$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: Sk+y/m2XxnpueWFK2XvSTO7ufBAGnn2gu+VsRkbLsFA= Subject key identifier: 5B:F5:40:2F:D0:0F:A8:24:59:FC:10:10:3D:42:49:8F:24:DD:09:7A Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 0218 Signing time: Sun 05 Apr 2026 02:25:01 +0000 Manifest this update: Sun 05 Apr 2026 02:25:01 +0000 Manifest next update: Sun 12 Apr 2026 02:25:01 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: qrr9GNQ6pYnL8ddlIPoaWVKzXwDckqmyV2wPiAtVxDs=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Apr 5 02:25:01 2026 GMT Not After : Apr 12 02:25:01 2026 GMT Subject: CN=69d1c7fd-e0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:66:bf:11:ec:10:8f:42:00:88:c6:71:3a: 50:9a:b8:48:07:1f:a4:63:c9:01:d0:bf:94:eb:44: cc:6f:f1:5a:db:f2:ad:26:e7:b4:8b:09:c2:90:c3: b7:c3:d2:c6:73:a7:95:2b:d3:5e:0d:64:61:ed:88: 72:86:23:c6:a2:f9:9d:4d:35:a9:72:fe:87:6b:ac: cb:a6:c1:45:67:18:ad:69:75:d5:d1:f5:c0:03:11: 35:ea:6e:2b:03:64:f6:8c:37:6f:c4:6b:77:35:d4: 39:56:d1:0c:64:4f:bc:6e:60:77:90:27:e0:d2:2b: fa:2d:12:a4:7d:5c:2e:93:3f:6d:82:8d:a4:39:59: 14:c0:9e:a0:78:de:7b:08:4f:83:06:bd:b5:81:0f: b0:6c:8d:47:b4:47:81:25:74:76:5a:e0:41:22:0e: 58:4c:ca:52:63:4c:91:65:f9:ca:23:74:e6:a5:66: 1d:9b:81:6a:41:b1:66:2e:19:af:21:b8:f4:66:e1: bf:50:42:09:95:48:c8:91:05:57:5d:48:88:ca:00: bf:e6:e7:23:11:e4:ea:f3:4e:25:6c:b4:16:f1:99: f4:8b:59:72:b6:95:0d:80:17:e0:4d:57:90:f6:07: 9e:92:43:2e:c4:7b:c9:30:08:0d:ae:7e:e2:22:b1: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:40:2F:D0:0F:A8:24:59:FC:10:10:3D:42:49:8F:24:DD:09:7A X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:96:8b:5c:91:ec:72:47:45:80:18:ea:a0:bd:27:64:d9:36: 33:b2:61:fc:a4:41:0e:20:30:6d:46:81:80:f3:b9:72:2e:44: bf:76:a3:28:45:cd:55:7d:11:1e:39:bd:0a:98:c5:17:6f:ec: 2f:e3:d3:a2:a8:bd:eb:f2:ef:a2:cc:9c:e8:2e:42:ef:a2:56: f5:7d:01:42:36:05:60:7b:da:15:a6:b8:92:2e:00:9b:9f:31: 23:16:91:1d:e2:7a:0b:56:b5:69:7e:45:dd:83:c9:d1:30:13: 0f:6f:85:7a:23:28:37:cd:49:3e:b1:fd:51:03:a6:63:cb:7d: 9f:a1:f5:17:3c:7c:6f:fc:1b:50:54:ae:3b:a2:83:bf:f1:78: eb:5d:d6:d4:00:56:1b:fd:6b:01:ff:a5:25:1c:16:95:f0:b8: 39:6e:9f:c5:a8:ca:b8:43:ab:95:00:f7:cb:54:89:85:fd:8a: c0:d9:4d:2a:fc:36:22:81:56:85:b2:eb:96:db:c7:8e:fb:93: 2a:5d:b9:8c:12:47:7b:39:a5:61:61:d7:b1:ce:5c:a0:62:d0: 39:d6:88:dd:4c:ce:6b:d9:07:b1:78:f6:a1:da:0d:a5:ac:14: 82:e6:85:75:bb:3f:f6:3e:ca:53:9d:b2:66:41:22:75:05:d3: 6f:23:cc:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjYwNDA1MDIyNTAxWhcNMjYwNDEyMDIyNTAxWjAYMRYwFAYD VQQDEw02OWQxYzdmZC1lMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKBmvxHsEI9CAIjGcTpQmrhIBx+kY8kB0L+U60TMb/Fa2/KtJue0iwnCkMO3 w9LGc6eVK9NeDWRh7YhyhiPGovmdTTWpcv6Ha6zLpsFFZxitaXXV0fXAAxE16m4r A2T2jDdvxGt3NdQ5VtEMZE+8bmB3kCfg0iv6LRKkfVwukz9tgo2kOVkUwJ6geN57 CE+DBr21gQ+wbI1HtEeBJXR2WuBBIg5YTMpSY0yRZfnKI3TmpWYdm4FqQbFmLhmv Ibj0ZuG/UEIJlUjIkQVXXUiIygC/5ucjEeTq804lbLQW8Zn0i1lytpUNgBfgTVeQ 9geekkMuxHvJMAgNrn7iIrEFNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFv1QC/Q D6gkWfwQED1CSY8k3Ql6MB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApZaLXJHsckdFgBjqoL0nZNk2M7Jh/KRBDiAwbUaBgPO5ci5Ev3ajKEXNVX0R Hjm9CpjFF2/sL+PToqi96/Lvosyc6C5C76JW9X0BQjYFYHvaFaa4ki4Am58xIxaR HeJ6C1a1aX5F3YPJ0TATD2+FeiMoN81JPrH9UQOmY8t9n6H1Fzx8b/wbUFSuO6KD v/F4613W1ABWG/1rAf+lJRwWlfC4OW6fxajKuEOrlQD3y1SJhf2KwNlNKvw2IoFW hbLrltvHjvuTKl25jBJHezmlYWHXsc5coGLQOdaI3UzOa9kHsXj2odoNpawUguaF dbs/9j7KU52yZkEidQXTbyPM4Q== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:18 2026 by rpki-client