$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: lBp8ptxT9HPpLCKRbbxhadO4szDnBUYdgWIYz5ay0cY= Subject key identifier: 06:68:29:2B:10:B9:26:AD:50:64:8A:06:D8:02:F5:3D:AC:E5:85:EA Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 0212 Signing time: Sun 05 Apr 2026 02:29:17 +0000 Manifest this update: Sun 05 Apr 2026 02:29:16 +0000 Manifest next update: Sun 12 Apr 2026 02:29:16 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: yt4Vr5kl4sjYBmB3fixtQVRI87Q/EuQLOQdvptLc/zo=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: zEKHnn7kjmEyBZ3InlOca451cVgvomjhZzdZmC7qrNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Apr 5 02:29:16 2026 GMT Not After : Apr 12 02:29:16 2026 GMT Subject: CN=69d1c8fc-f825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:16:d8:13:c1:7f:84:ff:e4:dc:ad:63:37: 68:dc:4b:40:d5:ac:6d:7e:c5:bf:ad:ff:64:a2:3b: c8:cd:52:3e:bc:a9:2d:b0:a2:6e:97:d5:38:f7:d7: e1:c0:c9:2f:35:fe:8a:bc:71:84:45:09:26:6b:ba: 9a:ed:89:10:9a:88:3f:17:b3:f5:3d:51:0e:fb:4c: ba:c1:32:a3:6e:b5:43:48:3e:6a:d6:b7:91:d9:94: 71:ca:d5:d0:c6:15:6c:d7:27:c5:5f:cd:84:67:ea: 09:03:11:93:f7:f1:01:e2:de:d2:3b:bc:32:2b:fc: e3:92:fc:9f:3c:00:36:9a:5a:16:77:80:4d:b2:a0: 62:18:f7:6c:68:f5:90:c0:d4:7d:2a:e6:e0:98:05: 7a:3a:fc:ee:5e:a0:74:89:50:f9:ea:50:b2:e2:30: a3:35:f3:2d:f7:10:15:c8:21:42:4e:65:ce:3b:ca: eb:ab:b5:31:80:1d:25:6e:f8:ba:7b:36:61:a8:f6: 30:0a:ac:d0:8b:b4:47:c2:b5:2b:6f:91:6b:ca:2e: 76:59:b9:af:f2:08:2e:62:7a:5f:fe:1a:01:ea:61: b2:12:13:00:31:84:97:8e:50:27:a9:23:5e:c1:22: f9:60:ff:ae:0f:38:64:1f:95:be:bf:04:c5:a8:e7: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:68:29:2B:10:B9:26:AD:50:64:8A:06:D8:02:F5:3D:AC:E5:85:EA X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1f:25:c2:c7:d9:d4:fc:30:e7:d5:b2:cb:e3:c9:d3:11:f1: 97:ca:e0:3f:61:d5:3b:fb:5d:8b:b1:d8:db:61:1f:c6:82:1b: 5a:c3:1e:23:40:b2:52:38:21:e4:e8:ed:e3:01:c4:f4:5e:2a: f7:46:64:37:ab:fa:58:d8:32:1d:54:20:73:ae:69:a5:9a:65: 6c:b6:d1:74:60:f7:39:f8:89:7b:3b:de:a2:6e:49:24:00:b7: e6:da:fb:6c:a3:fe:26:fd:db:cd:c7:dd:bd:ed:27:33:59:c2: 8d:0e:7c:3b:44:60:d8:4c:87:71:44:cb:8a:fd:d1:bc:03:ca: 57:e1:1a:ca:c4:f8:c5:64:db:74:2e:bb:46:dc:90:d2:0b:14: 6c:de:4d:9e:0b:67:c5:06:e6:f8:16:47:eb:ae:7f:c6:bd:19: 3f:d5:d0:67:cf:e3:90:54:6a:56:b0:9f:ea:b5:e6:21:7d:f4: 9a:46:b0:63:17:75:c6:b3:0d:ca:99:b7:6e:83:59:2f:62:63: 0f:42:e9:7a:4e:1a:65:3a:e7:08:4e:0c:1a:3c:71:69:f8:69: c5:df:62:7e:5a:15:ff:26:af:e8:49:26:1a:f3:36:37:02:5c: 5e:03:84:b0:56:ca:7e:f9:b3:0b:88:d6:fd:92:fb:fb:aa:b6: d4:e6:f2:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjYwNDA1MDIyOTE2WhcNMjYwNDEyMDIyOTE2WjAYMRYwFAYD VQQDEw02OWQxYzhmYy1mODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxUW2BPBf4T/5NytYzdo3EtA1axtfsW/rf9kojvIzVI+vKktsKJul9U499fh wMkvNf6KvHGERQkma7qa7YkQmog/F7P1PVEO+0y6wTKjbrVDSD5q1reR2ZRxytXQ xhVs1yfFX82EZ+oJAxGT9/EB4t7SO7wyK/zjkvyfPAA2mloWd4BNsqBiGPdsaPWQ wNR9KubgmAV6OvzuXqB0iVD56lCy4jCjNfMt9xAVyCFCTmXOO8rrq7UxgB0lbvi6 ezZhqPYwCqzQi7RHwrUrb5Fryi52Wbmv8gguYnpf/hoB6mGyEhMAMYSXjlAnqSNe wSL5YP+uDzhkH5W+vwTFqOem2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZoKSsQ uSatUGSKBtgC9T2s5YXqMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjh8lwsfZ1Pww59Wyy+PJ0xHxl8rgP2HVO/tdi7HY22EfxoIbWsMeI0CyUjgh 5Ojt4wHE9F4q90ZkN6v6WNgyHVQgc65ppZplbLbRdGD3OfiJezveom5JJAC35tr7 bKP+Jv3bzcfdve0nM1nCjQ58O0Rg2EyHcUTLiv3RvAPKV+EaysT4xWTbdC67RtyQ 0gsUbN5NngtnxQbm+BZH665/xr0ZP9XQZ8/jkFRqVrCf6rXmIX30mkawYxd1xrMN ypm3boNZL2JjD0Lpek4aZTrnCE4MGjxxafhpxd9ifloV/yav6EkmGvM2NwJcXgOE sFbKfvmzC4jW/ZL7+6q21ObyuQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:15 2026 by rpki-client