$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json) Hash identifier: dWwTBUbZms5W4g74q3hHht0Idb2diAkg6Jlvop/bPLA= Subject key identifier: 85:6A:3C:86:18:B1:15:4E:D1:A9:26:08:DF:5F:E5:D3:74:77:ED:31 Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Certificate serial: 1BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft Manifest number: 1B9A Signing time: Thu 12 Mar 2026 16:09:47 +0000 Manifest this update: Thu 12 Mar 2026 16:09:47 +0000 Manifest next update: Thu 19 Mar 2026 16:09:47 +0000 Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: LtONZCB4yceNl1u453tEteNmCKQbflouWJnLRVjer/c=) 2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: jz3mUG66x+LfglClnYcC2zPJcIcV277FZw8xXWBFQHI=) 3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: fSrLukxaAM59ZQEmbnxQBdopl2ygjyhAoNct9kxcFt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7124 (0x1bd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Validity Not Before: Mar 12 16:09:47 2026 GMT Not After : Mar 19 16:09:47 2026 GMT Subject: CN=69b2e54b-1bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:05:9c:99:d3:e2:df:57:ec:f4:90:b3:b1: 92:85:59:ac:ee:c7:6d:b5:54:c3:b7:eb:d5:4c:0b: 72:0f:57:bd:c4:3e:af:4b:d6:0c:e7:ce:c9:05:6b: 7b:63:26:09:14:06:6e:53:0b:db:71:79:c5:27:a2: 10:25:a3:07:ef:84:6f:6a:18:45:4b:ff:12:3b:8e: 96:c8:70:8b:b9:e9:75:23:1b:58:e6:55:45:11:45: cd:28:b9:51:72:21:81:a7:e2:94:c8:cd:c3:69:9e: f0:30:8a:a9:43:02:d5:c8:1e:b3:38:ae:ee:82:eb: d7:8d:be:99:a9:d9:ef:58:0c:68:c0:15:7c:de:14: e4:ff:4d:96:17:71:31:47:66:d8:fe:dd:f6:e3:ca: 11:a1:72:b0:28:8b:64:78:20:01:6c:35:be:35:4f: f8:45:69:43:a3:f0:bc:d9:17:f2:7c:2f:c4:19:a2: 44:ea:7e:74:8a:b1:e5:2b:aa:2f:03:e8:d9:29:3b: f9:a6:9e:2b:19:00:74:0d:6a:24:ea:82:29:19:51: 7d:9a:6a:23:c1:3f:21:3a:e5:34:8a:e2:53:0c:19: 8d:19:8a:62:6b:1f:53:e1:72:26:6c:1e:78:8a:be: 15:5e:2f:1d:13:f5:e1:a5:fd:6e:4d:32:35:02:e0: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6A:3C:86:18:B1:15:4E:D1:A9:26:08:DF:5F:E5:D3:74:77:ED:31 X509v3 Authority Key Identifier: keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7d:4c:ee:ec:65:8b:8b:26:97:95:5e:dc:dd:21:55:f2:4c: 0a:77:88:25:75:93:57:22:f4:d6:41:fc:68:63:c3:d3:31:90: dd:a3:32:e1:1e:36:4f:d8:41:3d:17:b5:cb:12:46:e5:77:7e: 0e:02:bd:57:07:24:70:b5:c1:fc:5b:2c:53:d3:d3:63:58:76: a6:2e:f5:14:b1:41:b2:50:f9:61:50:2f:3c:b0:27:b3:ec:1d: 56:b4:51:f8:29:39:98:98:b5:07:2d:24:6b:35:33:2e:c9:0e: fd:b8:27:57:d0:1a:ce:dd:2c:f8:29:42:df:6c:06:2f:70:c1: 83:34:e9:f7:84:5a:21:11:aa:38:fd:40:86:b4:1d:15:99:15: 3c:36:13:47:d3:37:6d:f8:dd:0e:b6:d3:93:83:dc:05:a2:9d: 1c:03:9a:fd:7a:94:98:f4:45:12:16:ea:86:6f:26:27:c9:92: f5:2a:02:b4:2d:b5:e5:16:39:55:f6:5b:06:20:61:e3:c5:71: db:72:97:e2:f7:d0:91:df:c8:4c:41:3e:b0:dc:5b:d6:1e:04: 92:6a:fd:2a:02:f5:af:f5:66:57:58:1b:5f:4b:59:3d:85:04: 07:04:db:f6:75:41:9c:70:01:9b:17:2e:df:b6:f8:22:95:97: b5:ae:e4:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB QTNGQkVGNzAwHhcNMjYwMzEyMTYwOTQ3WhcNMjYwMzE5MTYwOTQ3WjAYMRYwFAYD VQQDEw02OWIyZTU0Yi0xYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziEFnJnT4t9X7PSQs7GShVms7sdttVTDt+vVTAtyD1e9xD6vS9YM587JBWt7 YyYJFAZuUwvbcXnFJ6IQJaMH74RvahhFS/8SO46WyHCLuel1IxtY5lVFEUXNKLlR ciGBp+KUyM3DaZ7wMIqpQwLVyB6zOK7uguvXjb6ZqdnvWAxowBV83hTk/02WF3Ex R2bY/t3248oRoXKwKItkeCABbDW+NU/4RWlDo/C82RfyfC/EGaJE6n50irHlK6ov A+jZKTv5pp4rGQB0DWok6oIpGVF9mmojwT8hOuU0iuJTDBmNGYpiax9T4XImbB54 ir4VXi8dE/Xhpf1uTTI1AuBvNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVqPIYY sRVO0akmCN9f5dN0d+0xMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0NCMy8xREI3OTgzQzI1OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05 S1Y5WGlFY3FhaENxUDc3M0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPH1M7uxli4sml5Ve3N0hVfJMCneIJXWTVyL01kH8aGPD0zGQ3aMy4R42T9hB PRe1yxJG5Xd+DgK9VwckcLXB/FssU9PTY1h2pi71FLFBslD5YVAvPLAns+wdVrRR +Ck5mJi1By0kazUzLskO/bgnV9Aazt0s+ClC32wGL3DBgzTp94RaIRGqOP1AhrQd FZkVPDYTR9M3bfjdDrbTk4PcBaKdHAOa/XqUmPRFEhbqhm8mJ8mS9SoCtC215RY5 VfZbBiBh48Vx23KX4vfQkd/ITEE+sNxb1h4Ekmr9KgL1r/VmV1gbX0tZPYUEBwTb 9nVBnHABmxcu37b4IpWXta7k0w== -----END CERTIFICATE-----Generated at Thu Mar 12 18:21:03 2026 by rpki-client