$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: 0qL+nplkZMzoxGod0CDZCVyRSeVa2UrD3zcleMlSl/8= Subject key identifier: F6:D9:E1:EA:3F:08:C7:9C:2C:B2:DC:07:48:63:79:EE:50:4E:A3:E6 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 016B Signing time: Mon 27 Apr 2026 04:40:12 +0000 Manifest this update: Mon 27 Apr 2026 04:40:12 +0000 Manifest next update: Mon 04 May 2026 04:40:12 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: tmAl6fj5w2HBYj3QBljj5AmFj42my0FuC5n23dwZW2c=) 2: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sO0aVU0cFwGpTz0cQ9IUqdHUM9QV4sMVuL+bslRBxPA=) 3: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: JflVdPBidB0mm33Bgl8MOrVtKlhbLqttKFMf8YGitR8=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: aW25kEfOm3Y6z0dJwR8QkAiS+sy9HyUcqVGhB3onEl8=) 5: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: 7+vMXmZRIYIKIxBz5RQMdseZAdAsObbhTp7dlt06B0M=) 6: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6ECFRbdi/OwcVFk5I96YrsKDQE1WQn7CfR1VvBkvdok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 04:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Apr 27 04:40:12 2026 GMT Not After : May 4 04:40:12 2026 GMT Subject: CN=69eee8ac-1c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:91:31:b0:40:d4:da:9c:36:01:35:f9:b3: 6a:1a:1f:b1:4f:99:56:1f:cc:08:c6:e7:9b:4d:bb: 42:64:b4:8b:2d:4b:d1:8d:c1:45:44:ed:b8:46:f9: dc:0a:a6:89:d8:e7:b9:a1:c9:bf:3d:55:75:e1:65: 81:74:0b:1d:59:f7:fa:46:40:4e:08:96:d0:21:bc: 4d:e3:ab:09:7e:3d:5c:29:93:1d:33:d5:7d:8c:83: 06:c6:69:20:7c:42:a7:5e:e0:9c:21:11:48:23:58: 32:6e:ff:6e:d9:52:4f:84:a3:ad:ab:11:ce:73:56: 3d:62:99:e6:4c:b1:b5:0d:9f:c3:27:46:e2:96:5b: ce:bb:47:0c:bb:47:03:aa:b5:8f:03:d1:4e:2e:b3: a6:cd:c6:94:7f:da:4f:9b:ae:c5:a3:c3:d7:85:8e: 15:4a:cd:c0:99:e9:5c:94:9e:ab:b1:65:bb:53:1d: 6f:31:67:4f:15:ec:c2:46:d6:eb:ea:2b:c8:fc:7e: 93:79:f4:b8:2b:fb:19:82:9c:82:6d:6d:8a:c7:db: df:f4:e3:a8:9a:77:a4:08:ad:4e:c6:ad:72:33:c7: 07:ca:12:cc:e3:3e:35:51:60:68:14:9f:cc:b3:22: d4:e2:c1:3e:09:39:4d:28:81:08:d3:00:67:9d:8e: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:E1:EA:3F:08:C7:9C:2C:B2:DC:07:48:63:79:EE:50:4E:A3:E6 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:41:eb:5d:f7:f5:39:a7:76:97:24:31:e4:32:f0:dc:01:35: 83:e2:b2:9f:ba:0c:ae:28:ce:d8:fd:86:f3:a3:aa:48:bd:bb: 92:87:17:b0:00:2c:81:96:ee:bf:aa:6b:8e:53:92:c1:5a:a3: e5:ea:91:2f:23:ae:fc:6e:92:32:41:b1:64:44:62:41:87:92: 95:18:9e:2a:37:f9:dc:dd:2b:5b:e1:20:28:04:f3:f9:69:ac: 0d:76:70:96:c5:01:f2:1f:6e:38:51:f7:f6:f6:21:4c:df:e4: 5e:33:28:dc:07:3f:a3:3d:8a:1b:dc:2e:0f:cd:9b:f0:6b:e5: 38:0b:46:7e:ff:f5:ba:fe:04:ac:67:51:3c:d1:aa:4f:57:08: f0:13:3c:3f:a9:5c:ca:82:5d:55:39:fe:1d:8e:ff:bb:e6:23: 15:b8:d1:85:3d:00:31:6a:48:7b:94:28:2e:f4:9f:ca:9d:6a: e9:dd:9b:d9:29:77:59:a1:5a:38:5a:83:5d:f6:56:76:86:69: cf:e7:f3:44:22:b1:00:e3:5d:55:77:e5:c6:cc:d9:24:05:67: b6:a1:3e:e2:77:f1:8a:24:3a:b1:eb:a7:bb:f3:69:b1:1d:27: 7d:b6:b5:d4:42:5e:a8:5a:b2:5b:ff:dd:52:01:f4:04:17:84: d1:fe:b9:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjYwNDI3MDQ0MDEyWhcNMjYwNTA0MDQ0MDEyWjAYMRYwFAYD VQQDEw02OWVlZThhYy0xYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF+RMbBA1NqcNgE1+bNqGh+xT5lWH8wIxuebTbtCZLSLLUvRjcFFRO24Rvnc CqaJ2Oe5ocm/PVV14WWBdAsdWff6RkBOCJbQIbxN46sJfj1cKZMdM9V9jIMGxmkg fEKnXuCcIRFII1gybv9u2VJPhKOtqxHOc1Y9YpnmTLG1DZ/DJ0billvOu0cMu0cD qrWPA9FOLrOmzcaUf9pPm67Fo8PXhY4VSs3AmelclJ6rsWW7Ux1vMWdPFezCRtbr 6ivI/H6TefS4K/sZgpyCbW2Kx9vf9OOomnekCK1Oxq1yM8cHyhLM4z41UWBoFJ/M syLU4sE+CTlNKIEI0wBnnY6PpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbZ4eo/ CMecLLLcB0hjee5QTqPmMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsUHrXff1Oad2lyQx5DLw3AE1g+Kyn7oMrijO2P2G86OqSL27kocXsAAsgZbu v6prjlOSwVqj5eqRLyOu/G6SMkGxZERiQYeSlRieKjf53N0rW+EgKATz+WmsDXZw lsUB8h9uOFH39vYhTN/kXjMo3Ac/oz2KG9wuD82b8GvlOAtGfv/1uv4ErGdRPNGq T1cI8BM8P6lcyoJdVTn+HY7/u+YjFbjRhT0AMWpIe5QoLvSfyp1q6d2b2Sl3WaFa OFqDXfZWdoZpz+fzRCKxAONdVXflxszZJAVntqE+4nfxiiQ6seunu/NpsR0nfba1 1EJeqFqyW//dUgH0BBeE0f65cw== -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:12 2026 by rpki-client