$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: F0FSRonQHFBsOGBZUhONcdsMB+XUPuoLxJMUZU0RbaE= Subject key identifier: 9E:4F:9C:E0:77:22:DA:C5:9B:17:D7:97:98:D8:41:14:48:F1:27:F5 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 054D Signing time: Sat 04 Apr 2026 23:16:30 +0000 Manifest this update: Sat 04 Apr 2026 23:16:29 +0000 Manifest next update: Sat 11 Apr 2026 23:16:29 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: 9HNgUPYlqkhkFCIg6yDYrCfmK7cjdWbe4cKohsmwGcc=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Apr 4 23:16:29 2026 GMT Not After : Apr 11 23:16:29 2026 GMT Subject: CN=69d19bce-fedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:59:1b:c7:27:c3:44:49:c3:4e:ba:97:f9: b2:77:96:14:87:03:00:c7:d3:29:36:6a:17:aa:d3: c9:d3:99:93:c2:e0:9a:67:dd:93:0e:d4:55:ea:03: 5e:58:c8:e8:eb:e3:01:a4:b7:a1:c3:ce:21:6d:63: ee:55:11:2f:db:3c:97:70:8e:6f:21:66:4e:d4:71: 0a:f5:1f:63:58:66:d5:ac:bf:f7:8f:23:2e:b2:b9: 1e:3a:fc:e2:ca:3f:fa:4e:b9:8f:86:ba:f4:2e:77: c7:ce:f6:f7:f5:f4:e7:a4:09:52:b5:91:c7:5e:05: 00:75:4a:48:3c:fa:25:76:18:5d:f7:6a:fd:8a:27: 20:c3:cc:b8:52:9e:84:50:b7:ca:f2:67:e3:ee:58: 3b:50:f9:e8:a2:cc:e6:94:bd:8e:99:1b:ce:3b:c4: 14:4d:fe:ec:92:09:11:67:41:79:90:21:44:87:9f: 4b:6a:6b:96:bb:fd:49:92:9a:d0:e9:07:54:90:8c: 65:e6:d5:c9:f6:3c:8b:61:f6:06:89:c1:39:28:c4: 07:a4:2f:4f:64:41:49:f5:c5:ba:61:59:e5:7b:7c: 7e:6d:47:84:eb:f2:2e:86:3f:d7:c1:47:b5:5b:07: 4e:86:94:87:cb:16:14:d8:d7:82:d6:4b:10:9e:b6: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4F:9C:E0:77:22:DA:C5:9B:17:D7:97:98:D8:41:14:48:F1:27:F5 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c9:6f:26:b5:80:4f:15:38:2e:da:97:e1:23:09:a4:46:1c: 75:ea:09:52:42:ec:81:ac:eb:d3:47:28:43:4b:ad:e7:e5:61: 69:f2:ef:88:a2:36:ed:6d:c6:b3:6d:28:5e:77:ad:64:63:96: 89:c5:cf:f3:3d:90:db:87:0c:d5:35:7f:27:ba:6f:92:2f:4b: 08:ef:56:ee:e4:24:d2:aa:f4:21:f6:91:81:1d:f4:f4:d2:22: be:b3:7c:f4:37:bc:cf:65:37:22:eb:e9:09:cf:a7:ec:89:09: 00:12:32:e8:ab:76:93:f3:b1:0c:d0:70:f2:73:d0:0d:4e:0b: c6:1f:ef:cb:fb:46:4f:78:e8:93:89:34:fd:29:19:08:9d:de: 8e:cd:b4:fa:00:c9:64:8e:a6:aa:52:10:f9:fd:c2:39:78:46: 8d:85:15:c4:66:41:82:b8:9b:87:47:4f:71:0e:24:58:37:96: 81:b2:55:76:71:43:f0:28:c2:88:79:18:e2:76:fc:1b:3f:d4: f5:5b:1b:5e:f9:f2:54:17:26:ff:bd:1e:a0:63:c8:21:4f:7c: 99:29:57:9e:86:84:2a:ec:b2:81:13:95:f4:a0:7a:23:1a:ce: 6b:ad:89:4d:9d:c3:b1:97:65:0d:24:0c:ec:2b:bd:10:19:db: 62:78:19:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwNDA0MjMxNjI5WhcNMjYwNDExMjMxNjI5WjAYMRYwFAYD VQQDEw02OWQxOWJjZS1mZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J1ZG8cnw0RJw066l/myd5YUhwMAx9MpNmoXqtPJ05mTwuCaZ92TDtRV6gNe WMjo6+MBpLehw84hbWPuVREv2zyXcI5vIWZO1HEK9R9jWGbVrL/3jyMusrkeOvzi yj/6TrmPhrr0LnfHzvb39fTnpAlStZHHXgUAdUpIPPoldhhd92r9iicgw8y4Up6E ULfK8mfj7lg7UPnooszmlL2OmRvOO8QUTf7skgkRZ0F5kCFEh59LamuWu/1JkprQ 6QdUkIxl5tXJ9jyLYfYGicE5KMQHpC9PZEFJ9cW6YVnle3x+bUeE6/Iuhj/XwUe1 WwdOhpSHyxYU2NeC1ksQnrZXmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5PnOB3 ItrFmxfXl5jYQRRI8Sf1MB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkclvJrWATxU4LtqX4SMJpEYcdeoJUkLsgazr00coQ0ut5+VhafLviKI27W3G s20oXnetZGOWicXP8z2Q24cM1TV/J7pvki9LCO9W7uQk0qr0IfaRgR309NIivrN8 9De8z2U3IuvpCc+n7IkJABIy6Kt2k/OxDNBw8nPQDU4Lxh/vy/tGT3jok4k0/SkZ CJ3ejs20+gDJZI6mqlIQ+f3COXhGjYUVxGZBgribh0dPcQ4kWDeWgbJVdnFD8CjC iHkY4nb8Gz/U9VsbXvnyVBcm/70eoGPIIU98mSlXnoaEKuyygROV9KB6IxrOa62J TZ3DsZdlDSQM7Cu9EBnbYngZsA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:48 2026 by rpki-client