$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: Zxxi2C+ett9qSXHVm4eq55BaRXMnqmkBqqY/zmRAgMQ= Subject key identifier: AE:C8:27:C5:5C:4A:D4:89:A6:C0:D9:7F:74:BB:7C:1D:DD:FE:31:0A Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0D87 Signing time: Sat 04 Apr 2026 19:00:25 +0000 Manifest this update: Sat 04 Apr 2026 19:00:24 +0000 Manifest next update: Sat 11 Apr 2026 19:00:24 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: 4OUkSJ/2IdEIOFVFBp6QMXwY4v2gL2V1NHi2qu6lGPk=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: sDV1SEKZeGbsy9FSAAPLIsIKO+rn3pYirqFdSzqZ8rU=) 3: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: Apr 4 19:00:24 2026 GMT Not After : Apr 11 19:00:24 2026 GMT Subject: CN=69d15fc9-7af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:7f:fc:b7:83:ec:c9:21:95:d7:98:36:e3: 59:e2:cc:2a:86:c1:47:78:42:a9:4d:11:d3:5b:13: 7d:33:12:ab:d7:68:73:f3:86:8c:84:d3:9d:2f:61: e2:39:db:94:48:46:a0:12:c5:85:83:ea:f4:9b:2a: 98:c2:89:f0:35:7d:dc:2f:6f:08:87:86:9b:d0:93: cb:7b:ca:45:48:1a:b7:98:5f:98:4d:50:f0:71:4e: 72:30:dd:72:ce:0f:0a:69:90:ae:ab:b7:82:57:20: 2f:7b:80:c1:9b:49:b5:48:b3:06:1f:b4:26:d4:75: f6:de:ed:b8:65:d5:1e:c5:29:bc:ba:4f:f0:be:ce: f5:18:ed:67:f6:87:f8:56:62:97:e0:c6:b5:c4:63: e7:85:43:9d:a8:bd:6a:ef:5b:a6:dc:f2:48:8b:08: 8e:9f:0c:9b:3e:5f:bb:b3:57:b5:19:c2:3d:bf:28: d5:66:42:ac:1e:7d:e1:5b:8f:cf:b9:d9:0c:09:c9: c4:12:31:7f:43:8c:a0:65:91:a6:07:6d:9b:63:9f: c1:3b:e8:56:d6:95:ea:e4:38:74:ea:5a:28:89:5c: 44:ea:3b:13:b6:2d:fb:1d:db:d0:1e:dc:72:e0:1e: fd:d6:64:77:a1:d2:40:77:9c:ce:db:94:54:e5:8f: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C8:27:C5:5C:4A:D4:89:A6:C0:D9:7F:74:BB:7C:1D:DD:FE:31:0A X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:06:95:84:eb:0a:f1:bf:ca:38:37:ba:5e:44:78:69:17:ed: 36:50:94:0c:03:29:2d:d1:6e:2b:50:80:2f:24:f8:d1:ea:40: 06:68:4c:18:1e:03:f3:b7:67:52:d7:7e:a0:7b:97:4f:21:12: 85:06:7d:9a:b7:f5:e7:17:31:1d:09:37:87:10:70:4e:5b:41: 5f:1b:85:37:aa:11:91:ac:99:ab:c8:fd:33:1b:ba:c1:82:da: 00:49:42:98:45:69:15:e7:33:20:4d:77:81:eb:f6:a4:d6:79: d0:4e:72:41:51:cb:37:bc:1e:51:f7:94:e7:a1:1a:ee:14:d6: 72:7b:d0:ff:66:1a:ae:74:6d:de:5b:77:7a:7c:81:9d:ef:77: 1d:71:8c:a8:b5:46:f2:06:f6:49:47:22:db:fe:8f:2d:11:1c: 07:7b:f3:82:77:1d:a3:40:14:83:15:82:42:01:c8:17:e6:b2: 09:ed:69:40:c6:56:22:6f:ed:11:71:88:a4:2d:98:21:05:ba: 0c:ce:c8:6e:7a:eb:98:01:4b:30:f2:79:00:e1:7d:3f:df:ec: 8a:22:40:92:eb:49:b2:c1:68:66:34:97:e5:da:a1:f2:d4:1f: 7f:32:bd:be:f6:d1:ab:35:b6:c3:89:03:85:40:34:69:d8:82: 39:1c:3d:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjYwNDA0MTkwMDI0WhcNMjYwNDExMTkwMDI0WjAYMRYwFAYD VQQDEw02OWQxNWZjOS03YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlp//LeD7MkhldeYNuNZ4swqhsFHeEKpTRHTWxN9MxKr12hz84aMhNOdL2Hi OduUSEagEsWFg+r0myqYwonwNX3cL28Ih4ab0JPLe8pFSBq3mF+YTVDwcU5yMN1y zg8KaZCuq7eCVyAve4DBm0m1SLMGH7Qm1HX23u24ZdUexSm8uk/wvs71GO1n9of4 VmKX4Ma1xGPnhUOdqL1q71um3PJIiwiOnwybPl+7s1e1GcI9vyjVZkKsHn3hW4/P udkMCcnEEjF/Q4ygZZGmB22bY5/BO+hW1pXq5Dh06looiVxE6jsTti37HdvQHtxy 4B791mR3odJAd5zO25RU5Y8TKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7IJ8Vc StSJpsDZf3S7fB3d/jEKMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAigaVhOsK8b/KODe6XkR4aRftNlCUDAMpLdFuK1CALyT40epABmhMGB4D87dn Utd+oHuXTyEShQZ9mrf15xcxHQk3hxBwTltBXxuFN6oRkayZq8j9Mxu6wYLaAElC mEVpFeczIE13gev2pNZ50E5yQVHLN7weUfeU56Ea7hTWcnvQ/2YarnRt3lt3enyB ne93HXGMqLVG8gb2SUci2/6PLREcB3vzgncdo0AUgxWCQgHIF+ayCe1pQMZWIm/t EXGIpC2YIQW6DM7IbnrrmAFLMPJ5AOF9P9/siiJAkutJssFoZjSX5dqh8tQffzK9 vvbRqzW2w4kDhUA0adiCORw9+Q== -----END CERTIFICATE-----Generated at Mon Apr 6 09:05:41 2026 by rpki-client