$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: C8+LrXlUlyZb7tpM2RkK5I+PD8Xu/0+ItdAW8VtP2lI= Subject key identifier: B8:BD:A0:C9:88:02:FB:90:09:42:6D:DD:FB:A6:ED:D7:1D:C7:03:C1 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0E4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0E32 Signing time: Sat 04 Apr 2026 17:40:15 +0000 Manifest this update: Sat 04 Apr 2026 17:40:14 +0000 Manifest next update: Sat 11 Apr 2026 17:40:14 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: GsFa4q6tLMpbb/qb67IkzO7jF1T8+kBtBiVm2mkSqe4=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: rao4FTEGX/zW0+huzRC0qNfwXpqPe2ob+2j+XfZyiN0=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: QnTisy237EcVvBJ9011A1rJ4E+fXkfCawvsS6RPcKIw=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: tk96VxBbpWdjYmc5SF84zVk0NfFSbTDNVAWRkR1LXZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3661 (0xe4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Apr 4 17:40:14 2026 GMT Not After : Apr 11 17:40:14 2026 GMT Subject: CN=69d14cfe-6bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:e1:bc:b8:d4:ad:74:1f:a4:8e:86:ac:a4: 59:ff:4b:95:29:7b:d6:25:38:6f:07:1a:8b:d4:8f: 10:82:9d:4a:e3:eb:24:15:f9:af:17:19:ee:ed:58: ac:0a:4b:3c:08:68:23:4f:c0:22:76:7c:28:44:b3: 37:17:cc:b6:08:71:02:2d:39:4c:bc:f5:a3:55:9e: da:2c:f1:f1:88:14:e6:b4:51:b8:d3:0c:79:5e:19: bb:8b:d8:1a:df:fc:78:4a:a1:8d:40:a8:87:8e:93: b2:12:cc:f1:cb:a9:1b:a9:ee:ae:8b:47:97:ef:fa: bb:db:05:0e:c0:63:1d:bf:5f:c6:bf:bc:ec:3a:32: 64:eb:b5:b3:0e:47:ac:d6:5b:84:b8:db:c2:f3:3b: ef:4c:4e:52:6a:a6:0e:fa:98:da:35:84:71:e2:72: a4:ca:e7:2e:23:8d:16:87:95:e3:1f:01:2c:f9:7b: 30:b0:c7:6a:2f:17:58:2f:65:f8:2c:6c:ea:90:a3: 74:da:99:3b:57:7f:ff:66:fd:18:c8:bf:29:20:36: 92:50:36:0b:94:38:89:fc:06:a8:3e:12:c7:8a:6b: a0:59:4b:df:a5:b6:3b:3f:c7:49:81:17:6d:47:1d: eb:6b:84:ae:35:ca:63:eb:23:48:e1:30:f5:11:29: 7c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:A0:C9:88:02:FB:90:09:42:6D:DD:FB:A6:ED:D7:1D:C7:03:C1 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:4d:73:b8:f0:e6:2e:c6:6a:8a:ce:5a:9a:01:26:f9:be: 24:e8:0b:4a:6b:c3:e9:ce:da:3c:66:33:5d:95:b3:30:3c:5a: 4e:25:8e:72:51:b1:ca:f5:c2:32:e3:0b:c7:56:97:c4:41:a8: 86:c7:71:fb:1c:4c:7b:e8:99:45:4b:35:fd:b7:bd:06:c4:1b: 99:4b:0b:cb:34:6d:40:c2:98:de:ef:7f:a0:0d:1e:0b:50:70: 64:0d:48:b9:1d:0a:f2:16:ea:8c:56:64:24:44:13:9f:06:44: a3:b4:54:01:f4:b7:fc:3d:c7:c8:38:8e:3d:41:ae:95:bb:93: ba:3e:b7:8a:59:8e:fa:f2:c6:85:2e:50:37:76:ca:bc:80:cc: 7e:f6:e8:61:1a:ac:b4:d8:18:0f:e5:7d:43:e9:c3:d2:1a:92: 61:fe:90:12:13:84:b5:55:c2:5c:90:a1:50:94:8f:dd:74:d6: ea:b9:06:c7:f7:91:7f:ba:37:32:f8:a2:29:ca:2f:71:e0:4b: dd:0d:57:dd:e9:48:e2:0c:c2:ad:f3:e1:92:6e:eb:df:dd:15: 2c:c8:a5:e6:b6:c6:a4:63:2c:8e:68:2c:c7:ce:e3:de:9b:53: 89:e6:b1:3e:96:98:f1:62:30:74:a2:b9:68:4b:a7:0b:4e:01: 7c:d8:cf:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjYwNDA0MTc0MDE0WhcNMjYwNDExMTc0MDE0WjAYMRYwFAYD VQQDEw02OWQxNGNmZS02YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSDhvLjUrXQfpI6GrKRZ/0uVKXvWJThvBxqL1I8Qgp1K4+skFfmvFxnu7Vis Cks8CGgjT8AidnwoRLM3F8y2CHECLTlMvPWjVZ7aLPHxiBTmtFG40wx5Xhm7i9ga 3/x4SqGNQKiHjpOyEszxy6kbqe6ui0eX7/q72wUOwGMdv1/Gv7zsOjJk67WzDkes 1luEuNvC8zvvTE5SaqYO+pjaNYRx4nKkyucuI40Wh5XjHwEs+XswsMdqLxdYL2X4 LGzqkKN02pk7V3//Zv0YyL8pIDaSUDYLlDiJ/AaoPhLHimugWUvfpbY7P8dJgRdt Rx3ra4SuNcpj6yNI4TD1ESl8UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLi9oMmI AvuQCUJt3fum7dcdxwPBMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaaFNc7jw5i7GaorOWpoBJvm+JOgLSmvD6c7aPGYzXZWzMDxaTiWOclGxyvXC MuMLx1aXxEGohsdx+xxMe+iZRUs1/be9BsQbmUsLyzRtQMKY3u9/oA0eC1BwZA1I uR0K8hbqjFZkJEQTnwZEo7RUAfS3/D3HyDiOPUGulbuTuj63ilmO+vLGhS5QN3bK vIDMfvboYRqstNgYD+V9Q+nD0hqSYf6QEhOEtVXCXJChUJSP3XTW6rkGx/eRf7o3 MviiKcovceBL3Q1X3elI4gzCrfPhkm7r390VLMil5rbGpGMsjmgsx87j3ptTieax PpaY8WIwdKK5aEunC04BfNjPMA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:10 2026 by rpki-client