$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: Gqtl8pL2du+YgbC2PKyETMYhMOnSRU1vHyEh2MVqE5M= Subject key identifier: 5A:34:4B:D6:99:2B:C2:3D:5E:B8:F0:AB:CF:26:23:19:CB:23:01:12 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: 0129 Signing time: Sun 05 Apr 2026 05:01:14 +0000 Manifest this update: Sun 05 Apr 2026 05:01:13 +0000 Manifest next update: Sun 12 Apr 2026 05:01:13 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: zIEcplMU6VFWIBQmU2NhtxEaAjLsoLBqghW5ujbNZtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Apr 5 05:01:13 2026 GMT Not After : Apr 12 05:01:13 2026 GMT Subject: CN=69d1ec9a-6596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:33:15:12:47:4d:65:b2:b3:05:a2:9e:2e: 45:ff:16:67:a1:09:db:aa:20:67:bd:55:db:d5:62: 05:c1:3d:85:7c:37:ef:65:c0:fb:8c:87:d9:dd:3d: f2:66:6b:db:e8:bd:26:38:05:76:f6:4b:23:d4:2a: 92:5f:56:47:3b:5b:77:9d:68:72:a6:3e:00:3c:7e: 5b:fe:80:d5:91:a5:0b:59:ca:34:e3:0b:1d:18:f1: 4c:f2:d7:28:b6:a2:90:8e:5e:fc:2c:c1:70:2c:b5: ef:d9:c2:b0:98:18:ac:fe:48:07:3a:a2:6e:02:eb: 3b:f1:9b:32:70:21:39:af:6a:ce:bf:f5:98:d3:68: 03:f0:fc:c6:39:b8:6c:91:c1:27:25:62:98:e0:2c: e8:c7:4f:e6:0a:d5:f0:db:c2:81:f2:41:be:b1:59: 6c:9e:b2:27:d3:b7:50:de:48:3c:29:f6:cc:e4:e8: 68:ce:c9:c3:fd:9d:0b:a5:de:54:df:da:ea:8d:e1: 49:9d:27:52:20:25:c1:47:1f:df:39:dc:69:66:43: 6c:34:45:2c:e8:6f:5a:08:fb:a3:0b:90:98:a0:85: 29:1e:b8:28:57:5b:65:35:c4:9f:c9:56:e5:52:65: 2c:c8:aa:7a:e4:78:de:89:00:e6:89:01:d0:99:53: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:34:4B:D6:99:2B:C2:3D:5E:B8:F0:AB:CF:26:23:19:CB:23:01:12 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d2:73:d4:28:eb:69:cb:3b:fd:91:d2:0d:f0:5b:ea:57:55: 8b:08:2b:b1:43:57:89:e7:e9:cc:ee:60:62:a7:1e:a1:2c:81: 8f:1e:c6:6f:bd:38:74:b7:59:2c:82:9a:3b:eb:63:bc:89:d6: d9:e2:1e:83:6e:ff:15:6f:93:cb:a3:0a:64:1b:dd:8b:24:bd: b9:47:a3:53:11:07:7a:80:d2:1c:6d:18:f3:87:a6:88:0b:10: 52:b8:a3:49:1d:8d:4d:27:7f:51:9f:7d:81:7c:8b:57:31:69: e3:4b:20:25:0c:6e:6e:0d:96:5f:a6:55:2f:58:11:c4:ae:0b: cd:dc:2a:ae:14:98:59:b1:c3:71:79:78:b2:67:e3:4a:87:a9: 9f:67:58:94:cd:c1:7e:55:03:9f:3d:e8:bf:31:c0:f2:af:9f: ce:8a:2a:ed:64:65:56:77:09:5c:f8:38:10:af:33:42:8e:7b: 03:43:68:bb:cc:bf:52:80:26:9c:78:27:6d:5a:ee:e1:2a:d7: 7b:00:5c:12:0b:14:d2:9e:58:fa:8c:ba:4d:44:0c:7d:f4:d1: ec:b9:74:42:01:2b:fc:d1:42:67:13:d1:95:c2:5d:3d:6d:1a: 7d:f4:7a:c8:34:c4:18:d3:5d:45:94:b5:b7:18:ae:46:33:f1: 6a:0d:be:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjYwNDA1MDUwMTEzWhcNMjYwNDEyMDUwMTEzWjAYMRYwFAYD VQQDEw02OWQxZWM5YS02NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocwzFRJHTWWyswWini5F/xZnoQnbqiBnvVXb1WIFwT2FfDfvZcD7jIfZ3T3y Zmvb6L0mOAV29ksj1CqSX1ZHO1t3nWhypj4APH5b/oDVkaULWco04wsdGPFM8tco tqKQjl78LMFwLLXv2cKwmBis/kgHOqJuAus78ZsycCE5r2rOv/WY02gD8PzGObhs kcEnJWKY4Czox0/mCtXw28KB8kG+sVlsnrIn07dQ3kg8KfbM5OhozsnD/Z0Lpd5U 39rqjeFJnSdSICXBRx/fOdxpZkNsNEUs6G9aCPujC5CYoIUpHrgoV1tlNcSfyVbl UmUsyKp65HjeiQDmiQHQmVMQhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFo0S9aZ K8I9Xrjwq88mIxnLIwESMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtJz1Cjracs7/ZHSDfBb6ldViwgrsUNXiefpzO5gYqceoSyBjx7Gb704dLdZ LIKaO+tjvInW2eIeg27/FW+Ty6MKZBvdiyS9uUejUxEHeoDSHG0Y84emiAsQUrij SR2NTSd/UZ99gXyLVzFp40sgJQxubg2WX6ZVL1gRxK4LzdwqrhSYWbHDcXl4smfj Soepn2dYlM3BflUDnz3ovzHA8q+fzooq7WRlVncJXPg4EK8zQo57A0Nou8y/UoAm nHgnbVru4SrXewBcEgsU0p5Y+oy6TUQMffTR7Ll0QgEr/NFCZxPRlcJdPW0affR6 yDTEGNNdRZS1txiuRjPxag2+iQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:46 2026 by rpki-client