$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: NRLJO3joFsI2STOuFIvBSmaInLI8HuGnVKEoU0srah0= Subject key identifier: 93:BE:98:CA:D4:DC:0B:9C:D9:8E:DF:5A:23:DC:28:D8:02:36:CD:2E Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 0205 Signing time: Sun 29 Mar 2026 02:47:27 +0000 Manifest this update: Sun 29 Mar 2026 02:47:27 +0000 Manifest next update: Sun 05 Apr 2026 02:47:27 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: JnRftqDKqjG1F9S3Bo2hWKMs69oo212P9/VZJ6FGEEA=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=) 3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=) 4: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 02:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: Mar 29 02:47:27 2026 GMT Not After : Apr 5 02:47:27 2026 GMT Subject: CN=69c892bf-e8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:ae:f1:7d:9c:e5:d2:4a:02:5e:7c:89:a8: 4a:ea:28:ed:16:34:6e:57:1d:15:f1:bf:4a:6c:51: 2b:34:3e:e3:09:b9:b0:f2:52:47:56:42:12:b5:52: 96:c8:27:38:cb:ad:bd:fc:10:77:c9:cf:ed:8f:5a: dd:ef:ea:8b:06:2b:5b:c5:65:27:b5:0e:bd:68:77: 08:a6:14:e0:7f:79:7d:26:bb:ba:84:f9:69:e6:44: 11:d6:fa:fb:30:91:1e:75:6e:51:19:31:85:31:ba: eb:f7:e2:03:62:62:d0:4f:21:c5:b3:b7:11:ff:14: 63:62:51:86:ca:3a:87:cf:5c:fb:08:18:e6:05:78: c4:f6:38:74:e2:94:c8:7f:de:11:6a:f6:99:f8:6f: 38:32:4c:61:0e:cc:64:87:e3:bc:17:08:ec:48:a7: bc:83:a9:27:42:ee:d5:d0:17:a4:7c:fa:3c:f2:16: 5f:3b:ae:72:75:d0:bf:5b:62:c3:15:20:43:57:e9: 70:3e:6c:90:d7:c0:9a:a8:02:05:f5:1a:c9:55:e6: c8:46:4e:95:ce:bc:bd:22:ce:6b:76:59:a7:49:9c: d0:cf:0a:95:51:7d:3b:0c:dc:92:bb:47:31:56:73: d7:91:8e:f2:d2:db:fe:aa:23:ca:08:24:bf:1e:26: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:98:CA:D4:DC:0B:9C:D9:8E:DF:5A:23:DC:28:D8:02:36:CD:2E X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b0:c9:9a:1e:39:7f:c2:40:e5:3a:1f:f3:cf:39:02:a8:9d: 11:da:c2:a2:7c:06:b7:9c:e8:b6:67:31:23:98:e2:1b:10:13: 03:a5:b4:11:ab:7b:ed:76:27:61:26:d5:ae:0f:59:65:81:77: f2:81:4e:b6:2d:47:2e:45:6a:0f:4a:7e:17:d8:ea:2c:c4:ff: 44:6f:94:cc:5c:85:61:37:33:5a:f6:19:d7:21:91:be:e5:9f: 9c:d6:72:e0:4d:52:1d:31:9b:be:70:24:0f:ee:5c:80:f9:cd: 2e:9a:2b:e0:18:8e:e0:35:22:82:e0:70:1d:ac:03:52:33:57: 83:8e:7c:06:67:6b:00:fe:33:18:6f:8c:da:95:08:ad:e6:fa: da:de:9f:5e:09:bc:fb:bc:f3:0c:4c:91:ae:2f:f0:66:3b:dc: 45:ab:ae:e9:26:c1:98:a2:76:26:77:e1:b5:f5:9b:6d:f4:a3: 4e:33:34:90:1c:12:b5:2e:60:7d:69:e1:ef:1a:40:58:f4:8f: 4e:7f:41:6d:99:04:88:4b:4c:64:13:81:89:8b:bb:2d:28:5f: 7f:cc:54:f2:aa:8c:20:f2:a0:16:06:35:fa:73:34:97:f1:71: de:1c:41:82:c9:6f:fd:d1:15:05:cb:30:99:95:fa:d7:7a:f0: 76:62:c4:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjYwMzI5MDI0NzI3WhcNMjYwNDA1MDI0NzI3WjAYMRYwFAYD VQQDEw02OWM4OTJiZi1lOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQuu8X2c5dJKAl58iahK6ijtFjRuVx0V8b9KbFErND7jCbmw8lJHVkIStVKW yCc4y629/BB3yc/tj1rd7+qLBitbxWUntQ69aHcIphTgf3l9Jru6hPlp5kQR1vr7 MJEedW5RGTGFMbrr9+IDYmLQTyHFs7cR/xRjYlGGyjqHz1z7CBjmBXjE9jh04pTI f94RavaZ+G84MkxhDsxkh+O8FwjsSKe8g6knQu7V0BekfPo88hZfO65yddC/W2LD FSBDV+lwPmyQ18CaqAIF9RrJVebIRk6Vzry9Is5rdlmnSZzQzwqVUX07DNySu0cx VnPXkY7y0tv+qiPKCCS/HibhUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO+mMrU 3Auc2Y7fWiPcKNgCNs0uMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqrDJmh45f8JA5Tof8885AqidEdrConwGt5zotmcxI5jiGxATA6W0Eat77XYn YSbVrg9ZZYF38oFOti1HLkVqD0p+F9jqLMT/RG+UzFyFYTczWvYZ1yGRvuWfnNZy 4E1SHTGbvnAkD+5cgPnNLpor4BiO4DUiguBwHawDUjNXg458BmdrAP4zGG+M2pUI reb62t6fXgm8+7zzDEyRri/wZjvcRauu6SbBmKJ2JnfhtfWbbfSjTjM0kBwStS5g fWnh7xpAWPSPTn9BbZkEiEtMZBOBiYu7LShff8xU8qqMIPKgFgY1+nM0l/Fx3hxB gslv/dEVBcswmZX613rwdmLEzw== -----END CERTIFICATE-----Generated at Sun Mar 29 18:38:06 2026 by rpki-client