$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: 5OVl4DHUD8dZHk4koqK/nBbdC0cEg4Cl3p+bcTfeT9w= Subject key identifier: 9D:B5:3A:A1:D1:29:A4:82:E1:9D:E1:AE:5F:1F:C9:AB:0A:51:8E:61 Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: 01EA Signing time: Sun 05 Apr 2026 03:03:25 +0000 Manifest this update: Sun 05 Apr 2026 03:03:24 +0000 Manifest next update: Sun 12 Apr 2026 03:03:24 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: yjbnT9doWURnGUT8894E5QyGjBLCjvc3MrqjwdveFz0=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: seH3uLVyenLg2bSXDJ2MdCspTAAmDFjab4salTa2p94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Apr 5 03:03:24 2026 GMT Not After : Apr 12 03:03:24 2026 GMT Subject: CN=69d1d0fd-4e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:ff:71:50:e1:44:e6:43:56:f1:bf:12:b2: 07:25:90:7c:09:76:29:e5:62:bb:13:b5:67:6f:e3: 08:47:61:64:51:f2:4c:ee:36:70:4a:d0:ac:e9:82: e1:66:76:d1:bd:53:f4:58:5c:dc:4a:41:45:c0:3e: f8:72:d0:f9:ef:18:c1:ff:a3:1c:f5:40:74:d2:05: 53:64:f3:ed:46:75:b8:1e:bb:cb:7a:88:b6:21:0e: 9d:95:7c:63:f2:e3:0d:70:c3:1d:cc:7e:0d:e1:9a: e0:a0:1f:da:aa:91:52:8d:97:ab:6c:85:03:22:b9: 8f:e8:1c:45:d9:e1:8d:a8:60:3b:ab:b3:80:e5:bf: 08:39:ae:bc:01:6b:ff:be:42:ff:71:1f:9e:62:99: 52:06:6c:2f:99:57:ac:93:34:00:5a:9a:96:23:3b: 65:97:b7:74:5e:41:e8:d9:56:55:cc:fa:a0:19:09: 43:63:80:f0:2b:16:a4:02:49:b9:3f:66:46:cd:4c: bc:b6:7b:16:81:81:c4:e5:d2:ff:fa:be:55:01:06: bc:f8:ad:5d:aa:b4:01:1b:fb:e3:4f:7d:5c:e5:2d: 47:5b:0f:78:08:ec:07:88:5a:7d:d8:48:f6:91:e2: 30:58:e6:4f:7c:85:5e:7e:0f:bd:62:6c:eb:34:02: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:3A:A1:D1:29:A4:82:E1:9D:E1:AE:5F:1F:C9:AB:0A:51:8E:61 X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4d:92:4d:54:79:7a:92:c0:0a:17:02:c7:b4:c2:84:a5:5e: c8:59:48:2d:67:d2:70:8d:06:14:6c:d6:39:92:d8:dd:06:fa: fc:2e:da:a6:1b:51:7f:9b:31:22:69:91:fb:e8:08:40:dc:5d: 63:a9:fd:ac:2b:f2:59:1c:d4:7f:fe:90:12:9d:bd:3b:95:55: 08:f7:ef:99:48:a2:56:1f:d1:b0:7f:5d:e5:17:8a:7a:06:8c: f3:54:71:f0:59:c6:4a:81:df:0f:c6:f6:ee:ce:ea:a6:50:f2: e9:5b:d7:a0:26:0c:32:df:7e:5d:5a:47:85:c9:ab:42:c5:fc: a3:40:32:08:26:c0:5f:3a:71:52:ab:8d:34:68:67:00:6c:39: 7a:cd:ba:9a:a9:45:b9:24:c9:0a:db:99:a5:4b:44:42:5a:5e: a6:41:b7:69:18:b9:c9:f0:9d:c8:0d:a1:70:2d:c9:0c:0c:11: a9:9f:c3:23:c3:b9:0f:4f:ad:1f:cf:b6:79:4d:49:5f:48:2c: da:56:15:43:91:2e:90:ca:9f:79:ab:40:c2:3a:0c:e6:7a:6f: b7:c4:5c:56:e6:5f:f4:ce:03:1c:62:03:89:47:f3:83:5b:74: ac:00:e1:ee:4f:72:e1:b9:8c:bb:1b:f1:45:7f:d0:5f:4d:f3: 6c:94:d1:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjYwNDA1MDMwMzI0WhcNMjYwNDEyMDMwMzI0WjAYMRYwFAYD VQQDEw02OWQxZDBmZC00ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWj/cVDhROZDVvG/ErIHJZB8CXYp5WK7E7Vnb+MIR2FkUfJM7jZwStCs6YLh ZnbRvVP0WFzcSkFFwD74ctD57xjB/6Mc9UB00gVTZPPtRnW4HrvLeoi2IQ6dlXxj 8uMNcMMdzH4N4ZrgoB/aqpFSjZerbIUDIrmP6BxF2eGNqGA7q7OA5b8IOa68AWv/ vkL/cR+eYplSBmwvmVeskzQAWpqWIztll7d0XkHo2VZVzPqgGQlDY4DwKxakAkm5 P2ZGzUy8tnsWgYHE5dL/+r5VAQa8+K1dqrQBG/vjT31c5S1HWw94COwHiFp92Ej2 keIwWOZPfIVefg+9YmzrNALrCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ21OqHR KaSC4Z3hrl8fyasKUY5hMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ02STVR5epLAChcCx7TChKVeyFlILWfScI0GFGzWOZLY3Qb6/C7aphtRf5sx ImmR++gIQNxdY6n9rCvyWRzUf/6QEp29O5VVCPfvmUiiVh/RsH9d5ReKegaM81Rx 8FnGSoHfD8b27s7qplDy6VvXoCYMMt9+XVpHhcmrQsX8o0AyCCbAXzpxUquNNGhn AGw5es26mqlFuSTJCtuZpUtEQlpepkG3aRi5yfCdyA2hcC3JDAwRqZ/DI8O5D0+t H8+2eU1JX0gs2lYVQ5EukMqfeatAwjoM5npvt8RcVuZf9M4DHGIDiUfzg1t0rADh 7k9y4bmMuxvxRX/QX03zbJTRjw== -----END CERTIFICATE-----Generated at Sun Apr 5 21:07:18 2026 by rpki-client