$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: mh71NLc9lFw2TahuMW7I6ut6h6aSVs2wzb9hatKYrcA= Subject key identifier: A1:5E:91:13:34:28:B7:2E:5B:74:1A:DB:CE:C4:E8:BE:42:6B:14:6A Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 256E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 255B Signing time: Sat 04 Apr 2026 15:41:27 +0000 Manifest this update: Sat 04 Apr 2026 15:41:27 +0000 Manifest next update: Sat 11 Apr 2026 15:41:27 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: +qid4pCDHkwUGEszQX8ebThblgXUgstL/BEml81Qxfg=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: BM6Lva7IoWSTK1Hv52iTWPVD8QgDEeI0+e75+nUb4F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9582 (0x256e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Apr 4 15:41:27 2026 GMT Not After : Apr 11 15:41:27 2026 GMT Subject: CN=69d13127-48da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:62:8f:24:f5:ed:24:54:e1:0e:28:25:44: 44:73:de:e6:2a:6d:de:78:33:8b:b2:d8:2f:6c:83: 41:64:f7:1b:41:60:c9:97:b1:88:44:62:0b:e2:5e: ac:2e:19:3a:92:4e:a0:d1:25:c0:ce:fa:dd:d9:77: 54:af:fd:78:6b:64:1a:61:0d:85:5f:d9:4d:67:cf: d3:39:7d:0e:1b:c0:fa:1e:2c:17:8b:4e:54:1c:39: 9e:f3:47:79:64:86:b5:46:34:dc:1e:57:e4:47:4b: ef:de:37:ab:f6:61:c2:90:6f:b3:e6:2f:80:4a:b6: 04:98:0d:a6:c3:ee:14:3f:3f:06:ac:76:5a:66:f3: df:b9:ae:48:f8:ca:fd:a8:ea:19:f2:0b:ca:1e:16: 7d:09:68:2c:56:31:dc:5e:43:13:f5:94:8b:5b:a2: 27:88:71:64:08:2b:5a:99:b2:93:aa:60:25:c9:13: dc:e8:12:5c:47:b5:16:1f:f2:7d:dd:d5:6f:cf:12: dc:e4:62:c4:a4:ae:8d:d7:5a:8e:27:e6:ef:d6:a6: f4:e3:28:07:58:8e:a7:84:fe:2e:cc:28:12:04:f4: 1f:e9:f3:8e:9b:2a:18:85:4d:bb:d9:51:e5:32:69: ca:8d:1a:1e:9c:ba:cc:e6:c1:58:3f:e6:75:3e:79: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5E:91:13:34:28:B7:2E:5B:74:1A:DB:CE:C4:E8:BE:42:6B:14:6A X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:26:6d:8c:89:71:c4:7f:51:25:4c:fc:51:74:ba:8e:ad:ff: cb:9b:24:68:4a:0d:bd:3b:71:3d:d2:54:d7:66:c7:40:0e:f6: 07:a5:21:50:fa:48:24:a0:04:5f:b1:4f:96:a0:31:7a:83:1a: 92:bf:36:40:c3:71:b5:0c:5c:0e:52:68:89:d7:44:59:3e:c3: 30:c4:30:6f:4e:3b:b8:7c:71:54:de:f3:3e:9e:f1:26:49:a4: d1:f0:52:20:38:c0:ee:a5:e8:5d:7f:3e:45:ee:de:0f:66:b6: be:6a:c8:6f:be:bc:d4:31:ee:49:f3:e0:5a:ad:0a:08:3e:ef: f3:a6:e8:17:6f:1b:a9:53:3c:f4:1f:23:1e:39:d4:04:b6:93: eb:76:cf:59:c1:96:94:49:ec:c8:08:23:10:1e:a9:50:30:8a: 65:a0:60:04:32:3f:1a:d8:7d:c1:1a:fd:c9:1e:79:6c:63:7c: 13:4d:54:e4:6c:80:c4:5a:45:c7:a8:f7:dd:f7:71:32:42:52: dc:9f:1d:6b:f6:5d:17:29:3a:f5:81:5e:fe:1a:bb:cf:22:7d: d3:84:d8:f5:1f:b2:d6:6b:12:5b:8a:29:41:0d:9a:e9:04:6b: e4:37:f5:6b:2b:a8:95:38:d3:7b:17:e9:9f:af:19:ff:63:62: 15:3f:53:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjYwNDA0MTU0MTI3WhcNMjYwNDExMTU0MTI3WjAYMRYwFAYD VQQDEw02OWQxMzEyNy00OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYxijyT17SRU4Q4oJUREc97mKm3eeDOLstgvbINBZPcbQWDJl7GIRGIL4l6s Lhk6kk6g0SXAzvrd2XdUr/14a2QaYQ2FX9lNZ8/TOX0OG8D6HiwXi05UHDme80d5 ZIa1RjTcHlfkR0vv3jer9mHCkG+z5i+ASrYEmA2mw+4UPz8GrHZaZvPfua5I+Mr9 qOoZ8gvKHhZ9CWgsVjHcXkMT9ZSLW6IniHFkCCtambKTqmAlyRPc6BJcR7UWH/J9 3dVvzxLc5GLEpK6N11qOJ+bv1qb04ygHWI6nhP4uzCgSBPQf6fOOmyoYhU272VHl MmnKjRoenLrM5sFYP+Z1PnkCXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFekRM0 KLcuW3Qa287E6L5CaxRqMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSZtjIlxxH9RJUz8UXS6jq3/y5skaEoNvTtxPdJU12bHQA72B6UhUPpIJKAE X7FPlqAxeoMakr82QMNxtQxcDlJoiddEWT7DMMQwb047uHxxVN7zPp7xJkmk0fBS IDjA7qXoXX8+Re7eD2a2vmrIb7681DHuSfPgWq0KCD7v86boF28bqVM89B8jHjnU BLaT63bPWcGWlEnsyAgjEB6pUDCKZaBgBDI/Gth9wRr9yR55bGN8E01U5GyAxFpF x6j33fdxMkJS3J8da/ZdFyk69YFe/hq7zyJ904TY9R+y1msSW4opQQ2a6QRr5Df1 ayuolTjTexfpn68Z/2NiFT9TeQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:03 2026 by rpki-client