$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: PjsIy95nR1iCHPOK8ltQXeVr71zqS+VrM/BF5UqpAjI= Subject key identifier: 2A:11:B5:7B:D1:36:35:B8:FC:4E:2A:59:B8:51:83:D6:6D:C7:97:85 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 01D0 Signing time: Fri 13 Mar 2026 02:53:35 +0000 Manifest this update: Fri 13 Mar 2026 02:53:34 +0000 Manifest next update: Fri 20 Mar 2026 02:53:34 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: Y78uuU7IUQl+KWPPHCbn2kDGUrI1alzaSdgniGqbcAA=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 3: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) 4: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Mar 13 02:53:34 2026 GMT Not After : Mar 20 02:53:34 2026 GMT Subject: CN=69b37c2f-e6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:44:0f:06:e6:34:67:71:8c:8a:94:06:81: 8e:4c:1e:10:90:6d:c3:3d:15:b6:b8:f7:13:e6:05: 60:44:f1:2c:96:86:83:88:2f:d0:2d:71:33:bb:90: 59:d0:d1:e9:eb:48:0d:1b:83:25:50:d2:96:bc:c5: ad:73:25:3a:06:32:c6:ec:4f:be:3a:de:b1:68:e9: 6e:af:24:7e:da:b5:2c:9e:c0:d3:68:75:41:db:66: 23:c5:5d:24:4a:5c:67:4c:43:a0:ea:22:3d:7a:ca: e0:dd:84:fb:bf:95:e7:ab:5d:9d:34:48:47:3a:83: 99:91:0e:9c:b5:24:12:6b:b1:67:11:ff:b8:a7:a9: 65:94:00:f0:de:2c:fc:2c:12:4e:93:f9:9d:26:fe: 52:bc:31:c3:19:00:f8:bd:b1:35:6f:f4:9e:d1:7f: 04:fb:3d:5e:09:46:4e:f2:c5:a3:02:30:bb:f5:c9: 8b:bb:36:a0:7e:c9:fe:bb:f3:7a:d7:5a:41:c0:ab: 2e:07:1d:5c:c3:23:b8:df:92:a9:92:a8:1a:de:5d: 86:8a:1d:d0:68:ad:11:41:7b:04:bd:6c:82:84:ba: ce:62:49:f7:4d:b5:b8:82:b0:9f:c7:33:6e:e1:51: 8b:97:d7:46:0d:2b:1a:67:f2:3f:63:ae:04:d1:51: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:11:B5:7B:D1:36:35:B8:FC:4E:2A:59:B8:51:83:D6:6D:C7:97:85 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:17:d5:ec:b7:66:d6:5f:34:17:b6:04:62:9d:e2:58:d9:9d: d7:e5:9e:f8:0a:74:87:e4:e5:03:88:bf:44:19:d6:ac:13:3e: fc:cf:97:2f:3f:34:18:6c:2d:3c:56:09:c1:fe:f5:12:af:ba: 45:6f:4e:34:be:26:69:bc:18:15:84:14:8f:14:a1:66:45:cc: b7:f5:e9:c9:f2:10:73:19:28:d8:2c:a6:5b:17:f5:a2:9b:6a: e7:bd:26:47:ab:44:ae:44:8b:0a:e3:84:b8:b0:03:48:5d:13: 93:73:ec:32:25:a6:25:74:b7:cb:93:a7:7e:49:f9:29:0b:2f: 39:40:58:34:0b:42:37:82:30:0a:e9:59:5d:90:9a:14:20:fe: 81:62:a2:27:c5:9e:b4:63:33:fd:91:2e:b6:c5:76:c1:f5:82: 20:c8:74:32:4a:60:cd:05:c9:06:e4:64:44:ba:06:a8:5d:cd: 35:de:ce:dc:b9:ce:31:cf:27:a8:bf:51:aa:f9:15:b6:5d:08: d9:bc:8c:37:10:82:88:56:98:06:1a:fd:1d:6e:80:89:76:a3: 80:8c:97:f1:01:bc:12:73:9e:27:2c:d7:66:c2:91:3b:18:e5: 97:14:4f:d2:86:fd:a4:6d:d4:f1:b5:7c:82:53:96:98:fe:55: b2:43:9c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwMzEzMDI1MzM0WhcNMjYwMzIwMDI1MzM0WjAYMRYwFAYD VQQDEw02OWIzN2MyZi1lNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiMZEDwbmNGdxjIqUBoGOTB4QkG3DPRW2uPcT5gVgRPEsloaDiC/QLXEzu5BZ 0NHp60gNG4MlUNKWvMWtcyU6BjLG7E++Ot6xaOluryR+2rUsnsDTaHVB22YjxV0k SlxnTEOg6iI9esrg3YT7v5Xnq12dNEhHOoOZkQ6ctSQSa7FnEf+4p6lllADw3iz8 LBJOk/mdJv5SvDHDGQD4vbE1b/Se0X8E+z1eCUZO8sWjAjC79cmLuzagfsn+u/N6 11pBwKsuBx1cwyO435Kpkqga3l2Gih3QaK0RQXsEvWyChLrOYkn3TbW4grCfxzNu 4VGLl9dGDSsaZ/I/Y64E0VGUzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoRtXvR NjW4/E4qWbhRg9Ztx5eFMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQRfV7Ldm1l80F7YEYp3iWNmd1+We+Ap0h+TlA4i/RBnWrBM+/M+XLz80GGwt PFYJwf71Eq+6RW9ONL4mabwYFYQUjxShZkXMt/XpyfIQcxko2CymWxf1optq570m R6tErkSLCuOEuLADSF0Tk3PsMiWmJXS3y5Onfkn5KQsvOUBYNAtCN4IwCulZXZCa FCD+gWKiJ8WetGMz/ZEutsV2wfWCIMh0MkpgzQXJBuRkRLoGqF3NNd7O3LnOMc8n qL9RqvkVtl0I2byMNxCCiFaYBhr9HW6AiXajgIyX8QG8EnOeJyzXZsKROxjllxRP 0ob9pG3U8bV8glOWmP5VskOcmQ== -----END CERTIFICATE-----Generated at Fri Mar 13 20:54:29 2026 by rpki-client