$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: PtQegrAiTdsX/01koRJ8ubPQOVKmWd+uCmbwNH17wxg= Subject key identifier: C4:02:EF:A6:F7:27:6B:07:82:5C:DE:EF:B3:0A:BE:70:02:53:8E:B4 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0204 Signing time: Sun 05 Apr 2026 02:39:36 +0000 Manifest this update: Sun 05 Apr 2026 02:39:35 +0000 Manifest next update: Sun 12 Apr 2026 02:39:35 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: RtBDWejpyFRCd2UxX25j7NFSlVwgKwXkpMRaY5V7fT4=) 2: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k=) 3: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Apr 5 02:39:35 2026 GMT Not After : Apr 12 02:39:35 2026 GMT Subject: CN=69d1cb68-4523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:05:9c:be:1e:0d:45:27:16:65:86:c5:32: d0:c7:97:51:69:1f:00:b9:42:5d:fa:1e:1f:bb:09: f5:fc:64:f4:0a:c2:90:47:2d:63:5c:68:61:b8:e2: 8b:8c:c4:e5:76:d0:4b:9b:e0:57:6e:50:80:29:1c: b3:bb:49:b3:9c:c1:7a:54:53:f6:bf:63:71:f2:5a: 7e:0e:8e:0e:f9:2e:e8:35:bb:fd:f2:37:45:c7:4a: 12:47:4a:45:ba:72:08:37:6b:03:54:88:e3:e3:0c: 0e:8d:ea:29:dd:02:25:08:d4:41:3d:61:5a:a8:86: 41:42:7f:fa:90:36:bf:8a:b1:a2:f8:65:f2:00:9f: 9a:9e:75:02:82:7d:4b:e0:5d:e1:3b:b5:d5:f2:72: d9:53:4e:68:10:3d:92:5e:4b:a5:c6:7a:d6:de:5b: 07:ac:d0:be:ef:c6:de:5d:e3:52:81:0e:3e:f2:55: b4:a9:4b:82:89:4c:9c:ea:ae:72:4f:bf:ca:51:62: 54:f5:5a:ed:f4:e6:e0:49:22:44:5a:b9:f4:d4:1e: 11:d6:05:d1:08:30:0f:50:26:9c:ee:2c:91:5b:1e: 5c:a6:9e:b0:f8:52:52:69:a6:e4:d3:7e:05:3a:49: 4b:69:16:d1:7e:96:6f:33:52:b8:5a:2c:88:06:eb: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:02:EF:A6:F7:27:6B:07:82:5C:DE:EF:B3:0A:BE:70:02:53:8E:B4 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:18:86:15:f6:08:e6:ec:fb:71:d0:c6:2b:a6:0b:a8:55:1c: 13:88:50:d5:f4:c1:0b:c7:c8:7c:fd:ea:42:07:50:8a:d8:d1: 16:49:66:9b:d8:97:39:6b:0b:0d:34:55:b7:e4:9c:0b:a0:a3: d8:e9:b2:08:87:32:15:e4:9d:73:2e:a3:e4:c1:90:f4:0f:d9: 9c:38:7d:13:48:3f:65:a9:5b:95:c2:83:26:5a:41:09:f7:60: f0:7e:f5:d9:50:ad:40:fb:3d:49:7e:3f:98:b8:a3:79:f9:35: 96:ff:2e:26:7b:61:a0:da:56:89:d2:35:aa:74:81:a5:eb:32: e3:d1:29:56:85:36:5e:f2:d0:8b:69:39:13:4c:87:bf:5b:56: eb:87:bb:a0:88:21:d8:45:9b:a4:98:e4:66:80:68:ca:65:7c: 67:c6:c0:e8:94:cc:34:27:97:5a:fb:40:ee:8b:4c:cc:53:6d: b9:ec:95:f3:e0:a3:21:45:67:65:98:36:6a:4a:90:5c:a1:05: 7a:8d:43:a0:f4:67:a8:7e:55:a6:dc:a1:86:af:b5:3a:03:a4: 64:fb:e4:93:0c:29:28:0e:aa:ea:83:89:0a:89:a2:98:52:5e: 35:f9:6f:d1:d3:a4:f4:cd:2b:94:c0:34:55:e2:af:63:6f:a8: d7:ab:1d:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwNDA1MDIzOTM1WhcNMjYwNDEyMDIzOTM1WjAYMRYwFAYD VQQDEw02OWQxY2I2OC00NTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS0FnL4eDUUnFmWGxTLQx5dRaR8AuUJd+h4fuwn1/GT0CsKQRy1jXGhhuOKL jMTldtBLm+BXblCAKRyzu0mznMF6VFP2v2Nx8lp+Do4O+S7oNbv98jdFx0oSR0pF unIIN2sDVIjj4wwOjeop3QIlCNRBPWFaqIZBQn/6kDa/irGi+GXyAJ+annUCgn1L 4F3hO7XV8nLZU05oED2SXkulxnrW3lsHrNC+78beXeNSgQ4+8lW0qUuCiUyc6q5y T7/KUWJU9Vrt9ObgSSJEWrn01B4R1gXRCDAPUCac7iyRWx5cpp6w+FJSaabk034F OklLaRbRfpZvM1K4WiyIBuspXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQC76b3 J2sHglze77MKvnACU460MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOBiGFfYI5uz7cdDGK6YLqFUcE4hQ1fTBC8fIfP3qQgdQitjRFklmm9iXOWsL DTRVt+ScC6Cj2OmyCIcyFeSdcy6j5MGQ9A/ZnDh9E0g/ZalblcKDJlpBCfdg8H71 2VCtQPs9SX4/mLijefk1lv8uJnthoNpWidI1qnSBpesy49EpVoU2XvLQi2k5E0yH v1tW64e7oIgh2EWbpJjkZoBoymV8Z8bA6JTMNCeXWvtA7otMzFNtueyV8+CjIUVn ZZg2akqQXKEFeo1DoPRnqH5Vptyhhq+1OgOkZPvkkwwpKA6q6oOJComimFJeNflv 0dOk9M0rlMA0VeKvY2+o16sdrg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:45 2026 by rpki-client