$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: B8FpsuCIwyLVWZUOGlP/SD5CabmH55teY6scXXj9Y5c= Subject key identifier: E1:80:08:38:D8:92:C3:55:A4:6B:5F:41:72:C3:AD:0E:E0:5B:A3:B9 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 01BD Signing time: Sat 21 Mar 2026 03:00:15 +0000 Manifest this update: Sat 21 Mar 2026 03:00:15 +0000 Manifest next update: Sat 28 Mar 2026 03:00:15 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: 6yJtLF+is5iDY9mityhHKk442vtJzTGL5M/AgoYQoVM=) 2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) 3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Mar 21 03:00:15 2026 GMT Not After : Mar 28 03:00:15 2026 GMT Subject: CN=69be09bf-09d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:2d:fd:a4:e9:91:94:e7:a9:b0:35:9f:dc: 3f:b2:18:07:e5:6f:71:97:4e:85:b4:49:63:6a:8c: 6b:2a:6a:5d:f9:7c:ad:30:15:bb:93:4a:39:45:50: ac:80:ea:80:49:60:af:c8:30:65:a8:ea:4c:5f:dd: 92:3f:81:22:94:2c:dc:23:f1:b6:84:2e:f6:77:c3: fc:1c:19:d9:8b:87:97:d7:0b:a3:a0:16:4c:35:bc: 50:53:74:da:26:b1:c9:37:77:92:b9:28:2c:f7:9e: bc:a8:67:26:79:ab:0e:88:c3:b5:86:b7:49:ab:d2: ab:af:b3:dc:a4:b6:f9:bc:79:bf:89:45:8a:d5:4b: ce:89:2f:67:20:0b:71:fb:84:41:9a:bf:ec:4c:54: 08:96:e7:ab:58:9f:00:42:f4:04:cb:d2:1a:3e:7f: c1:08:88:4c:16:2d:57:56:ac:d5:4f:af:72:55:5d: bc:d8:da:0d:18:77:55:5a:ea:39:bf:f5:2a:8f:13: 37:82:b6:f3:ed:11:c5:a7:7d:f1:c7:ae:ef:30:74: 68:31:52:3e:63:1e:5d:63:0e:22:d2:8f:d4:6d:e6: 82:ef:e2:63:16:2d:1c:85:c7:15:63:fc:9e:ef:cd: 8c:82:23:f4:29:3e:77:ee:2c:2a:56:b6:02:ce:e7: 94:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:80:08:38:D8:92:C3:55:A4:6B:5F:41:72:C3:AD:0E:E0:5B:A3:B9 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:5f:4e:d6:dc:58:87:c4:d9:f1:e5:13:a7:b6:73:70:83:0d: ae:56:26:73:9d:27:cc:2d:3e:da:2d:5f:2e:50:76:d0:e9:3b: d3:14:d1:af:62:8e:bc:e6:62:61:3e:89:7d:17:be:22:7a:3d: 0d:7c:72:f9:9f:c4:54:5d:2e:d2:95:56:88:5f:a4:9c:3d:1f: 6f:a4:39:81:69:74:28:9d:54:95:f0:6e:36:bd:e9:ae:b0:ad: 44:d1:2c:ab:5b:b5:54:9c:31:78:87:fc:03:33:e0:fe:65:85: ca:4a:bc:30:f5:e1:73:77:d8:27:5b:b9:d5:61:06:82:88:e0: 93:21:3e:de:68:37:4e:55:f8:86:5a:0d:72:db:3b:47:f7:ed: 88:df:9e:e7:00:4b:96:e0:ed:05:b1:f1:7c:fe:1e:75:18:57: e0:8a:34:3d:0a:28:ac:bd:80:77:7f:be:4f:11:cf:b8:61:04: bf:ee:c6:e4:c6:25:a7:0d:85:0d:2b:09:d5:c0:d2:80:59:e3: f4:29:e4:5b:71:e1:ce:ef:aa:82:5b:6a:76:9a:fd:00:af:a8: 97:e4:8b:0e:bf:99:dd:86:bb:eb:f0:19:fd:76:ab:78:05:2c: 58:2f:5e:8c:af:69:5e:a9:da:73:f6:7f:46:ba:6d:66:5e:7c: b4:b2:72:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYwMzIxMDMwMDE1WhcNMjYwMzI4MDMwMDE1WjAYMRYwFAYD VQQDEw02OWJlMDliZi0wOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRct/aTpkZTnqbA1n9w/shgH5W9xl06FtEljaoxrKmpd+XytMBW7k0o5RVCs gOqASWCvyDBlqOpMX92SP4EilCzcI/G2hC72d8P8HBnZi4eX1wujoBZMNbxQU3Ta JrHJN3eSuSgs9568qGcmeasOiMO1hrdJq9Krr7PcpLb5vHm/iUWK1UvOiS9nIAtx +4RBmr/sTFQIluerWJ8AQvQEy9IaPn/BCIhMFi1XVqzVT69yVV282NoNGHdVWuo5 v/UqjxM3grbz7RHFp33xx67vMHRoMVI+Yx5dYw4i0o/UbeaC7+JjFi0chccVY/ye 782MgiP0KT537iwqVrYCzueU4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOGACDjY ksNVpGtfQXLDrQ7gW6O5MB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuV9O1txYh8TZ8eUTp7ZzcIMNrlYmc50nzC0+2i1fLlB20Ok70xTRr2KOvOZi YT6JfRe+Ino9DXxy+Z/EVF0u0pVWiF+knD0fb6Q5gWl0KJ1UlfBuNr3prrCtRNEs q1u1VJwxeIf8AzPg/mWFykq8MPXhc3fYJ1u51WEGgojgkyE+3mg3TlX4hloNcts7 R/ftiN+e5wBLluDtBbHxfP4edRhX4Io0PQoorL2Ad3++TxHPuGEEv+7G5MYlpw2F DSsJ1cDSgFnj9CnkW3Hhzu+qgltqdpr9AK+ol+SLDr+Z3Ya76/AZ/XareAUsWC9e jK9pXqnac/Z/RrptZl58tLJybw== -----END CERTIFICATE-----Generated at Sat Mar 21 18:37:13 2026 by rpki-client