$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json) Hash identifier: /LiKD4ZIFioS33VY+tsZPVwt5x2HYTzHNAv+PDcwZCM= Subject key identifier: E1:D0:DD:C8:62:AE:78:7D:1E:8B:B9:9C:13:B0:78:5C:94:51:EF:86 Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft Manifest number: 0537 Signing time: Sat 04 Apr 2026 23:17:51 +0000 Manifest this update: Sat 04 Apr 2026 23:17:51 +0000 Manifest next update: Sat 11 Apr 2026 23:17:51 +0000 Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: nyeAgi76TX6WviM2gQN4VDoNnTCuDpXXKOBb97q8vtA=) 2: E225E68E397411EC8120D135C4F9AE02.roa (hash: 7te+cPgcfpvpCMVkthOWObu0R1Pa/2uNM+7VktoCVs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Validity Not Before: Apr 4 23:17:51 2026 GMT Not After : Apr 11 23:17:51 2026 GMT Subject: CN=69d19c1f-b585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:af:31:9d:62:80:f3:63:db:10:c2:36:1c:cf: e9:bb:e8:88:b3:ff:10:34:fe:f7:c9:1a:ba:f0:39: 3e:fd:bb:e9:c2:c8:9b:e0:a6:fb:19:52:32:32:f2: 96:be:b8:36:9b:8a:42:6e:31:28:ab:73:58:4f:5f: e2:cb:92:b5:b0:5c:fe:97:8e:ba:77:f7:7b:4d:43: c1:dd:38:dc:a7:68:99:24:f2:0e:66:e4:51:af:00: 0a:f3:ab:9c:ce:c3:6e:4d:be:4d:af:fc:3e:3c:bd: 9f:0b:2e:04:d4:f9:2d:c3:fd:71:3a:0a:55:9d:09: f4:22:26:3d:c9:0e:d6:f7:1d:1e:ce:d7:f7:62:7a: 78:22:35:ce:1d:96:b7:38:be:3e:5b:71:62:15:28: 1e:21:21:14:aa:6e:90:25:1a:6a:dd:f6:ea:de:ed: 6b:72:22:b7:5c:85:95:07:64:79:28:a1:9d:d9:e1: 77:b6:ad:00:db:02:9b:2b:2f:8e:65:f9:7b:e9:63: e6:ae:88:6a:12:63:10:2e:70:ed:0d:17:95:10:37: f5:7c:57:a4:53:04:53:a3:c6:b1:9f:b7:4f:01:c1: 86:ca:92:17:63:b1:e0:91:17:08:11:ee:0e:99:bf: d0:fc:32:9c:2c:32:d9:5f:98:3e:80:b7:5a:47:9b: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D0:DD:C8:62:AE:78:7D:1E:8B:B9:9C:13:B0:78:5C:94:51:EF:86 X509v3 Authority Key Identifier: keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:05:f3:a7:f9:db:53:1f:02:d1:e0:57:46:a6:0a:8f:a2:0b: 2e:8f:ed:66:e7:71:94:c4:ac:7f:4a:0d:b6:51:8a:00:13:aa: 05:3f:5b:bf:83:94:62:cf:ba:6c:5b:73:9c:c1:e1:7f:9a:f4: 47:3f:7f:27:cf:83:e1:d4:e0:d4:e5:8c:32:1f:ef:65:7c:6e: 14:4c:5e:4b:75:f0:df:d0:a5:25:24:e0:25:b7:89:67:8a:0c: 6c:4b:fc:97:f1:6e:af:63:67:77:07:4a:60:51:cd:8e:15:5d: 5d:53:86:fa:43:dd:2c:c5:18:c2:d8:c4:52:6f:cf:f7:64:cf: eb:6f:64:35:74:16:24:62:35:16:5d:00:31:1b:d5:3b:5a:15: 8b:3b:4b:20:c4:83:6f:07:b6:f5:7f:53:8c:64:40:47:16:70: 36:b4:84:0b:70:e5:23:0d:8e:ec:a6:f4:3e:e8:ec:ed:8b:b6: 12:1a:36:c6:7e:fe:32:3f:3d:2e:3b:13:db:6f:c3:23:ff:40: 5a:19:ee:c2:b0:23:6b:44:38:f7:c1:a4:b5:b8:8f:96:7f:71: 01:e5:d8:f8:d2:7d:bb:55:1f:14:42:e3:57:d5:17:d7:f4:c3: 7e:86:eb:e0:fc:c8:32:32:53:20:60:c3:7c:c3:93:db:79:ce: f8:a0:18:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2 MjJCREYzRjAwHhcNMjYwNDA0MjMxNzUxWhcNMjYwNDExMjMxNzUxWjAYMRYwFAYD VQQDEw02OWQxOWMxZi1iNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiK8xnWKA82PbEMI2HM/pu+iIs/8QNP73yRq68Dk+/bvpwsib4Kb7GVIyMvKW vrg2m4pCbjEoq3NYT1/iy5K1sFz+l466d/d7TUPB3Tjcp2iZJPIOZuRRrwAK86uc zsNuTb5Nr/w+PL2fCy4E1Pktw/1xOgpVnQn0IiY9yQ7W9x0eztf3Ynp4IjXOHZa3 OL4+W3FiFSgeISEUqm6QJRpq3fbq3u1rciK3XIWVB2R5KKGd2eF3tq0A2wKbKy+O Zfl76WPmrohqEmMQLnDtDReVEDf1fFekUwRTo8axn7dPAcGGypIXY7HgkRcIEe4O mb/Q/DKcLDLZX5g+gLdaR5sAoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHQ3chi rnh9Hou5nBOweFyUUe+GMB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5 NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4 X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ QXM5LTBwN0hYazFpSzk4X0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJAXzp/nbUx8C0eBXRqYKj6ILLo/tZudxlMSsf0oNtlGKABOqBT9bv4OUYs+6 bFtznMHhf5r0Rz9/J8+D4dTg1OWMMh/vZXxuFExeS3Xw39ClJSTgJbeJZ4oMbEv8 l/Fur2NndwdKYFHNjhVdXVOG+kPdLMUYwtjEUm/P92TP629kNXQWJGI1Fl0AMRvV O1oViztLIMSDbwe29X9TjGRARxZwNrSEC3DlIw2O7Kb0Pujs7Yu2Eho2xn7+Mj89 LjsT22/DI/9AWhnuwrAja0Q498GktbiPln9xAeXY+NJ9u1UfFELjV9UX1/TDfobr 4PzIMjJTIGDDfMOT23nO+KAYow== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:26 2026 by rpki-client