$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: K7INevME1v59qII7S0WzTvBR5NCP1FwuM+PWpHW23z0= Subject key identifier: D3:52:79:3C:5E:9C:B4:5B:13:16:88:9A:75:80:82:01:9E:A5:CA:2D Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 01EE Signing time: Thu 19 Mar 2026 02:35:12 +0000 Manifest this update: Thu 19 Mar 2026 02:35:11 +0000 Manifest next update: Thu 26 Mar 2026 02:35:11 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: ZYoaOP4AECCI9Pau+CltawHXhPhhowflpSRs39wqiZY=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=) 3: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=) 4: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 02:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Mar 19 02:35:11 2026 GMT Not After : Mar 26 02:35:11 2026 GMT Subject: CN=69bb60e0-dcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:4d:97:83:e3:64:a6:04:17:e8:a2:00:74: 53:ef:fd:36:5a:a7:f4:15:c0:11:bc:4b:0d:10:9f: c4:c5:2d:b5:27:12:86:21:9c:a6:92:4a:4b:ad:67: a3:c3:86:11:e2:f4:29:13:1e:4c:21:30:f6:d8:90: 82:91:c1:04:c6:82:cd:39:fe:74:0d:f9:d2:6c:51: a0:ad:43:a2:44:cc:37:27:2d:e4:a0:50:8a:e9:5e: 52:76:77:77:20:a8:9c:19:a0:6a:52:5f:35:57:b2: a2:a4:db:84:f9:0e:a1:0d:54:6a:3e:93:60:24:ea: e1:cb:6e:76:3e:66:04:27:72:86:4d:74:e8:fb:49: 0d:62:93:e4:8c:4c:80:d0:7c:d9:4d:56:d3:78:12: 96:7d:c5:57:c8:8d:ac:b7:4c:0b:28:c1:7f:da:35: df:c5:12:de:f2:87:65:a9:4b:b1:92:c0:51:79:a4: e7:43:4b:d3:ca:a0:6e:3c:df:f8:37:35:aa:7f:b6: 71:68:5d:d0:7a:76:2e:8e:f9:5e:89:4b:98:58:af: 73:46:56:0b:7f:13:a5:ef:09:5a:e9:4d:51:5c:9e: b2:00:d6:cc:80:5a:d1:7a:45:f1:0f:8a:a4:9b:75: da:22:13:a4:78:6b:64:c3:48:ea:0c:65:73:5f:01: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:79:3C:5E:9C:B4:5B:13:16:88:9A:75:80:82:01:9E:A5:CA:2D X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8f:e1:a0:4d:9f:e5:18:78:a1:2a:ab:3d:d9:ea:d8:2e:4a: 5f:92:22:bc:7c:85:a9:fc:e9:fa:17:88:98:05:31:b4:38:5f: 0c:b6:68:e9:2a:80:db:11:7b:1d:8c:c0:48:3a:7d:84:f9:16: 90:6b:c8:d7:60:63:f3:f9:df:e7:02:aa:47:00:dd:67:4a:0d: 64:52:27:60:6f:b0:05:bb:20:1f:45:8e:98:ed:d2:81:8a:7d: a9:4c:f6:78:ef:c5:55:56:0f:3c:8f:54:b5:e8:31:c7:26:5c: 4f:ce:87:f0:84:c9:8a:1d:ea:57:3f:d7:5d:cb:1a:ce:94:ef: b0:53:20:1c:c3:70:f2:36:68:f3:97:8c:a1:46:7d:04:45:99: 8b:6c:b5:f0:72:52:a7:bb:20:48:f7:13:88:7f:ab:46:6d:95: 94:c1:83:0b:3e:a7:d4:d6:e3:2d:cf:35:37:1f:45:be:bf:ae: eb:81:2b:29:bd:ec:08:ec:22:34:f5:71:e1:8b:21:9a:d5:b6: 8a:94:77:e6:64:20:ed:8b:cb:e6:21:68:20:2e:a5:25:7d:d3: 86:91:75:28:3d:40:1d:2f:1d:98:98:b5:45:a8:f9:37:cc:44: ff:20:26:24:64:54:45:6e:fd:c9:55:bb:29:75:6a:bd:9d:1c: 81:4d:ce:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjYwMzE5MDIzNTExWhcNMjYwMzI2MDIzNTExWjAYMRYwFAYD VQQDEw02OWJiNjBlMC1kY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDFNl4PjZKYEF+iiAHRT7/02Wqf0FcARvEsNEJ/ExS21JxKGIZymkkpLrWej w4YR4vQpEx5MITD22JCCkcEExoLNOf50DfnSbFGgrUOiRMw3Jy3koFCK6V5Sdnd3 IKicGaBqUl81V7KipNuE+Q6hDVRqPpNgJOrhy252PmYEJ3KGTXTo+0kNYpPkjEyA 0HzZTVbTeBKWfcVXyI2st0wLKMF/2jXfxRLe8odlqUuxksBReaTnQ0vTyqBuPN/4 NzWqf7ZxaF3QenYujvleiUuYWK9zRlYLfxOl7wla6U1RXJ6yANbMgFrRekXxD4qk m3XaIhOkeGtkw0jqDGVzXwE4gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNSeTxe nLRbExaImnWAggGepcotMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvo/hoE2f5Rh4oSqrPdnq2C5KX5IivHyFqfzp+heImAUxtDhfDLZo6SqA2xF7 HYzASDp9hPkWkGvI12Bj8/nf5wKqRwDdZ0oNZFInYG+wBbsgH0WOmO3SgYp9qUz2 eO/FVVYPPI9UtegxxyZcT86H8ITJih3qVz/XXcsazpTvsFMgHMNw8jZo85eMoUZ9 BEWZi2y18HJSp7sgSPcTiH+rRm2VlMGDCz6n1NbjLc81Nx9Fvr+u64ErKb3sCOwi NPVx4YshmtW2ipR35mQg7YvL5iFoIC6lJX3ThpF1KD1AHS8dmJi1Raj5N8xE/yAm JGRURW79yVW7KXVqvZ0cgU3O6g== -----END CERTIFICATE-----Generated at Thu Mar 19 12:09:59 2026 by rpki-client