$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: VSgtCowhrLrur0wMjG+B1OsHWYEPzgREm/g66G18cO4= Subject key identifier: 7D:E9:88:8A:EB:33:B8:05:63:27:89:EC:2B:07:C5:F7:40:7F:5B:87 Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 0389 Signing time: Sun 05 Apr 2026 00:34:19 +0000 Manifest this update: Sun 05 Apr 2026 00:34:19 +0000 Manifest next update: Sun 12 Apr 2026 00:34:19 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: eTexso1q9o2hDZ1DOXVyEN2nJka8cPwZx5mrNOyE1Ss=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: ebLn1kmFFAVk7O0jw8QI6JsXqB37NuyRPaNONVz+j0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Apr 5 00:34:19 2026 GMT Not After : Apr 12 00:34:19 2026 GMT Subject: CN=69d1ae0b-f9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:13:14:1e:00:9b:f7:af:de:0c:c6:f9:81: ed:c5:55:b7:ff:b5:03:ec:a6:1a:9c:01:1b:85:72: 10:ad:7c:26:79:d1:25:d3:e0:dd:df:54:92:97:6b: db:a0:89:f7:21:6f:d4:d8:94:1c:32:5c:67:50:07: b2:ec:42:5a:7f:ba:a0:c7:47:dc:47:0f:e1:53:db: 7d:b3:fe:d8:d9:6d:50:57:aa:91:d1:98:d5:da:80: 29:3b:be:52:37:4b:20:67:46:c7:a5:43:3b:cb:61: 91:e0:db:d7:e0:cb:bd:09:5f:7a:58:ac:c0:47:0e: 6c:3f:2b:0e:b6:28:f1:d1:c2:40:8a:89:b7:46:87: 5b:0e:df:8c:6e:4f:c1:af:f1:c1:7d:77:0e:21:66: d6:1f:b8:03:d8:f2:7c:96:ab:fa:3c:2a:f9:d5:6b: 64:cd:b3:82:90:37:48:57:23:44:ca:f6:20:a1:ad: 35:14:1f:91:dc:43:01:52:0e:46:6a:31:ec:20:e7: 41:08:b0:41:df:56:f0:b3:01:82:be:9d:9d:1f:0b: 6f:c2:9b:66:e4:40:98:4e:80:3d:44:a2:2d:a8:be: 04:5c:21:5d:51:5d:fc:3b:37:56:8e:25:5c:f0:81: 9b:bc:c3:cb:0e:e8:b3:2d:75:97:34:bb:83:fb:65: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:88:8A:EB:33:B8:05:63:27:89:EC:2B:07:C5:F7:40:7F:5B:87 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0f:fa:e6:67:75:aa:f1:7c:07:b8:1a:29:f4:01:d7:30:66: ad:6e:bd:46:76:d6:ec:03:98:fd:07:2a:db:55:90:ba:c9:e8: 25:70:53:a9:52:7e:7f:67:fd:f6:84:a6:07:ac:e0:97:45:19: 47:dc:c3:93:c5:19:6a:c0:c0:7b:1d:1c:75:5e:83:32:c2:ca: f1:51:db:69:12:66:c1:65:16:ce:ec:8f:e2:01:40:a1:eb:f9: be:fa:42:c0:54:fc:2b:1c:98:04:d4:45:28:e8:2e:7e:21:fd: 5f:42:9f:e0:1b:be:b7:67:2c:d4:da:3d:d1:ae:ae:9a:6b:a9: 11:24:fb:d9:47:12:96:cc:94:83:35:42:8f:a7:f5:a7:f6:0d: d5:ac:c9:92:9a:75:9e:48:98:58:07:33:60:6a:ac:df:2b:7a: c0:ed:b3:68:18:2d:6a:f1:73:1f:26:f9:18:d2:1d:09:1f:c9: 58:5c:a3:69:16:0f:2d:0f:39:a9:16:85:d1:7b:a0:a8:9d:92: 14:27:1e:64:ae:cb:9b:9c:d3:f6:31:f8:57:9c:67:d8:06:24: 2a:75:67:f8:e5:4c:ae:32:6e:23:4e:1e:41:47:c0:9e:b3:e5: 57:f8:f3:12:2d:da:df:7f:ec:2f:46:19:25:28:d9:ea:ff:bb: 86:76:e1:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjYwNDA1MDAzNDE5WhcNMjYwNDEyMDAzNDE5WjAYMRYwFAYD VQQDEw02OWQxYWUwYi1mOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVgTFB4Am/ev3gzG+YHtxVW3/7UD7KYanAEbhXIQrXwmedEl0+Dd31SSl2vb oIn3IW/U2JQcMlxnUAey7EJaf7qgx0fcRw/hU9t9s/7Y2W1QV6qR0ZjV2oApO75S N0sgZ0bHpUM7y2GR4NvX4Mu9CV96WKzARw5sPysOtijx0cJAiom3RodbDt+Mbk/B r/HBfXcOIWbWH7gD2PJ8lqv6PCr51WtkzbOCkDdIVyNEyvYgoa01FB+R3EMBUg5G ajHsIOdBCLBB31bwswGCvp2dHwtvwptm5ECYToA9RKItqL4EXCFdUV38OzdWjiVc 8IGbvMPLDuizLXWXNLuD+2UJjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3piIrr M7gFYyeJ7CsHxfdAf1uHMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKg/65md1qvF8B7gaKfQB1zBmrW69RnbW7AOY/Qcq21WQusnoJXBTqVJ+f2f9 9oSmB6zgl0UZR9zDk8UZasDAex0cdV6DMsLK8VHbaRJmwWUWzuyP4gFAoev5vvpC wFT8KxyYBNRFKOgufiH9X0Kf4Bu+t2cs1No90a6ummupEST72UcSlsyUgzVCj6f1 p/YN1azJkpp1nkiYWAczYGqs3yt6wO2zaBgtavFzHyb5GNIdCR/JWFyjaRYPLQ85 qRaF0XugqJ2SFCceZK7Lm5zT9jH4V5xn2AYkKnVn+OVMrjJuI04eQUfAnrPlV/jz Ei3a33/sL0YZJSjZ6v+7hnbhBA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:17 2026 by rpki-client