$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: fmHxSYaBkZZ5oNcZmfsH0VBkYiFkblqZn9hCPbpn/nQ= Subject key identifier: 76:FE:B7:56:E1:70:52:68:1B:2B:BC:FA:B0:08:76:67:AB:3E:73:9A Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 0217 Signing time: Sun 05 Apr 2026 02:31:00 +0000 Manifest this update: Sun 05 Apr 2026 02:30:59 +0000 Manifest next update: Sun 12 Apr 2026 02:30:59 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: lnCpyPa6CH39xGHKtKy6da2GsbGxJJIk2y17qmnOI8c=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: o7EjUV2YZchqIdy9iUxIZM/t/ml5aY2rZmcv+MlQwaA=) 3: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: NSXDDAq8nX85x5kt9In+oT+8R1Iyp1p7SGrj1C1gVOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Apr 5 02:30:59 2026 GMT Not After : Apr 12 02:30:59 2026 GMT Subject: CN=69d1c963-d0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:a0:82:70:c7:27:a5:c8:13:10:b6:3b:ca: d7:13:19:86:7c:5d:ff:09:79:ca:43:94:ec:96:79: 24:36:c5:ec:ae:89:0d:fc:97:f1:84:cc:2d:b9:2f: c3:b9:3c:64:c7:6a:57:49:c1:c0:cf:fe:51:a4:18: dc:ea:02:83:f3:e9:60:1c:8a:ef:54:2d:0f:ca:64: a1:bb:df:d9:1e:c8:d9:38:e1:f6:7f:af:5f:2a:04: 38:c5:e9:b1:44:50:b2:b4:4b:f4:4e:9e:88:54:8a: cc:02:70:fb:04:5d:13:99:2c:fa:d7:fc:25:e2:51: 5e:13:ff:82:d4:09:f6:6b:04:a5:f9:e8:c5:a5:2b: 23:b6:f8:83:11:92:62:8a:3a:0d:1a:52:e0:d0:84: 6d:74:3d:a4:08:01:0a:bd:7c:bb:98:60:94:c4:99: 95:fb:33:f1:dc:c2:a6:2d:31:9e:cd:8a:6e:ec:d6: 8b:2b:4d:10:c7:4c:ad:48:5c:f5:60:d8:2a:bf:f6: 5a:1f:2a:35:4e:4f:ff:3a:2d:5b:db:3f:e1:47:a9: 39:e0:f9:b2:a9:0a:34:92:a2:44:bf:2e:6f:e0:37: e9:2a:6b:b3:0d:bc:33:43:86:5d:e4:a5:d3:30:b3: 88:da:49:2a:cc:a7:f6:d1:2e:21:b7:f5:f2:46:1e: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FE:B7:56:E1:70:52:68:1B:2B:BC:FA:B0:08:76:67:AB:3E:73:9A X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:12:60:f1:7a:c5:8f:25:e5:b4:ed:9d:51:d3:5e:04:a1: 54:3a:bf:98:f2:0b:b8:c9:bd:c2:70:e2:12:1b:2a:8e:40:43: d7:a4:99:75:5a:09:ff:d5:81:cf:ea:61:c4:77:f7:82:32:2e: ef:9a:e3:a7:eb:3d:55:42:50:be:d4:ae:1b:72:45:34:36:13: 25:51:3c:fa:f7:63:78:e4:8d:90:80:7f:96:05:8c:23:75:42: c2:08:e5:ac:d5:05:aa:85:83:7e:a0:42:2b:ce:4f:42:de:cb: 6d:47:70:0f:0d:40:1a:2a:46:50:fb:22:c1:2a:4f:b4:9a:d1: aa:19:18:58:e6:9a:a4:60:dc:bd:c1:38:b4:1b:48:55:2f:0e: d1:8f:13:e3:df:6f:bc:fd:77:10:af:6a:67:a9:06:16:dd:83: c6:42:d1:73:4f:47:11:cc:3e:b8:51:05:25:37:ac:b7:e7:11: 3b:60:33:25:60:63:60:0b:7b:de:25:db:92:fc:4e:2e:6b:bc: ee:c3:f8:54:9d:4c:27:a2:b3:59:1b:9e:1c:84:14:71:0b:a0: 6a:07:91:b4:84:1c:1d:20:74:5a:97:3a:7b:12:00:3d:d1:e5: 61:25:11:33:87:72:69:3c:5b:71:20:da:c5:79:a7:9a:3f:a1: 95:a9:db:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjYwNDA1MDIzMDU5WhcNMjYwNDEyMDIzMDU5WjAYMRYwFAYD VQQDEw02OWQxYzk2My1kMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbGggnDHJ6XIExC2O8rXExmGfF3/CXnKQ5TslnkkNsXsrokN/JfxhMwtuS/D uTxkx2pXScHAz/5RpBjc6gKD8+lgHIrvVC0PymShu9/ZHsjZOOH2f69fKgQ4xemx RFCytEv0Tp6IVIrMAnD7BF0TmSz61/wl4lFeE/+C1An2awSl+ejFpSsjtviDEZJi ijoNGlLg0IRtdD2kCAEKvXy7mGCUxJmV+zPx3MKmLTGezYpu7NaLK00Qx0ytSFz1 YNgqv/ZaHyo1Tk//Oi1b2z/hR6k54PmyqQo0kqJEvy5v4DfpKmuzDbwzQ4Zd5KXT MLOI2kkqzKf20S4ht/XyRh4WgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHb+t1bh cFJoGyu8+rAIdmerPnOaMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRASYPF6xY8l5bTtnVHTXgShVDq/mPILuMm9wnDiEhsqjkBD16SZdVoJ/9WB z+phxHf3gjIu75rjp+s9VUJQvtSuG3JFNDYTJVE8+vdjeOSNkIB/lgWMI3VCwgjl rNUFqoWDfqBCK85PQt7LbUdwDw1AGipGUPsiwSpPtJrRqhkYWOaapGDcvcE4tBtI VS8O0Y8T499vvP13EK9qZ6kGFt2DxkLRc09HEcw+uFEFJTest+cRO2AzJWBjYAt7 3iXbkvxOLmu87sP4VJ1MJ6KzWRueHIQUcQugageRtIQcHSB0Wpc6exIAPdHlYSUR M4dyaTxbcSDaxXmnmj+hlanbrA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:02 2026 by rpki-client