$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json) Hash identifier: QpdMo1+B6LKIxAxnvTwTkXhICfP3FMEMCsLGz1NqqmY= Subject key identifier: 64:02:99:4B:10:41:D5:B0:6A:A5:38:EB:EF:84:14:84:5C:67:5A:15 Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 1182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft Manifest number: 1169 Signing time: Sat 04 Apr 2026 17:06:24 +0000 Manifest this update: Sat 04 Apr 2026 17:06:23 +0000 Manifest next update: Sat 11 Apr 2026 17:06:23 +0000 Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: F4e3TPCzIx1GdXXGoIaa3RCnLEyiPhwtWNzJcyUMPv0=) 2: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: Ud/JKk6QlCxXI4KwNPCTKP9LkloyMw6VvS32jmp6Krw=) 3: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: k3+Ou4X9wcJh1yLYI+8ldxiD6GRd7DGFoehIoAroQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4482 (0x1182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Validity Not Before: Apr 4 17:06:23 2026 GMT Not After : Apr 11 17:06:23 2026 GMT Subject: CN=69d14510-a3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:c4:f6:6d:c9:0f:c6:b4:76:79:80:1a:41: 03:25:32:05:b7:bf:dc:2b:31:d4:0e:c1:42:72:f8: 3c:67:1c:ea:ea:ff:0a:26:4e:e8:be:9b:02:be:02: 1a:3f:9f:6a:37:39:da:81:3d:34:02:2a:a3:05:bf: 4b:b9:9c:77:0b:33:b3:db:97:5c:6c:3b:1f:0c:55: e9:ea:4a:f0:40:1d:03:42:69:16:cc:31:d0:aa:a0: 74:52:3a:69:e3:08:0a:bb:0f:04:e5:f7:17:13:55: a1:11:70:5c:03:6f:1e:1c:c6:4c:2d:2e:e7:82:ae: 8f:fb:b9:cc:12:10:c6:d7:ba:48:be:b6:57:a9:40: c8:f0:2b:e0:0b:8c:6a:99:a4:50:fe:aa:19:33:2a: 64:26:9c:c7:6b:c0:ef:5b:61:7f:3e:2d:00:22:cf: c1:51:aa:c2:5c:f8:4a:29:8f:a5:11:43:59:c5:4a: 64:4c:8c:41:c2:e2:a1:90:a9:0a:d1:4e:c0:ed:5d: ef:ee:92:cf:97:32:57:db:96:8d:f5:60:5b:fd:9c: 65:1e:af:8f:e0:f6:af:da:e5:b6:cb:b3:4b:56:41: aa:ba:4e:38:70:16:d1:17:9e:56:a0:2b:cb:c6:18: 77:8f:7d:c6:42:2e:fe:86:3b:3e:e6:a6:60:1b:77: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:02:99:4B:10:41:D5:B0:6A:A5:38:EB:EF:84:14:84:5C:67:5A:15 X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:59:f6:b5:7e:ab:cc:a7:f1:ef:57:10:bc:c2:3d:c3:3e: ee:fe:73:22:3d:53:b3:09:d0:73:92:99:b7:66:6f:b8:b5:e2: 98:38:6f:57:3d:aa:78:b3:f3:26:29:e1:ad:0e:27:95:6a:99: 46:f7:71:92:8e:4f:49:82:11:b1:2e:85:c3:4b:48:f5:98:e1: 96:c7:2d:55:51:14:ac:b1:b8:2c:42:a2:8b:a4:33:68:48:d7: a1:0a:f4:a4:6f:59:a3:2f:05:02:4e:2d:5b:27:4e:cd:b9:82: 49:e9:ea:4c:a9:86:c6:42:40:b5:ef:44:22:8b:19:3f:a4:f7: 60:92:35:01:b0:88:4e:8a:91:1f:63:e5:7d:66:be:b0:4d:58: 2e:1d:0f:2d:ba:1c:73:a1:b6:d2:fe:79:8f:9e:59:27:7e:e6: 7a:48:e2:99:48:a2:00:66:62:19:7d:66:db:50:cd:8e:3e:c9: bb:17:f2:f0:87:d2:73:81:ed:97:61:78:c8:a6:8e:b5:8d:f5: 14:06:8c:2a:07:ac:5b:18:2e:ac:59:86:71:a4:a3:a3:cb:37: 98:b0:bf:22:26:d4:32:be:6e:96:38:d0:28:90:53:6a:64:05: 1c:fb:22:27:44:c6:ba:c4:fd:2e:fc:ae:9c:f1:ba:ad:a2:5e: e0:6b:38:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjYwNDA0MTcwNjIzWhcNMjYwNDExMTcwNjIzWjAYMRYwFAYD VQQDEw02OWQxNDUxMC1hM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21vE9m3JD8a0dnmAGkEDJTIFt7/cKzHUDsFCcvg8Zxzq6v8KJk7ovpsCvgIa P59qNznagT00AiqjBb9LuZx3CzOz25dcbDsfDFXp6krwQB0DQmkWzDHQqqB0Ujpp 4wgKuw8E5fcXE1WhEXBcA28eHMZMLS7ngq6P+7nMEhDG17pIvrZXqUDI8CvgC4xq maRQ/qoZMypkJpzHa8DvW2F/Pi0AIs/BUarCXPhKKY+lEUNZxUpkTIxBwuKhkKkK 0U7A7V3v7pLPlzJX25aN9WBb/ZxlHq+P4Pav2uW2y7NLVkGquk44cBbRF55WoCvL xhh3j33GQi7+hjs+5qZgG3cwZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQCmUsQ QdWwaqU46++EFIRcZ1oVMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQzMS82NUVGMjk2QTIzMTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVw VmxZQ01lZmdNWDVweThiQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaktZ9rV+q8yn8e9XELzCPcM+7v5zIj1TswnQc5KZt2ZvuLXimDhvVz2qeLPz JinhrQ4nlWqZRvdxko5PSYIRsS6Fw0tI9ZjhlsctVVEUrLG4LEKii6QzaEjXoQr0 pG9Zoy8FAk4tWydOzbmCSenqTKmGxkJAte9EIosZP6T3YJI1AbCIToqRH2PlfWa+ sE1YLh0PLbocc6G20v55j55ZJ37mekjimUiiAGZiGX1m21DNjj7Juxfy8IfSc4Ht l2F4yKaOtY31FAaMKgesWxgurFmGcaSjo8s3mLC/IibUMr5uljjQKJBTamQFHPsi J0TGusT9LvyunPG6raJe4Gs4bg== -----END CERTIFICATE-----Generated at Sun Apr 5 21:09:32 2026 by rpki-client