$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: GYFrXu/6KCpOVYvRZStl0peJiIbK2pcyG8QyrQPjx2s= Subject key identifier: 0A:C2:35:38:4B:7F:C6:FF:0C:A1:3A:6A:82:7D:CC:41:E6:08:D5:50 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0EE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 20C4 Signing time: Sat 04 Apr 2026 17:02:16 +0000 Manifest this update: Sat 04 Apr 2026 17:02:15 +0000 Manifest next update: Sat 11 Apr 2026 17:02:15 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: 6yIESCTmK6Dc/sfNrOwh8QAnJB0wI1uoKnDb9LuMw68=) 2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: FStnmuvAhEZrbfpobk2t5cZMbtbEpQcJCfPnl30kvn4=) 3: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: vwjjv+5sqcKmdcJ+2TblUGDFKJ/vFoOagGQtoy9fEng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Apr 4 17:02:15 2026 GMT Not After : Apr 11 17:02:15 2026 GMT Subject: CN=69d14418-74c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:2c:2f:56:98:ab:cc:6b:5b:6f:e4:39:f7: 85:98:58:a4:ab:e4:28:0b:74:bd:a1:e6:ed:2f:8d: 9a:bc:87:85:12:79:6a:65:3d:6d:db:78:3e:9b:22: 52:11:38:e9:a0:73:33:d0:76:ca:2d:13:61:d8:3f: 3e:93:da:f4:c6:23:75:ad:21:26:a6:e6:46:0d:02: f4:03:8e:d3:80:7a:ca:c8:f8:0d:06:ee:a8:18:2f: 04:61:f7:fe:ef:d7:50:c7:ef:a6:da:57:2e:c0:f3: 74:e4:0a:aa:1d:5e:89:39:b9:b9:e0:50:d1:62:58: 72:b4:94:11:45:fd:b8:8e:fb:0a:bb:2c:05:9f:89: 71:04:f9:19:b0:6f:a6:a2:9a:60:8b:96:33:fc:fb: 09:dc:6f:eb:b8:af:30:64:3e:07:22:7d:a9:10:8d: 11:59:67:a1:6d:33:d3:70:86:80:4d:fc:1e:f2:7e: 8b:13:c7:89:64:02:53:fe:46:03:8e:4e:2f:7c:7c: 13:a0:0d:cc:58:3f:ee:34:5b:c4:4c:24:25:b0:79: 92:51:2a:93:12:88:b9:ea:31:b8:97:17:b2:21:fa: 8f:85:33:f5:44:df:be:7f:9d:e0:47:8e:40:bb:56: c4:86:65:6c:da:dd:c8:ec:7f:05:d2:e8:d4:66:85: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C2:35:38:4B:7F:C6:FF:0C:A1:3A:6A:82:7D:CC:41:E6:08:D5:50 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:80:bd:ef:af:af:cf:92:02:7c:57:99:32:33:b5:0d:48:53: 22:a2:e8:6e:39:63:5e:d3:dc:4a:85:2b:25:49:8f:ee:91:8d: 19:52:d4:ca:b0:44:b0:76:37:58:05:46:7f:7d:7f:53:f4:6b: 82:86:5c:02:71:07:66:10:78:6c:e3:5d:4e:d1:4d:a2:26:c2: 2f:36:ed:17:81:14:23:14:57:de:51:8d:ae:7f:e9:d0:fa:d2: 3e:32:16:ca:54:7d:00:84:00:9d:4a:66:5d:c6:64:58:7f:44: 5c:6b:c1:8e:eb:19:cf:ba:4a:76:4c:76:fc:1b:02:19:4f:72: c9:9e:89:70:70:dc:35:2b:f7:41:8e:58:b4:08:62:f5:16:b6: 34:32:8e:84:11:56:56:15:8c:c4:78:5f:07:09:7a:3c:75:94: 1d:1e:73:95:9a:e3:53:bb:18:59:cd:07:ca:2e:0b:82:80:e5: a9:2a:39:25:68:7f:7c:14:73:36:dd:b2:a1:dd:5b:07:75:41: d3:89:15:9b:1d:7d:7e:ca:9c:8a:16:1d:1e:cb:e1:da:2a:2d: ed:00:2d:0e:90:8f:b5:46:f1:8f:72:c5:c1:36:0b:1a:03:a4: cc:4d:4d:48:0a:fa:b9:fa:06:49:83:5a:34:20:37:e5:30:11: 93:ae:7b:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjYwNDA0MTcwMjE1WhcNMjYwNDExMTcwMjE1WjAYMRYwFAYD VQQDEw02OWQxNDQxOC03NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFUsL1aYq8xrW2/kOfeFmFikq+QoC3S9oebtL42avIeFEnlqZT1t23g+myJS ETjpoHMz0HbKLRNh2D8+k9r0xiN1rSEmpuZGDQL0A47TgHrKyPgNBu6oGC8EYff+ 79dQx++m2lcuwPN05AqqHV6JObm54FDRYlhytJQRRf24jvsKuywFn4lxBPkZsG+m oppgi5Yz/PsJ3G/ruK8wZD4HIn2pEI0RWWehbTPTcIaATfwe8n6LE8eJZAJT/kYD jk4vfHwToA3MWD/uNFvETCQlsHmSUSqTEoi56jG4lxeyIfqPhTP1RN++f53gR45A u1bEhmVs2t3I7H8F0ujUZoW6swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArCNThL f8b/DKE6aoJ9zEHmCNVQMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAIC976+vz5ICfFeZMjO1DUhTIqLobjljXtPcSoUrJUmP7pGNGVLUyrBEsHY3 WAVGf31/U/RrgoZcAnEHZhB4bONdTtFNoibCLzbtF4EUIxRX3lGNrn/p0PrSPjIW ylR9AIQAnUpmXcZkWH9EXGvBjusZz7pKdkx2/BsCGU9yyZ6JcHDcNSv3QY5YtAhi 9Ra2NDKOhBFWVhWMxHhfBwl6PHWUHR5zlZrjU7sYWc0Hyi4LgoDlqSo5JWh/fBRz Nt2yod1bB3VB04kVmx19fsqcihYdHsvh2iot7QAtDpCPtUbxj3LFwTYLGgOkzE1N SAr6ufoGSYNaNCA35TARk6574g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:46 2026 by rpki-client