$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: k3/yw1WWnOz3h6qB2uDIT1Pm5ChqlQ/xpq6gWEgLP2A= Subject key identifier: C5:45:79:68:F1:9A:35:65:41:0B:B6:7F:58:8A:2E:CD:4E:19:8A:CC Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 0836 Signing time: Sat 04 Apr 2026 20:43:06 +0000 Manifest this update: Sat 04 Apr 2026 20:43:06 +0000 Manifest next update: Sat 11 Apr 2026 20:43:06 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: yJrDL2x5F2Ccyl2Cl4xAQ7OdK4fZ164EY9gpO2yVi0Y=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: zGD9lcUTmqWV8Ub5PXm3WZs7NlAXgc4Pjs1NPpumIiQ=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: OlWC46i6lVGRyQNBF4VXZE/tYTQkG/ur7HJmGVnjsmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: Apr 4 20:43:06 2026 GMT Not After : Apr 11 20:43:06 2026 GMT Subject: CN=69d177da-15be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:e8:ee:d3:96:fe:c8:1c:cd:6e:de:28:61: e1:35:d9:d2:80:ec:19:42:ac:7b:8c:15:88:9d:5b: e6:69:39:3f:86:72:5b:65:e7:fc:88:4a:08:50:8e: 99:a6:80:61:58:d3:0f:fa:a2:af:76:a2:2f:c0:70: 42:c2:cb:d5:1f:7e:cc:64:64:49:40:4d:0b:89:b9: 29:e2:4a:7a:2c:28:91:f8:37:8b:82:92:06:1e:2b: cd:ae:a7:8d:42:64:30:1c:36:c6:02:02:91:83:9f: c6:9a:4d:20:85:5e:96:b7:aa:dc:af:b8:9a:ac:d1: 39:02:a8:d2:86:ac:05:6d:50:04:85:ef:92:e6:92: b6:94:1b:2a:9c:15:3f:94:63:d0:c2:a1:b8:4e:28: 86:24:59:e3:da:53:ca:43:1b:1d:3d:2c:0f:a7:d4: 5c:b1:3b:6c:dd:8f:64:2e:e2:b6:2a:39:15:94:6a: fb:0c:e1:49:21:81:a4:9e:ed:52:08:7f:cf:aa:26: ab:42:65:5b:a2:97:6e:fd:39:72:ed:40:72:d2:73: d9:22:3b:b9:2e:e7:81:12:1d:28:83:bc:0a:e9:43: 48:c2:47:f4:f1:49:62:c6:d7:da:44:2c:01:61:56: e0:54:9d:31:cb:a7:7b:da:b8:f4:63:fb:35:3f:91: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:79:68:F1:9A:35:65:41:0B:B6:7F:58:8A:2E:CD:4E:19:8A:CC X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f2:7b:e1:ab:98:92:15:cb:48:7c:d9:de:e2:93:f3:29:2d: 01:27:8a:2b:7d:24:ca:9b:fc:39:54:7e:48:e7:15:10:86:0b: f9:24:13:d3:31:b5:58:62:6a:72:9f:09:d7:75:03:65:5a:0a: 49:1b:50:78:ef:cb:68:80:8e:df:67:8a:aa:f8:55:81:3d:47: 93:4d:79:e3:7f:c7:19:c2:ca:12:04:e1:f0:2c:99:ef:28:0d: 8a:75:25:7a:ad:5c:8b:77:a7:a8:12:87:bd:a9:b4:6f:4b:49: af:bc:09:e1:d1:2b:01:e8:36:2a:e3:9d:81:ec:48:1c:73:cd: f6:7b:5d:d2:ff:f1:42:59:84:f8:cb:8b:3c:00:63:d5:ed:e1: b2:25:6c:73:ec:20:76:b1:ac:e9:d9:ed:41:fa:db:06:75:0c: dc:45:a9:54:eb:6f:fc:01:be:8c:47:8a:49:3f:6a:6a:17:89: 19:c5:b9:14:21:5c:e9:b1:c0:3d:fb:44:07:96:b0:db:01:ae: 97:aa:14:48:c2:fb:45:9d:93:80:a6:40:05:a9:7d:39:1d:55: 86:36:02:5a:de:d9:bc:cf:fd:ff:f5:91:f2:57:af:0c:ca:2e: 13:8c:48:08:05:4f:a2:cb:13:9e:3f:3a:b4:47:7a:a0:a3:5a: c7:ce:0f:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjYwNDA0MjA0MzA2WhcNMjYwNDExMjA0MzA2WjAYMRYwFAYD VQQDEw02OWQxNzdkYS0xNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAinPo7tOW/sgczW7eKGHhNdnSgOwZQqx7jBWInVvmaTk/hnJbZef8iEoIUI6Z poBhWNMP+qKvdqIvwHBCwsvVH37MZGRJQE0Libkp4kp6LCiR+DeLgpIGHivNrqeN QmQwHDbGAgKRg5/Gmk0ghV6Wt6rcr7iarNE5AqjShqwFbVAEhe+S5pK2lBsqnBU/ lGPQwqG4TiiGJFnj2lPKQxsdPSwPp9RcsTts3Y9kLuK2KjkVlGr7DOFJIYGknu1S CH/PqiarQmVbopdu/Tly7UBy0nPZIju5LueBEh0og7wK6UNIwkf08UlixtfaRCwB YVbgVJ0xy6d72rj0Y/s1P5GLuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVFeWjx mjVlQQu2f1iKLs1OGYrMMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOvJ74auYkhXLSHzZ3uKT8yktASeKK30kypv8OVR+SOcVEIYL+SQT0zG1WGJq cp8J13UDZVoKSRtQeO/LaICO32eKqvhVgT1Hk01543/HGcLKEgTh8CyZ7ygNinUl eq1ci3enqBKHvam0b0tJr7wJ4dErAeg2KuOdgexIHHPN9ntd0v/xQlmE+MuLPABj 1e3hsiVsc+wgdrGs6dntQfrbBnUM3EWpVOtv/AG+jEeKST9qaheJGcW5FCFc6bHA PftEB5aw2wGul6oUSML7RZ2TgKZABal9OR1VhjYCWt7ZvM/9//WR8levDMouE4xI CAVPossTnj86tEd6oKNax84P0g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:38 2026 by rpki-client