$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json) Hash identifier: jlkqihuDrlu177cpqzEgckGhHGGZ1gIodlYDt/nzmQU= Subject key identifier: 9D:9E:BD:DF:6A:9A:AC:25:A0:6F:37:67:B4:A6:5A:4A:03:4E:64:BA Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft Manifest number: 3D Signing time: Tue 03 Mar 2026 08:07:34 +0000 Manifest this update: Tue 03 Mar 2026 08:07:34 +0000 Manifest next update: Tue 10 Mar 2026 08:07:34 +0000 Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: Vo4fWlog8iPdRqr7FdXKCsExseneQJ/YUB3ktb5FXwE=) 2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Validity Not Before: Mar 3 08:07:34 2026 GMT Not After : Mar 10 08:07:34 2026 GMT Subject: CN=69a696c6-747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:bd:fd:31:0d:a8:94:95:d5:f1:96:78:12: 02:94:79:c0:4c:c0:05:e7:62:b6:7c:23:4a:d8:ef: 74:a9:ce:d5:4c:a1:9c:17:ce:be:73:84:25:6b:32: f3:d8:b7:e2:66:9e:75:12:9b:00:9b:56:14:97:34: 09:7a:62:7e:49:ea:31:67:81:21:41:17:6f:db:b9: 12:e3:62:0d:27:61:4d:67:30:9f:7d:56:ae:1b:d6: f8:f2:f7:81:68:ba:23:75:29:1a:8b:9e:be:e6:e8: fe:56:57:15:5c:b7:68:dc:9f:38:cd:f4:c3:b9:42: 3c:27:bd:eb:c9:ce:0c:13:b7:bd:55:c0:65:0b:68: 8d:ff:44:40:00:7f:15:e8:28:b6:1b:7f:c5:f1:94: c7:8a:4d:0e:39:5e:70:b2:62:c8:a1:d3:85:bc:87: 26:b9:ee:a1:b8:39:99:f9:cf:66:c7:f8:f2:a5:9b: ae:40:a4:d9:72:2d:38:56:2c:9c:63:69:6b:3c:6d: 7b:ac:c8:58:e3:c3:af:4a:aa:44:06:b9:74:31:1e: a7:e8:63:63:d6:37:59:97:78:ab:d6:50:9c:fc:25: 78:cb:ea:1b:8b:67:26:1a:67:34:a2:f8:cb:d7:b0: 91:cd:2c:0c:aa:a8:a3:30:48:b9:1a:e2:08:a4:f2: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9E:BD:DF:6A:9A:AC:25:A0:6F:37:67:B4:A6:5A:4A:03:4E:64:BA X509v3 Authority Key Identifier: keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:07:0b:24:05:65:0a:89:83:de:b1:42:ec:05:2d:de:8a:80: 8a:e8:fd:46:65:5e:6c:1f:e4:d6:d4:77:8c:3c:bd:20:72:a6: ae:fd:d9:5a:a7:c9:d4:8e:ee:58:f0:10:95:ef:85:89:47:4e: ba:f7:5b:83:69:84:fd:ed:f5:a1:a3:31:08:ad:f6:80:e0:17: 76:47:c0:02:74:70:38:ac:a5:d3:82:9f:0f:e0:af:f4:3f:38: 95:23:88:3e:8a:a0:2a:13:8f:4b:c7:55:82:6d:a9:cc:11:b6: c5:a5:51:81:8e:b4:3c:89:2d:44:27:06:d0:b9:65:11:d8:89: 0a:ea:5c:76:c8:27:4a:64:e5:13:ae:e0:0b:7e:63:13:d5:5c: 6d:c2:7c:7d:bf:9c:42:c4:62:09:2c:a5:28:e6:db:05:b1:b2: a4:b2:e4:01:b4:16:ce:8f:bf:2c:37:f1:00:d0:6a:54:2d:18: 62:2a:ae:94:f3:49:ac:03:9f:31:ce:6a:9c:57:56:8e:24:75: e4:2b:bd:1c:92:da:35:0e:64:bb:fb:89:8e:9a:91:49:7f:70: 8e:d9:f3:1d:b5:db:c7:bc:e7:46:62:a6:15:51:eb:2d:6a:33: 92:4c:29:10:8a:53:f8:5e:13:07:04:55:75:10:0d:14:3b:d0: 4b:ca:ce:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoQ0FDQTJFNDQyMjIyQzNFRDg3RTc3NTlCOTVFQzExMThD MzhCODVCNjAeFw0yNjAzMDMwODA3MzRaFw0yNjAzMTAwODA3MzRaMBgxFjAUBgNV BAMTDTY5YTY5NmM2LTc0N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPPr39MQ2olJXV8ZZ4EgKUecBMwAXnYrZ8I0rY73SpztVMoZwXzr5zhCVrMvPY t+JmnnUSmwCbVhSXNAl6Yn5J6jFngSFBF2/buRLjYg0nYU1nMJ99Vq4b1vjy94Fo uiN1KRqLnr7m6P5WVxVct2jcnzjN9MO5QjwnvevJzgwTt71VwGULaI3/REAAfxXo KLYbf8XxlMeKTQ45XnCyYsih04W8hya57qG4OZn5z2bH+PKlm65ApNlyLThWLJxj aWs8bXusyFjjw69KqkQGuXQxHqfoY2PWN1mXeKvWUJz8JXjL6huLZyYaZzSi+MvX sJHNLAyqqKMwSLka4gik8s+pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnZ6932qa rCWgbzdntKZaSgNOZLowHwYDVR0jBBgwFoAUysouRCIiw+2H53WblewRGMOLhbYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0NEQTk1QjQ4QzA4 MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lpdy0ySDUzV2JsZXdSR01PTGhi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXNvdVJDSWl3LTJINTNXYmxld1JHTU9MaGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0NEQTk1QjQ4QzA4MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lpdy0y SDUzV2JsZXdSR01PTGhiWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEBwskBWUKiYPesULsBS3eioCK6P1GZV5sH+TW1HeMPL0gcqau/dlap8nUju5Y 8BCV74WJR06691uDaYT97fWhozEIrfaA4Bd2R8ACdHA4rKXTgp8P4K/0PziVI4g+ iqAqE49Lx1WCbanMEbbFpVGBjrQ8iS1EJwbQuWUR2IkK6lx2yCdKZOUTruALfmMT 1Vxtwnx9v5xCxGIJLKUo5tsFsbKksuQBtBbOj78sN/EA0GpULRhiKq6U80msA58x zmqcV1aOJHXkK70ckto1DmS7+4mOmpFJf3CO2fMdtdvHvOdGYqYVUestajOSTCkQ ilP4XhMHBFV1EA0UO9BLys7T -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:21 2026 by rpki-client