$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: cSUlGzIhdUIQGCD6Nvvq5UFtQ3VUGD3FWPjIZhHZPmU= Subject key identifier: 82:95:EF:1E:37:A1:C0:56:A1:29:03:14:F5:47:5C:B8:4C:9C:BD:BE Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0CF8 Signing time: Mon 02 Mar 2026 02:58:48 +0000 Manifest this update: Mon 02 Mar 2026 02:58:45 +0000 Manifest next update: Mon 09 Mar 2026 02:58:45 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: I32VxvLPrhrASX6Gbzxpct3ccuq+0+CQwOj7IIlSZzc=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: r6NMGYsxb0CTrW+33MllDccXL4xyxMC+FjKpakw8GUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Mar 2 02:58:45 2026 GMT Not After : Mar 9 02:58:45 2026 GMT Subject: CN=69a4fce7-a5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:78:70:85:c6:31:c9:b6:fb:f5:79:ea:26: e5:d4:ab:ea:aa:b9:17:31:5d:aa:5e:a5:31:db:67: 1a:cc:79:26:b8:2b:93:b3:49:0d:52:c0:99:b3:b8: 45:ca:84:b4:40:c9:e8:8a:d4:d0:6a:0e:ab:d7:49: 27:c5:ae:ca:45:98:9a:a0:a3:79:45:cf:8e:d9:31: 50:5b:dd:84:88:fc:56:88:0e:fc:d1:e8:34:a5:90: ed:f3:d4:05:50:5c:47:81:58:8e:47:e8:b5:82:35: df:81:c0:4f:87:ed:0d:4f:d8:8c:2f:7f:04:43:5e: 09:e7:85:9a:47:41:e9:54:a3:a9:9a:d5:52:ef:57: f8:95:70:b4:bf:a6:33:45:b0:ab:d9:b3:77:66:1f: af:8d:be:19:d9:9d:22:eb:84:81:56:7a:40:53:1f: df:8b:1c:1b:45:40:2f:b8:91:0d:72:a9:d6:68:c8: 03:92:e7:84:da:9c:c1:ca:6c:74:7b:85:cf:d8:f9: d7:5e:73:4f:41:45:a7:50:f8:eb:24:6b:6c:e2:8e: 83:d6:7f:eb:84:58:56:00:48:71:92:5e:0f:7d:17: b8:3d:c9:35:b3:c9:b4:1f:12:bb:c9:2a:58:ca:ed: 6c:d4:91:a9:57:c5:ad:bf:d9:d7:c4:40:82:39:b1: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:95:EF:1E:37:A1:C0:56:A1:29:03:14:F5:47:5C:B8:4C:9C:BD:BE X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:35:08:7b:9b:44:09:ae:76:80:33:da:f5:7f:51:d6:06:d2: 80:d1:5f:d2:1f:5f:c6:7a:f4:96:19:a7:f4:4f:1e:c3:c5:ea: cc:7b:6b:d7:6c:6f:08:03:c0:14:af:f3:86:b0:77:bd:a2:22: 1d:0e:fe:97:37:91:58:5b:1b:8b:aa:2f:93:10:e3:ff:00:89: 20:fc:67:ee:1c:d3:75:2d:26:69:4f:44:f0:cc:35:04:2b:6f: 9c:54:93:67:df:db:96:cb:62:ef:b2:7d:2a:53:e8:7f:2d:ef: 81:64:dd:b6:55:77:1f:2a:57:9e:b1:b1:29:27:3d:91:df:2b: 0e:b8:6b:43:9b:9b:36:6d:a8:ae:8f:73:89:c6:82:93:43:da: 19:34:07:9d:d9:e7:45:f6:a9:59:cf:84:25:17:bb:4e:d7:1d: 3a:4d:34:22:ea:96:5a:34:9b:9d:c1:04:ad:df:56:81:51:a5: da:3d:7a:92:af:cc:52:f7:8f:bd:f7:9b:6c:71:7a:7f:f7:a1: 8b:3b:1c:ae:d6:fa:2b:34:ef:fc:18:7c:b8:b8:a7:b7:87:43: 4e:2e:fd:ad:eb:45:2f:ad:55:06:f0:92:b8:cf:9a:5e:1f:2b: 40:ad:50:9e:8a:90:cf:06:b5:a7:be:e4:38:bf:ca:e5:2b:68: 9e:b7:62:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjYwMzAyMDI1ODQ1WhcNMjYwMzA5MDI1ODQ1WjAYMRYwFAYD VQQDEw02OWE0ZmNlNy1hNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZF4cIXGMcm2+/V56ibl1KvqqrkXMV2qXqUx22cazHkmuCuTs0kNUsCZs7hF yoS0QMnoitTQag6r10knxa7KRZiaoKN5Rc+O2TFQW92EiPxWiA780eg0pZDt89QF UFxHgViOR+i1gjXfgcBPh+0NT9iML38EQ14J54WaR0HpVKOpmtVS71f4lXC0v6Yz RbCr2bN3Zh+vjb4Z2Z0i64SBVnpAUx/fixwbRUAvuJENcqnWaMgDkueE2pzBymx0 e4XP2PnXXnNPQUWnUPjrJGts4o6D1n/rhFhWAEhxkl4PfRe4Pck1s8m0HxK7ySpY yu1s1JGpV8Wtv9nXxECCObF9rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKV7x43 ocBWoSkDFPVHXLhMnL2+MB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACzUIe5tECa52gDPa9X9R1gbSgNFf0h9fxnr0lhmn9E8ew8XqzHtr12xvCAPA FK/zhrB3vaIiHQ7+lzeRWFsbi6ovkxDj/wCJIPxn7hzTdS0maU9E8Mw1BCtvnFST Z9/blsti77J9KlPofy3vgWTdtlV3HypXnrGxKSc9kd8rDrhrQ5ubNm2oro9zicaC k0PaGTQHndnnRfapWc+EJRe7TtcdOk00IuqWWjSbncEErd9WgVGl2j16kq/MUveP vfebbHF6f/ehizscrtb6KzTv/Bh8uLint4dDTi79retFL61VBvCSuM+aXh8rQK1Q noqQzwa1p77kOL/K5StonrdikQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:57 2026 by rpki-client