$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: mC/8JgYyNINHdTTuor0TFfj/VEIJ1MRmSdNWTR9/FSc= Subject key identifier: 50:C4:D2:79:1E:EC:F9:F8:DD:AE:1F:57:DC:F3:96:58:C7:5D:20:F6 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 0153 Signing time: Wed 11 Mar 2026 04:02:45 +0000 Manifest this update: Wed 11 Mar 2026 04:02:44 +0000 Manifest next update: Wed 18 Mar 2026 04:02:44 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: PdJYrDIMkK5LcdjbbmhdNxgNTA5yGL3jT6p7PCZyMIg=) 2: 680D797023E611EF8165F17BC4F9AE02.roa (hash: aW25kEfOm3Y6z0dJwR8QkAiS+sy9HyUcqVGhB3onEl8=) 3: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: JflVdPBidB0mm33Bgl8MOrVtKlhbLqttKFMf8YGitR8=) 4: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: 7+vMXmZRIYIKIxBz5RQMdseZAdAsObbhTp7dlt06B0M=) 5: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6ECFRbdi/OwcVFk5I96YrsKDQE1WQn7CfR1VvBkvdok=) 6: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sO0aVU0cFwGpTz0cQ9IUqdHUM9QV4sMVuL+bslRBxPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 04:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Mar 11 04:02:44 2026 GMT Not After : Mar 18 04:02:44 2026 GMT Subject: CN=69b0e965-8f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:33:5e:41:76:35:94:7a:2f:2d:64:69:7b: 9b:51:9b:c8:3b:43:21:44:0e:88:ff:e1:c2:73:43: a0:e1:8f:23:79:6b:4c:ac:b0:0a:01:36:fc:f2:32: 1f:af:2d:fa:60:73:8d:e6:c0:50:82:50:1e:d2:e5: 61:84:c4:71:e4:72:e4:63:5a:70:5f:e3:3d:25:0b: 57:d1:ba:12:59:a1:6b:6d:59:62:9e:83:fe:92:3f: b7:43:ef:6a:cd:82:bd:9b:a9:b7:9b:a9:b9:c4:e1: 0c:b0:30:39:99:2a:6d:8b:75:3b:5b:e9:86:5f:b5: c4:ba:f3:77:64:6e:dd:f8:bf:a9:50:c8:75:2d:af: e2:a8:b4:72:6b:b7:74:ba:c5:80:2d:48:67:83:29: ae:a5:ab:41:c4:46:85:76:77:20:d3:d7:41:fd:4f: 7b:5a:f6:9d:79:04:76:1b:1b:a8:9b:91:8d:7d:e1: 4d:06:85:6a:e0:a3:6a:04:e6:34:29:41:a4:53:14: a1:7b:ec:a3:76:61:c8:8b:d8:46:eb:2a:67:df:6a: fc:15:7a:b5:b2:40:0a:fe:3c:53:47:a5:8d:64:b6: d9:a8:a4:e6:c7:91:90:ee:20:e6:09:b3:b3:71:14: 15:52:7a:10:20:2c:28:bd:2a:f6:5a:2c:4b:57:b9: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C4:D2:79:1E:EC:F9:F8:DD:AE:1F:57:DC:F3:96:58:C7:5D:20:F6 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:95:66:bd:1e:97:36:a0:9d:dc:61:7c:ca:14:85:6a:ac:f5: 45:81:16:bc:c1:08:5e:db:71:8d:14:e4:41:2e:2a:2e:d9:67: ae:42:c9:cc:ae:12:b6:8b:af:9c:0a:14:73:40:59:68:df:a1: 2b:7f:0a:a3:c7:e9:fa:68:4f:7c:66:3e:32:2f:82:06:1f:b4: 45:86:8c:0d:01:8b:f0:0a:eb:ae:54:d7:47:26:8e:1d:b0:45: 0d:ff:f5:f5:ff:ad:3c:de:9c:a2:46:6d:2e:82:37:b0:32:8a: a1:3e:80:30:df:b0:78:2a:09:9b:aa:2c:31:2a:e6:e5:58:cc: aa:b3:05:91:85:90:1d:4a:b5:79:75:7d:32:46:c8:e9:aa:00: 81:47:7e:36:8c:49:c7:e2:fa:af:00:a9:76:59:b1:89:ef:d3: 86:7e:62:6e:e4:bc:ce:ec:d1:32:6d:ef:33:04:d8:b8:ad:8d: 7f:28:99:1c:9c:69:7c:89:e0:a6:1d:28:93:04:b8:3e:0e:ab: 1d:b3:f9:1b:fc:ea:dd:62:33:25:f4:24:85:01:78:a7:d0:c1: 96:19:7d:05:7d:f2:98:c8:58:99:9c:17:3d:f8:16:13:01:fd: f9:61:9a:cf:64:f8:1a:a7:16:ce:68:b5:47:d6:1f:0d:7f:d7: ad:d7:0d:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjYwMzExMDQwMjQ0WhcNMjYwMzE4MDQwMjQ0WjAYMRYwFAYD VQQDEw02OWIwZTk2NS04ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2swzXkF2NZR6Ly1kaXubUZvIO0MhRA6I/+HCc0Og4Y8jeWtMrLAKATb88jIf ry36YHON5sBQglAe0uVhhMRx5HLkY1pwX+M9JQtX0boSWaFrbVlinoP+kj+3Q+9q zYK9m6m3m6m5xOEMsDA5mSpti3U7W+mGX7XEuvN3ZG7d+L+pUMh1La/iqLRya7d0 usWALUhngymupatBxEaFdncg09dB/U97WvadeQR2Gxuom5GNfeFNBoVq4KNqBOY0 KUGkUxShe+yjdmHIi9hG6ypn32r8FXq1skAK/jxTR6WNZLbZqKTmx5GQ7iDmCbOz cRQVUnoQICwovSr2WixLV7mZfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDE0nke 7Pn43a4fV9zzlljHXSD2MB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGpVmvR6XNqCd3GF8yhSFaqz1RYEWvMEIXttxjRTkQS4qLtlnrkLJzK4Stouv nAoUc0BZaN+hK38Ko8fp+mhPfGY+Mi+CBh+0RYaMDQGL8ArrrlTXRyaOHbBFDf/1 9f+tPN6cokZtLoI3sDKKoT6AMN+weCoJm6osMSrm5VjMqrMFkYWQHUq1eXV9MkbI 6aoAgUd+NoxJx+L6rwCpdlmxie/Thn5ibuS8zuzRMm3vMwTYuK2NfyiZHJxpfIng ph0okwS4Pg6rHbP5G/zq3WIzJfQkhQF4p9DBlhl9BX3ymMhYmZwXPfgWEwH9+WGa z2T4GqcWzmi1R9YfDX/XrdcNwQ== -----END CERTIFICATE-----Generated at Wed Mar 11 16:41:58 2026 by rpki-client