$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: NlgeOb4Zalx7DLXXLkhgBhJytPZhjnzYp0ldm8uAdP8= Subject key identifier: B5:A2:F8:02:15:62:83:AB:7A:C5:55:18:75:86:D1:2D:42:5A:CC:82 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: DD Signing time: Tue 03 Mar 2026 06:12:43 +0000 Manifest this update: Tue 03 Mar 2026 06:12:42 +0000 Manifest next update: Tue 10 Mar 2026 06:12:42 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: jnH+SIcKzHptrfJtPdRuKYUB6cveCouAkSK5A8O5Dcs=) 2: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=) 3: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=) 4: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Mar 3 06:12:42 2026 GMT Not After : Mar 10 06:12:42 2026 GMT Subject: CN=69a67bda-38e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:a4:10:18:a7:26:07:0f:17:b3:56:69:6f: 66:4a:56:91:79:ee:de:d5:82:07:fc:d6:f0:9d:35: e2:16:8d:4a:f5:0e:0a:16:a6:d5:48:1d:3b:7e:99: af:c1:f8:2f:b7:6a:35:bf:6b:f5:5d:83:0d:c1:18: 3f:4e:db:6d:33:77:a7:c5:73:c0:11:81:5f:bc:89: d1:8c:67:10:bb:15:ae:91:72:fd:b1:7d:62:ca:28: a3:f1:3d:b4:46:fd:66:1e:e8:d8:bc:41:3d:e1:27: 5f:a8:44:52:44:00:53:25:08:de:a1:f9:6b:42:94: e3:40:f1:d6:8b:45:ff:cf:49:89:37:2f:61:76:3e: dc:dd:69:7b:c4:4d:eb:90:b9:60:db:6c:90:d5:7e: d9:c4:46:f0:12:64:4a:8e:8c:33:a7:58:78:16:ea: 1e:36:8c:1a:89:2d:7e:44:95:a3:a8:30:73:79:89: 6c:60:b3:46:3d:42:5d:69:f7:3e:ba:dd:1c:00:5d: 14:b5:31:a1:01:23:ee:f4:b4:98:ee:05:7a:cb:cf: ef:a0:29:2d:ee:00:ff:d4:7d:4a:5c:1c:3e:6c:48: 54:45:13:3c:e1:45:e9:f3:20:9d:6b:d6:aa:c3:cd: 02:35:e9:15:4e:3e:c9:5e:ed:d6:f0:1e:83:d4:3d: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:F8:02:15:62:83:AB:7A:C5:55:18:75:86:D1:2D:42:5A:CC:82 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:40:81:60:08:03:9f:89:4f:ce:7d:e1:7a:39:de:59:71: d9:b0:31:67:66:b3:3e:78:e5:78:af:3b:e4:1a:03:56:d1:ee: 96:62:9b:ee:a5:68:ae:c6:1f:2f:40:93:e5:ec:82:cc:c0:21: d7:42:18:ac:9c:88:ed:e0:b6:96:a8:98:eb:5c:ff:73:56:fa: 5a:54:88:97:9a:f7:d4:81:bc:fa:0a:3e:4e:29:dc:d7:8f:2b: c2:77:27:eb:0a:b7:ec:93:68:c2:e6:f7:b0:d8:0c:df:d6:42: a9:8b:75:33:cd:40:e5:3f:a9:b1:23:f8:5a:9d:fa:c3:ae:b1: eb:71:db:c1:67:12:2b:55:76:b7:60:fc:c7:cb:99:a7:49:cc: 9f:4f:3b:4f:b0:ee:97:af:fb:1f:54:30:21:23:8c:93:34:28: 67:96:05:ee:b1:f0:62:d7:c4:eb:13:85:87:84:27:bc:b8:87: 6c:67:cd:c4:4a:0d:c8:66:57:45:a0:04:57:e2:89:36:39:64: a0:2b:75:f6:e6:78:72:7e:6c:78:50:ad:cc:7f:a8:81:f9:35: 53:f9:66:9b:4a:a4:52:b2:f5:4c:29:ff:ef:06:7b:17:5a:c3: 8c:77:59:27:21:f9:91:03:5e:72:9d:02:67:74:9a:85:67:14: 7c:a2:19:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjYwMzAzMDYxMjQyWhcNMjYwMzEwMDYxMjQyWjAYMRYwFAYD VQQDEw02OWE2N2JkYS0zOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIekEBinJgcPF7NWaW9mSlaRee7e1YIH/NbwnTXiFo1K9Q4KFqbVSB07fpmv wfgvt2o1v2v1XYMNwRg/TtttM3enxXPAEYFfvInRjGcQuxWukXL9sX1iyiij8T20 Rv1mHujYvEE94SdfqERSRABTJQjeoflrQpTjQPHWi0X/z0mJNy9hdj7c3Wl7xE3r kLlg22yQ1X7ZxEbwEmRKjowzp1h4FuoeNowaiS1+RJWjqDBzeYlsYLNGPUJdafc+ ut0cAF0UtTGhASPu9LSY7gV6y8/voCkt7gD/1H1KXBw+bEhURRM84UXp8yCda9aq w80CNekVTj7JXu3W8B6D1D0JrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWi+AIV YoOresVVGHWG0S1CWsyCMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWupAgWAIA5+JT8594Xo53llx2bAxZ2azPnjleK875BoDVtHulmKb7qVorsYf L0CT5eyCzMAh10IYrJyI7eC2lqiY61z/c1b6WlSIl5r31IG8+go+Tinc148rwncn 6wq37JNowub3sNgM39ZCqYt1M81A5T+psSP4Wp36w66x63HbwWcSK1V2t2D8x8uZ p0nMn087T7Dul6/7H1QwISOMkzQoZ5YF7rHwYtfE6xOFh4QnvLiHbGfNxEoNyGZX RaAEV+KJNjlkoCt19uZ4cn5seFCtzH+ogfk1U/lmm0qkUrL1TCn/7wZ7F1rDjHdZ JyH5kQNecp0CZ3SahWcUfKIZdg== -----END CERTIFICATE-----Generated at Wed Mar 4 15:48:13 2026 by rpki-client