$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: SNj2I+byX2XyhxPr+Ghq/haGQ1ZdhQ7LKJ0LusPI1OI= Subject key identifier: B4:D0:8D:1A:45:9E:C1:91:D7:AD:36:A7:E9:27:8A:57:D9:02:3B:DF Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0B6C Signing time: Sat 04 Apr 2026 19:03:11 +0000 Manifest this update: Sat 04 Apr 2026 19:03:11 +0000 Manifest next update: Sat 11 Apr 2026 19:03:11 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: 6IXebQVi5rDzoTWcPtrStta7qJHqp2cLd7h+0mhc4Gk=) 2: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) 3: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) 4: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Apr 4 19:03:11 2026 GMT Not After : Apr 11 19:03:11 2026 GMT Subject: CN=69d1606f-42fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:72:b1:59:ed:28:2a:87:74:ab:ba:47:e3: 68:1e:c9:dd:af:d1:79:55:ac:52:d7:18:86:24:98: 72:fb:b9:ff:d3:7c:5a:24:6d:bd:2e:0e:a5:b2:85: 9d:fe:0c:0b:fe:e1:b1:39:9f:4f:2a:4d:75:4c:91: e5:42:7c:76:97:47:6f:ae:d2:16:53:c2:f5:51:e6: 56:1f:91:1f:f1:8e:0f:47:e9:8a:03:bb:76:73:2e: 78:a9:02:69:35:2e:28:8c:ef:a9:76:8b:1b:59:af: 59:bf:9c:f6:93:ff:3c:84:74:ad:4e:58:ae:9a:85: e3:91:b3:fe:ac:35:b8:9a:bf:c5:a5:35:f4:d2:d0: f7:a7:00:9d:e0:36:3a:07:55:49:f8:36:a0:84:d4: 99:f7:8c:b5:a4:7c:da:93:cb:df:6e:c4:26:37:02: 7c:38:98:29:cd:37:e6:f3:64:bd:ca:17:89:50:73: 38:16:70:e1:cf:a7:16:35:57:3b:ea:49:dd:d7:79: a7:08:03:1f:82:7f:cd:10:69:08:1f:e9:ac:a3:e0: 65:cf:30:0c:60:bc:84:82:76:30:57:6f:f8:2e:7b: 80:4b:c1:8e:a7:a0:f6:87:8a:7a:a5:74:f3:5f:c4: b7:f0:cc:25:92:77:d6:f6:3f:ca:91:a1:f4:b4:b5: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D0:8D:1A:45:9E:C1:91:D7:AD:36:A7:E9:27:8A:57:D9:02:3B:DF X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d5:e0:70:8b:ae:77:0c:9c:d0:a8:78:b0:7b:6b:38:ef:b7: c8:6c:55:6e:77:b3:40:f8:26:f5:84:30:90:7a:c4:70:35:54: dc:04:25:da:2e:06:13:c9:57:c2:7d:d9:cd:dc:5f:f8:78:5c: b9:60:90:ee:cb:b7:c2:40:ec:42:99:9f:a8:63:63:a3:9b:63: 39:1f:ee:3b:c1:ab:64:71:e8:82:3c:c4:4c:57:27:9e:1f:ab: 23:99:ce:e1:4f:32:ac:95:22:5c:06:81:72:2e:b8:54:27:8d: 9a:c7:31:fa:0c:3c:fb:9f:a2:fd:af:b0:5e:1a:a1:e7:0b:34: 63:34:d7:e1:f4:14:15:eb:70:57:ec:85:f8:8b:07:5c:1e:6a: 4e:b5:6f:44:5a:84:ea:a6:25:bc:2a:67:1e:c0:e9:ed:01:38: 23:80:0b:ac:0b:4c:4e:24:0c:ef:03:b9:bc:20:8d:af:27:c3: 12:a9:92:04:ab:d4:7b:2d:d5:80:de:fe:d4:a2:53:54:2b:35: 80:4e:7f:7e:31:a1:93:03:52:40:df:cd:81:81:84:4f:f7:f9: 5c:3a:53:ad:8c:5e:d7:6e:43:10:0a:5c:66:77:88:33:39:bd: 1f:a7:8f:e9:84:01:5d:9e:8e:6a:03:32:50:85:61:2f:d0:33: 55:a1:81:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYwNDA0MTkwMzExWhcNMjYwNDExMTkwMzExWjAYMRYwFAYD VQQDEw02OWQxNjA2Zi00MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43ZysVntKCqHdKu6R+NoHsndr9F5VaxS1xiGJJhy+7n/03xaJG29Lg6lsoWd /gwL/uGxOZ9PKk11TJHlQnx2l0dvrtIWU8L1UeZWH5Ef8Y4PR+mKA7t2cy54qQJp NS4ojO+pdosbWa9Zv5z2k/88hHStTliumoXjkbP+rDW4mr/FpTX00tD3pwCd4DY6 B1VJ+DaghNSZ94y1pHzak8vfbsQmNwJ8OJgpzTfm82S9yheJUHM4FnDhz6cWNVc7 6knd13mnCAMfgn/NEGkIH+mso+BlzzAMYLyEgnYwV2/4LnuAS8GOp6D2h4p6pXTz X8S38MwlknfW9j/KkaH0tLWxgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTQjRpF nsGR1602p+knilfZAjvfMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHNXgcIuudwyc0Kh4sHtrOO+3yGxVbnezQPgm9YQwkHrEcDVU3AQl2i4GE8lX wn3Zzdxf+HhcuWCQ7su3wkDsQpmfqGNjo5tjOR/uO8GrZHHogjzETFcnnh+rI5nO 4U8yrJUiXAaBci64VCeNmscx+gw8+5+i/a+wXhqh5ws0YzTX4fQUFetwV+yF+IsH XB5qTrVvRFqE6qYlvCpnHsDp7QE4I4ALrAtMTiQM7wO5vCCNryfDEqmSBKvUey3V gN7+1KJTVCs1gE5/fjGhkwNSQN/NgYGET/f5XDpTrYxe125DEApcZneIMzm9H6eP 6YQBXZ6OagMyUIVhL9AzVaGB1A== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:50 2026 by rpki-client