$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: cZcs3e+EsnD9r1wpjdS44qCTb93082KanfkzJfzC1ZM= Subject key identifier: E5:36:ED:EC:52:35:1B:B4:AC:A3:43:94:9E:96:41:80:BD:87:44:B5 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 122B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 121F Signing time: Sat 04 Apr 2026 17:01:31 +0000 Manifest this update: Sat 04 Apr 2026 17:01:30 +0000 Manifest next update: Sat 11 Apr 2026 17:01:30 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: AHoJmupU8k78JnKg3RhXPTwEt2wi41G6IlPvYUwZg4o=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4651 (0x122b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Apr 4 17:01:30 2026 GMT Not After : Apr 11 17:01:30 2026 GMT Subject: CN=69d143eb-c21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:96:4c:44:27:8d:27:9d:50:73:7f:11:d6: 6c:2b:91:57:63:e7:8a:12:2d:ea:a3:4c:f5:b7:89: a0:e7:ae:03:70:0c:67:51:da:a7:23:9c:8f:f6:70: 24:e5:61:e8:ae:e5:b8:24:ac:a3:e6:c0:99:3f:f0: ad:42:61:3e:f0:9f:82:b1:61:2f:56:39:ce:50:1d: 44:35:84:99:e6:6d:4e:68:19:c1:15:c0:81:9d:5b: 53:f2:15:7f:5c:26:1f:7a:8e:8b:b3:d2:bc:63:f5: 84:d7:1b:a8:c0:15:19:48:98:54:26:bb:72:33:10: 7c:66:da:0f:50:5c:59:67:d8:70:76:3b:4e:06:11: 9b:33:f8:f6:29:47:3a:dd:3a:82:dc:39:a3:2c:d9: b6:d6:f3:f9:dd:bc:c8:c4:e8:ef:88:41:2d:ef:99: 17:f9:3f:e7:80:21:f0:1f:ee:69:68:0d:d5:87:2c: 92:87:84:63:d1:a9:de:9e:cf:10:f9:f0:b3:3a:40: c6:4c:48:a5:e5:1e:dc:aa:ab:d7:17:97:3f:3a:34: c3:08:ea:af:cc:fa:ed:fe:17:8d:d0:0e:0f:f4:27: 26:2b:3e:7b:e3:f2:be:bf:3c:be:48:1a:1e:0c:05: 7a:f0:bf:4d:d0:6a:6b:59:b2:f8:f2:6e:43:55:6c: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:36:ED:EC:52:35:1B:B4:AC:A3:43:94:9E:96:41:80:BD:87:44:B5 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:78:ea:cd:db:62:c2:bb:89:9d:e2:41:92:a0:f9:0f:70: dd:55:f0:c5:36:58:b4:5e:b2:3f:6c:55:c6:c4:17:7e:b3:44: 17:b2:03:a7:62:2d:aa:dc:6c:70:04:ce:01:f3:9c:19:da:81: aa:aa:c1:4e:6a:ff:0c:44:2b:c0:4f:11:e1:ab:b8:2c:21:6f: 76:68:ab:8f:a7:a6:fe:a0:23:ad:49:7a:2f:03:a8:5e:76:00: 38:fc:31:f1:d4:ab:38:8e:7b:b0:f6:d3:b7:73:a0:19:3a:54: 8a:19:fe:73:c5:a1:72:3d:12:29:ae:2c:b0:68:77:42:95:95: a7:d8:7b:9f:a1:57:79:d7:5f:a2:17:db:e5:57:90:37:78:31: 77:c8:e0:d6:a8:30:6e:c4:dd:b3:a8:34:31:fa:2b:e8:f0:d9: ac:35:8a:a5:8b:53:0c:3e:4e:2d:4c:c5:5e:1f:9e:fe:8f:74: c2:a8:e3:f6:cc:e4:5a:02:25:25:8f:74:70:b5:ac:22:0e:be: b8:07:f4:22:1d:e0:31:07:b7:43:42:c4:59:55:ff:39:50:14: 16:44:8e:ba:8c:d2:b0:84:2e:9c:6a:9e:df:e5:f1:00:a2:41: c9:6a:6e:bb:f4:1f:2f:10:24:4c:4f:41:8e:17:b5:15:c5:0c: 88:05:86:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjYwNDA0MTcwMTMwWhcNMjYwNDExMTcwMTMwWjAYMRYwFAYD VQQDEw02OWQxNDNlYi1jMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQeWTEQnjSedUHN/EdZsK5FXY+eKEi3qo0z1t4mg564DcAxnUdqnI5yP9nAk 5WHoruW4JKyj5sCZP/CtQmE+8J+CsWEvVjnOUB1ENYSZ5m1OaBnBFcCBnVtT8hV/ XCYfeo6Ls9K8Y/WE1xuowBUZSJhUJrtyMxB8ZtoPUFxZZ9hwdjtOBhGbM/j2KUc6 3TqC3DmjLNm21vP53bzIxOjviEEt75kX+T/ngCHwH+5paA3VhyySh4Rj0anens8Q +fCzOkDGTEil5R7cqqvXF5c/OjTDCOqvzPrt/heN0A4P9CcmKz574/K+vzy+SBoe DAV68L9N0GprWbL48m5DVWzcZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOU27exS NRu0rKNDlJ6WQYC9h0S1MB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABzt46s3bYsK7iZ3iQZKg+Q9w3VXwxTZYtF6yP2xVxsQXfrNEF7IDp2Itqtxs cATOAfOcGdqBqqrBTmr/DEQrwE8R4au4LCFvdmirj6em/qAjrUl6LwOoXnYAOPwx 8dSrOI57sPbTt3OgGTpUihn+c8Whcj0SKa4ssGh3QpWVp9h7n6FXeddfohfb5VeQ N3gxd8jg1qgwbsTds6g0Mfor6PDZrDWKpYtTDD5OLUzFXh+e/o90wqjj9szkWgIl JY90cLWsIg6+uAf0Ih3gMQe3Q0LEWVX/OVAUFkSOuozSsIQunGqe3+XxAKJByWpu u/QfLxAkTE9Bjhe1FcUMiAWG+w== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:16 2026 by rpki-client