$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft File: yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json) Hash identifier: 3rwpFG2Z7YJgIHC8UkkKRR7b0ogYbPs1tw6Sw+f/EV0= Subject key identifier: 06:11:00:83:52:1D:56:CB:A7:43:57:A1:9F:20:1A:A4:ED:0A:4B:16 Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70 Certificate issuer: /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft Manifest number: 22 Signing time: Sun 05 Apr 2026 08:12:57 +0000 Manifest this update: Sun 05 Apr 2026 08:12:57 +0000 Manifest next update: Sun 12 Apr 2026 08:12:57 +0000 Files and hashes: 1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: jjH/QxeGl9N7F6yXjFEWIbDOnIYD6GrsQorOMSrEDBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70 Validity Not Before: Apr 5 08:12:57 2026 GMT Not After : Apr 12 08:12:57 2026 GMT Subject: CN=69d21989-d0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:00:76:5a:9c:0a:20:63:0a:38:fd:85:1f: 2f:c4:89:3d:47:a5:be:d3:f7:8d:55:48:70:e6:bd: 60:3a:73:48:82:b1:0a:27:ad:04:9a:ac:cf:4f:71: a4:a7:aa:e9:04:8a:75:e7:40:2e:a0:d4:96:ac:b7: 3f:4a:88:48:00:4b:9f:aa:e9:c8:eb:7b:98:d2:e1: 4a:a9:e4:66:69:3e:40:a0:f3:54:b6:e5:cf:42:da: 58:bf:09:f6:2b:8b:d6:1f:6d:26:0e:41:02:8e:0f: c6:07:5f:f3:d6:7d:70:51:ab:5f:1a:d8:cf:f7:04: a5:80:61:ac:05:c4:49:55:0e:21:f8:5f:e4:c3:f5: fb:47:4f:73:63:03:f9:44:0e:92:e8:93:1f:91:a5: c5:14:24:33:a6:b6:2e:4e:3b:cd:f0:e9:5c:5f:bd: b0:01:1e:3e:0e:5e:a5:fb:0f:e4:64:0e:2c:6e:d2: 04:8b:e5:b5:5c:e7:17:e6:ab:43:5c:f8:bb:60:17: eb:2f:71:aa:02:7a:39:42:46:86:b1:10:86:49:53: 83:25:b2:6b:dc:c7:cf:b8:74:a1:28:31:6b:dc:02: 2c:60:9c:76:ca:de:9a:1b:7a:bf:3f:d4:92:18:33: 23:4e:da:f5:46:07:ab:7d:6e:b5:d4:01:a0:ae:9d: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:11:00:83:52:1D:56:CB:A7:43:57:A1:9F:20:1A:A4:ED:0A:4B:16 X509v3 Authority Key Identifier: keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2d:c6:a2:f1:0b:b6:7f:b1:4a:de:7e:ca:ea:b5:31:2a:f6: 41:54:7b:c0:89:b3:f5:74:54:19:89:84:98:65:42:47:b4:11: 57:dc:39:6b:35:a8:f4:1f:86:1a:fc:9e:0b:3d:09:67:4f:46: 3f:b4:13:b4:08:77:66:29:a8:8a:f1:40:30:ca:ea:5b:ac:8d: 65:b9:7d:ad:5e:6b:b2:78:a4:ea:97:ba:fa:a3:da:28:74:26: 82:8d:2b:be:5d:93:05:c7:2e:f6:34:75:5f:1e:5e:8f:44:0c: 88:bb:bf:3b:77:21:42:fe:ee:2d:e9:e5:94:1e:5e:c7:99:61: bf:aa:f7:de:e9:98:e5:80:d0:7d:98:07:60:f5:cd:78:0c:fd: 96:de:6b:7e:5e:77:cf:86:33:3e:c1:a4:3f:df:0a:f2:94:ce: 83:11:5f:8e:77:22:fb:d7:ed:26:ba:fa:2c:69:98:a9:10:45: ab:79:66:bf:e8:4f:1f:83:0c:69:ba:c1:57:a0:8a:df:b0:15: 08:bb:45:21:2b:5a:5c:a9:ac:ef:98:ae:d8:46:b1:77:dd:0c: a5:fe:ff:1f:d5:e8:33:2c:20:b4:de:b8:32:6c:f8:ea:12:33: 71:8c:29:99:74:67:95:4c:62:9c:c6:df:a8:87:21:d8:53:72: c6:40:7c:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDQ5QTExMC8GA1UEBRMoQzk5ODUwQzhDODg2QTdGRkU0NURGMUJBMUQ2NTAyQ0I1 QTY1RUI3MDAeFw0yNjA0MDUwODEyNTdaFw0yNjA0MTIwODEyNTdaMBgxFjAUBgNV BAMTDTY5ZDIxOTg5LWQwYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3tQB2WpwKIGMKOP2FHy/EiT1Hpb7T941VSHDmvWA6c0iCsQonrQSarM9PcaSn qukEinXnQC6g1Jastz9KiEgAS5+q6cjre5jS4Uqp5GZpPkCg81S25c9C2li/CfYr i9YfbSYOQQKOD8YHX/PWfXBRq18a2M/3BKWAYawFxElVDiH4X+TD9ftHT3NjA/lE DpLokx+RpcUUJDOmti5OO83w6VxfvbABHj4OXqX7D+RkDixu0gSL5bVc5xfmq0Nc +LtgF+svcaoCejlCRoaxEIZJU4Mlsmvcx8+4dKEoMWvcAixgnHbK3pober8/1JIY MyNO2vVGB6t9brXUAaCunZq5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBhEAg1Id VsunQ1ehnyAapO0KSxYwHwYDVR0jBBgwFoAUyZhQyMiGp//kXfG6HWUCy1pl63Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzIzNjFBMDJBMDJD QTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9fa1hmRzZIV1VDeTFwbDYz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVpoUXlNaUdwX19rWGZHNkhXVUN5MXBsNjNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NDlBLzIzNjFBMDJBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9f a1hmRzZIV1VDeTFwbDYzQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXLcai8Qu2f7FK3n7K6rUxKvZBVHvAibP1dFQZiYSYZUJHtBFX3DlrNaj0H4Ya /J4LPQlnT0Y/tBO0CHdmKaiK8UAwyupbrI1luX2tXmuyeKTql7r6o9oodCaCjSu+ XZMFxy72NHVfHl6PRAyIu787dyFC/u4t6eWUHl7HmWG/qvfe6ZjlgNB9mAdg9c14 DP2W3mt+XnfPhjM+waQ/3wrylM6DEV+OdyL71+0muvosaZipEEWreWa/6E8fgwxp usFXoIrfsBUIu0UhK1pcqazvmK7YRrF33Qyl/v8f1egzLCC03rgybPjqEjNxjCmZ dGeVTGKcxt+ohyHYU3LGQHxv -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:04 2026 by rpki-client