$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: Z057OtLVOXoIx+0f5PSZh5VWCcMzUgH/3lpCaszrXik= Subject key identifier: CD:70:6A:5A:7B:B8:50:D0:2F:81:41:47:05:46:D3:A1:F8:8E:31:3C Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 0859 Signing time: Sat 04 Apr 2026 20:34:17 +0000 Manifest this update: Sat 04 Apr 2026 20:34:17 +0000 Manifest next update: Sat 11 Apr 2026 20:34:17 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: VXuKO7UNmTT4ZEeGPvuT++VWgOdceevCoy8C4gn6IMs=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: JI2Y4J6EIn1uWFB8nwUdnofquITm7Yx3KS03ihwD+yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: Apr 4 20:34:17 2026 GMT Not After : Apr 11 20:34:17 2026 GMT Subject: CN=69d175c9-1b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:f8:d5:98:61:d6:7b:18:f7:c5:bf:1d:ed: 63:18:92:83:03:7e:18:d7:fc:af:41:1c:d6:ac:fc: 78:67:6e:10:97:19:22:c3:23:1c:09:9f:08:a3:70: 74:3e:8b:02:92:57:05:7b:07:67:fd:86:09:4f:ae: c1:d5:50:ac:d5:d8:ca:83:48:8e:b6:e6:3a:da:86: d8:de:0b:54:75:34:11:45:fd:cf:23:f4:08:ef:3f: 15:1d:24:de:e9:3a:9b:0e:09:a0:03:77:87:72:6e: 90:55:62:1a:c1:11:b9:a8:16:38:ea:40:63:d6:10: 08:87:0d:52:33:d3:a3:d9:6f:d2:f3:db:a5:c5:3c: e1:f3:e2:24:75:f7:bd:90:4d:9f:3d:ba:56:9f:4d: a3:d7:3a:86:56:d3:f9:03:0a:d8:d6:0d:69:23:4a: 77:51:56:2a:eb:42:f6:11:41:87:c5:0c:a3:a1:67: d7:09:aa:4f:27:8a:8a:d1:9c:e4:1a:8c:ee:ae:75: e9:57:3b:2c:fb:7f:0e:42:c0:4f:08:03:af:35:79: 92:68:92:6a:1b:b5:df:a4:8e:5b:3b:2f:ec:27:4c: 72:72:b0:e3:7d:90:c1:38:b6:9f:2e:ad:a8:99:bc: 83:55:64:d3:b5:84:63:5b:5e:5e:bb:01:a2:af:bf: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:70:6A:5A:7B:B8:50:D0:2F:81:41:47:05:46:D3:A1:F8:8E:31:3C X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:2a:b6:0c:67:ba:ae:f6:af:f2:99:64:6d:b0:bc:0a:24:5e: c5:96:7d:f4:dc:8e:9d:36:39:85:c9:66:03:f7:77:a7:30:54: ca:f7:a5:a2:90:1d:b9:27:91:dd:45:61:cb:a4:7d:d4:da:2d: 45:ec:c7:33:e7:b8:e2:d3:46:a6:6a:4b:48:07:83:f1:01:22: a7:0b:93:05:3b:63:cc:3c:2a:de:88:9b:59:f4:49:d9:25:9a: 53:24:09:c8:a7:78:11:d3:5c:37:2d:9d:22:08:de:c4:89:a6: 60:6e:ae:83:2f:89:97:f6:ce:d6:38:7c:c7:20:25:c1:02:a4: a5:3b:6d:ff:6d:f7:f5:72:99:81:a5:b5:36:ad:4d:11:53:ea: 30:3e:01:4a:82:b1:81:50:3b:fd:cb:0d:94:96:6c:da:e0:6c: 6a:cb:ac:39:20:c8:1a:5c:78:d8:24:ab:7d:fe:fc:10:4f:0a: b0:78:87:ce:43:94:be:44:a0:0f:81:1f:62:4c:dc:1b:7c:91: cb:4c:09:f9:67:62:c0:08:fb:2c:1a:9a:74:f6:ee:d2:da:56: 6f:9c:f5:d7:ea:b7:ae:6e:07:e9:97:e8:7a:be:8d:5f:3b:e5: b0:44:a8:80:1d:ba:8f:d5:95:a9:cd:c9:fc:22:bc:4b:7c:24: 86:27:1c:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjYwNDA0MjAzNDE3WhcNMjYwNDExMjAzNDE3WjAYMRYwFAYD VQQDEw02OWQxNzVjOS0xYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tP41Zhh1nsY98W/He1jGJKDA34Y1/yvQRzWrPx4Z24QlxkiwyMcCZ8Io3B0 PosCklcFewdn/YYJT67B1VCs1djKg0iOtuY62obY3gtUdTQRRf3PI/QI7z8VHSTe 6TqbDgmgA3eHcm6QVWIawRG5qBY46kBj1hAIhw1SM9Oj2W/S89ulxTzh8+Ikdfe9 kE2fPbpWn02j1zqGVtP5AwrY1g1pI0p3UVYq60L2EUGHxQyjoWfXCapPJ4qK0Zzk GozurnXpVzss+38OQsBPCAOvNXmSaJJqG7XfpI5bOy/sJ0xycrDjfZDBOLafLq2o mbyDVWTTtYRjW15euwGir7/IsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1walp7 uFDQL4FBRwVG06H4jjE8MB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxCq2DGe6rvav8plkbbC8CiRexZZ99NyOnTY5hclmA/d3pzBUyvelopAduSeR 3UVhy6R91NotRezHM+e44tNGpmpLSAeD8QEipwuTBTtjzDwq3oibWfRJ2SWaUyQJ yKd4EdNcNy2dIgjexImmYG6ugy+Jl/bO1jh8xyAlwQKkpTtt/2339XKZgaW1Nq1N EVPqMD4BSoKxgVA7/csNlJZs2uBsasusOSDIGlx42CSrff78EE8KsHiHzkOUvkSg D4EfYkzcG3yRy0wJ+WdiwAj7LBqadPbu0tpWb5z11+q3rm4H6Zfoer6NXzvlsESo gB26j9WVqc3J/CK8S3wkhiccJg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:30 2026 by rpki-client