$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: r+ExFkxJQ8HvuAC1t4WAU+7awmiFAR5zB8rfF9YFFfE= Subject key identifier: 2A:A4:78:08:F8:28:89:8B:C1:8A:FD:D0:E8:C3:4F:0A:67:EE:82:FD Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 01C0 Signing time: Sun 05 Apr 2026 03:25:36 +0000 Manifest this update: Sun 05 Apr 2026 03:25:36 +0000 Manifest next update: Sun 12 Apr 2026 03:25:36 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: g5uIMJ4bD0ixhIgx9Qp5iK+Jq3iYA0Nx3WnE0znv4do=) 2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=) 3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Validity Not Before: Apr 5 03:25:36 2026 GMT Not After : Apr 12 03:25:36 2026 GMT Subject: CN=69d1d630-a29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:3c:e2:89:9e:d2:03:bd:ea:b2:0b:63:66: 80:cf:36:00:ac:5d:08:46:b2:11:d7:ae:3e:53:a3: ea:d8:04:c1:e4:78:42:02:f6:65:e5:05:45:48:54: 92:9e:e8:61:f3:22:38:6a:dc:e2:59:09:5a:38:af: d7:5f:cb:5a:51:d2:c2:81:ad:8a:7c:bc:27:ef:bc: 90:ff:fc:d7:75:0c:6e:7e:f5:d1:01:f1:c0:ee:99: a0:d9:8f:0e:42:c6:93:72:a8:73:f5:1a:31:3d:6f: 59:35:bb:5c:45:51:a3:73:56:d9:7d:29:57:f7:49: 8d:89:c7:0d:f0:18:90:62:f4:1f:d1:8b:31:32:cc: 5b:d1:d1:fd:7f:df:1e:4f:89:4e:72:a6:fd:76:08: f9:ca:43:af:2c:0b:5f:68:c9:96:fa:bf:84:0c:f4: 1c:b0:97:c1:fc:1e:f8:59:ca:c3:e1:22:e6:dc:3f: 2c:fe:d2:4e:26:50:b4:f0:5d:02:11:55:76:bd:01: 1e:4c:b9:cb:0b:99:33:e8:81:08:ac:e2:d8:5a:f9: f7:dc:de:bf:87:db:fb:32:6c:a4:8e:5d:ce:1b:4b: d9:f0:27:3d:80:56:3b:78:02:71:ca:c1:a9:80:72: 1a:3d:55:06:f0:b9:2f:5e:a7:0a:06:5f:53:16:d7: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A4:78:08:F8:28:89:8B:C1:8A:FD:D0:E8:C3:4F:0A:67:EE:82:FD X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f7:75:0d:81:64:d9:dd:13:85:01:6f:b2:92:3a:3b:a3:3e: 01:b0:57:0c:95:f0:39:ef:f3:67:9a:25:57:d7:57:25:a5:aa: 32:bb:36:41:87:9f:d1:11:4a:d7:4c:8f:24:53:33:e7:51:32: 2f:e5:dd:c7:e6:ea:59:1d:0e:10:eb:a2:80:c9:da:c0:d3:06: 6b:ae:13:51:d7:59:1f:96:fb:4a:5c:fa:e9:b1:08:39:54:7b: 9d:62:25:de:a9:9a:23:ec:ea:92:23:51:91:36:40:48:1b:f6: fb:43:f4:e8:28:dd:47:99:57:20:69:7a:24:8c:54:03:a4:51: af:3a:70:64:61:66:93:40:5b:7f:33:b6:6d:fc:cf:ab:f6:d6: 8c:07:fd:f6:d2:6a:42:d6:8c:da:e5:1c:65:42:6c:c1:3f:26: d7:52:32:78:ee:7a:c5:e2:89:05:46:b0:63:b2:87:67:47:08: 74:6f:93:66:a6:ec:1a:c3:d5:3f:e4:bf:ad:9d:c0:d2:f4:c7: cc:c4:ee:36:ab:52:0a:47:f8:56:af:56:9d:ca:63:d7:47:d3: 9e:a6:4d:8a:4a:bb:95:11:da:8d:82:84:24:c2:97:f6:a7:34: 38:21:9d:2a:d4:15:23:7d:79:6d:a9:23:2e:60:b3:0d:74:95: ad:0f:63:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz MjVDNUE2MEIwHhcNMjYwNDA1MDMyNTM2WhcNMjYwNDEyMDMyNTM2WjAYMRYwFAYD VQQDEw02OWQxZDYzMC1hMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqok84ome0gO96rILY2aAzzYArF0IRrIR164+U6Pq2ATB5HhCAvZl5QVFSFSS nuhh8yI4atziWQlaOK/XX8taUdLCga2KfLwn77yQ//zXdQxufvXRAfHA7pmg2Y8O QsaTcqhz9RoxPW9ZNbtcRVGjc1bZfSlX90mNiccN8BiQYvQf0YsxMsxb0dH9f98e T4lOcqb9dgj5ykOvLAtfaMmW+r+EDPQcsJfB/B74WcrD4SLm3D8s/tJOJlC08F0C EVV2vQEeTLnLC5kz6IEIrOLYWvn33N6/h9v7Mmykjl3OG0vZ8Cc9gFY7eAJxysGp gHIaPVUG8LkvXqcKBl9TFtf9SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqkeAj4 KImLwYr90OjDTwpn7oL9MB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfd1DYFk2d0ThQFvspI6O6M+AbBXDJXwOe/zZ5olV9dXJaWqMrs2QYef0RFK 10yPJFMz51EyL+Xdx+bqWR0OEOuigMnawNMGa64TUddZH5b7Slz66bEIOVR7nWIl 3qmaI+zqkiNRkTZASBv2+0P06CjdR5lXIGl6JIxUA6RRrzpwZGFmk0BbfzO2bfzP q/bWjAf99tJqQtaM2uUcZUJswT8m11IyeO56xeKJBUawY7KHZ0cIdG+TZqbsGsPV P+S/rZ3A0vTHzMTuNqtSCkf4Vq9Wncpj10fTnqZNikq7lRHajYKEJMKX9qc0OCGd KtQVI315bakjLmCzDXSVrQ9jAw== -----END CERTIFICATE-----Generated at Sun Apr 5 23:51:03 2026 by rpki-client