$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: NBUbj0sbWlx61AhZhOES0aPuoPgohSUbUmCIvCPvGQc= Subject key identifier: F3:5D:10:4B:7D:4C:4A:02:58:EF:D5:C5:25:85:25:B4:77:D1:E4:E5 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 07E3 Signing time: Sat 28 Feb 2026 21:40:21 +0000 Manifest this update: Sat 28 Feb 2026 21:40:21 +0000 Manifest next update: Sat 07 Mar 2026 21:40:21 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: Co719RN9PPvdaSz4ndn1qf1+EQj0tgNmC0suCGsrCJU=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Feb 28 21:40:21 2026 GMT Not After : Mar 7 21:40:21 2026 GMT Subject: CN=69a360c5-d85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:2a:61:77:ad:9f:28:b4:39:c8:c2:fe:54: 9e:66:e1:8b:ed:bd:bf:f3:38:65:47:fb:dc:76:6d: fc:ec:9f:e9:37:89:42:5a:4b:44:a2:44:13:ca:6a: 3a:68:ec:ac:da:73:d9:e9:b9:80:42:05:15:5e:12: c4:a9:3c:38:fc:64:ed:ac:46:5a:dc:a7:8e:46:d8: 0e:65:d1:dd:68:45:5d:db:51:14:4d:32:33:02:26: cd:94:42:07:d4:0d:94:11:31:61:e2:96:4c:59:c4: 33:52:ed:bc:80:04:23:29:51:a5:3b:26:c3:e6:16: 53:1d:61:c4:c8:d3:88:7a:3a:cf:8b:62:b8:a5:95: dc:dd:12:c7:24:72:0b:64:78:3e:df:fd:27:3d:b6: ab:29:af:a1:32:c3:35:a4:bd:af:d1:ba:f6:bb:60: b7:0e:47:79:d5:11:81:1d:5f:19:ef:66:13:a2:48: 14:f6:e4:25:d0:ce:8c:00:98:21:f8:27:e4:52:75: 71:22:2b:24:dc:e8:ed:a1:ac:03:c5:b5:d8:a6:fb: 1c:ef:66:05:8f:3d:a2:b8:e4:f7:b1:42:e1:e1:15: 57:49:f9:73:8d:22:51:ec:45:ef:c6:f9:63:d3:d0: a4:e6:fe:9e:85:01:e0:75:b8:34:05:48:b6:3f:8a: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5D:10:4B:7D:4C:4A:02:58:EF:D5:C5:25:85:25:B4:77:D1:E4:E5 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a8:0e:6f:e3:32:10:05:c4:8f:65:36:f8:88:85:ea:37:28: dc:0b:aa:d1:16:08:fb:d2:1f:b9:4d:ac:f2:da:62:fa:e5:01: 68:b5:04:7d:21:c9:27:ac:44:1a:1b:f1:e8:3d:91:94:f3:a3: b1:a9:1d:16:7d:dd:ad:20:97:60:49:c9:c7:ff:20:eb:21:92: bc:53:66:c9:32:7d:0c:d9:24:da:1c:20:eb:6a:7a:3b:d8:2c: 6a:82:d7:77:3f:ac:5a:37:9d:1d:ef:5a:fc:42:08:73:e4:33: 27:e2:73:b2:84:c2:73:83:9b:fb:51:89:41:d1:1b:40:32:e9: d5:27:eb:7a:6a:cf:ac:5e:b3:d3:ff:fa:66:bc:58:9d:95:50: d5:77:4b:b9:ef:b7:7f:fc:79:96:3b:f6:ce:47:23:0d:85:5c: 22:84:ea:5b:53:22:de:a2:0c:05:66:c5:36:6d:e0:11:17:c0: 20:b6:79:30:b4:64:88:8f:59:18:0c:4a:be:c7:48:9d:54:60: d2:ec:4d:71:77:37:21:6e:64:ff:72:83:f4:72:7f:96:40:57: ac:35:c5:32:c1:28:53:93:e8:6c:4e:64:98:ca:ba:c4:44:81: e8:58:ed:a2:b0:77:f3:da:75:b1:90:a5:2c:1a:53:7b:00:06: 0b:6e:05:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjYwMjI4MjE0MDIxWhcNMjYwMzA3MjE0MDIxWjAYMRYwFAYD VQQDDA02OWEzNjBjNS1kODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrcqYXetnyi0OcjC/lSeZuGL7b2/8zhlR/vcdm387J/pN4lCWktEokQTymo6 aOys2nPZ6bmAQgUVXhLEqTw4/GTtrEZa3KeORtgOZdHdaEVd21EUTTIzAibNlEIH 1A2UETFh4pZMWcQzUu28gAQjKVGlOybD5hZTHWHEyNOIejrPi2K4pZXc3RLHJHIL ZHg+3/0nPbarKa+hMsM1pL2v0br2u2C3Dkd51RGBHV8Z72YTokgU9uQl0M6MAJgh +CfkUnVxIisk3OjtoawDxbXYpvsc72YFjz2iuOT3sULh4RVXSflzjSJR7EXvxvlj 09Ck5v6ehQHgdbg0BUi2P4oDBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNdEEt9 TEoCWO/VxSWFJbR30eTlMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEqgOb+MyEAXEj2U2+IiF6jco3Auq0RYI+9IfuU2s8tpi+uUBaLUEfSHJJ6xE Ghvx6D2RlPOjsakdFn3drSCXYEnJx/8g6yGSvFNmyTJ9DNkk2hwg62p6O9gsaoLX dz+sWjedHe9a/EIIc+QzJ+JzsoTCc4Ob+1GJQdEbQDLp1SfremrPrF6z0//6ZrxY nZVQ1XdLue+3f/x5ljv2zkcjDYVcIoTqW1Mi3qIMBWbFNm3gERfAILZ5MLRkiI9Z GAxKvsdInVRg0uxNcXc3IW5k/3KD9HJ/lkBXrDXFMsEoU5PobE5kmMq6xESB6Fjt orB389p1sZClLBpTewAGC24F1Q== -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:41 2026 by rpki-client