZ4fXm ZUqBke4QEx7xc2TLk7rJY7VXqmf0qjwFfl0aQeTLBVsp4zr4SFgHl4Qs1BLMn6uZ jp+tlzhTqsxg2wXs0y4VBLP/qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILKYcDA ADJubj16X0S7Vj+TWdp4MB8GA1UdIwQYMBaAFMuNuOHxe8dyNG3Z/7sgcs+o/aZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FMEM0NjEzMDZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gzSTBiZG5fdXlCeXo2ajlw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3k0MjQ0ZkY3eDNJMGJkbl91eUJ5ejZqOXBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FMEM0NjEzMDZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gz STBiZG5fdXlCeXo2ajlwbEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUnO8GevKaXfEEtoObmag9MVg9vCm43BJrOv/9H5mHnsc3ePmFCOZ1VU0+nfr FmYGgl2XJA82BAOrQ8v3PdI4PU3ongjgUFkzGZffNcjO9oCCTVYoL8c3oYs4Y70r fSxMyqG4AmrlVHs5G9a4h3SQ2EBLNCRTVQG8NbwYlHunF/UAJO6vlzssr6KLSs6I FIQ7xKZ2+9Lilp9RIcZaM2AEeOnLwAy3ZBWJhWnY793ker1pym4xVE8VoCCb08bB 5bqxwteMctAi1UkbqKztIkP6KqmyECpvgCRCJKG3z7KvHkokj15sE8lwDR6Js1kp ei2uI19oDMibt0bIhXOcHZLfXA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:11 2026 by rpki-client