$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: Ewd/n8V06d7RfJ80RkmSjeZ8u23M7c4T0qi4npsOMoU= Subject key identifier: 62:B2:B8:F7:E5:1B:01:68:52:D2:E4:A3:3E:93:BB:1E:CE:A1:59:2C Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 0325 Signing time: Thu 23 Apr 2026 01:11:26 +0000 Manifest this update: Thu 23 Apr 2026 01:11:26 +0000 Manifest next update: Thu 30 Apr 2026 01:11:26 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: NCHfQK747MOQE0rTB89dYr02zRC24BQHW1DlspgnNR0=) 2: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=) 3: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=) 4: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=) 5: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=) 6: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 01:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Apr 23 01:11:26 2026 GMT Not After : Apr 30 01:11:26 2026 GMT Subject: CN=69e971be-8a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:3e:42:e6:d2:63:81:7c:84:18:b3:e7:42: 12:19:37:3a:cc:e2:dd:7a:56:5d:3c:42:60:cb:2f: c3:e0:10:7a:2d:99:cd:53:ff:30:b5:99:63:f1:9a: ff:1f:0a:4c:a8:53:29:0e:49:1b:8f:53:90:d5:2d: 3c:39:0b:ad:0a:04:76:f7:f4:36:7e:2c:ab:33:94: ce:4e:27:47:5b:00:20:46:74:65:f8:18:71:91:69: 36:30:8e:09:45:3e:83:99:aa:67:92:89:9d:50:c4: e6:6c:53:e3:3e:fc:16:31:39:b3:28:36:ca:c0:bb: d9:47:5a:67:f2:d9:f8:cd:4f:84:1a:86:b0:aa:35: 3f:a8:75:11:9e:a0:94:21:08:87:38:bb:f7:c7:59: b9:a2:95:4c:2e:f9:b5:3c:d1:01:c2:c8:f5:d6:9a: 3e:0d:e9:bb:8b:26:6f:ed:a4:ba:a1:56:af:91:05: c4:f3:98:26:9b:da:ad:53:26:ad:6d:de:70:70:cb: 4d:1a:ab:08:23:d3:2a:a4:30:34:b1:af:99:93:a5: ac:8d:3b:c6:4c:e4:69:67:61:d3:6e:8d:2e:65:21: 7a:77:6f:7c:2b:01:8a:0f:2a:bb:99:fc:ef:58:5e: 1e:fd:a7:08:14:b6:32:a3:a0:5d:62:4e:68:2f:74: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B2:B8:F7:E5:1B:01:68:52:D2:E4:A3:3E:93:BB:1E:CE:A1:59:2C X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:81:6c:7b:40:2e:4b:df:e5:f5:17:91:24:cb:29:2b:48:17: 6f:2f:6b:f1:18:3e:d8:e2:3d:f6:fa:fe:ec:a9:8c:d9:69:d2: 80:d7:1b:75:cb:30:4d:ba:ff:8d:ad:de:41:eb:67:8f:09:04: 47:89:6a:e2:23:98:d4:f8:5f:66:be:61:e2:df:33:2d:bf:e6: e0:62:62:55:b7:c8:0f:c5:1f:55:63:08:c9:84:7e:a7:fb:18: b7:5c:2e:89:61:4c:7a:76:d2:a4:dd:88:17:b2:90:c6:1f:c7: 44:30:c3:1f:f5:42:d5:f0:30:4a:ca:a7:fa:54:97:09:47:0a: f5:16:57:90:7c:c4:60:c8:e1:c8:51:ea:19:e5:c5:47:ac:ba: 80:d5:ca:81:36:be:fa:e7:e5:90:4d:8c:5d:bd:4f:a8:5e:b6: cd:d1:6a:2d:88:65:4d:0a:67:27:1d:05:77:42:de:4a:3d:6f: 4e:89:ba:de:d7:8a:e8:a6:45:41:0f:e4:47:ef:c7:8e:49:bf: 16:b8:f4:21:94:8e:0d:59:f2:ee:5f:5d:b1:23:bd:d6:23:9f: 42:4a:79:d6:8f:19:25:b7:45:c4:80:31:e5:bc:04:f9:61:e5: 64:c0:af:ec:52:f5:cd:af:db:29:d4:c4:91:64:00:97:7e:be: 54:7b:df:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjYwNDIzMDExMTI2WhcNMjYwNDMwMDExMTI2WjAYMRYwFAYD VQQDEw02OWU5NzFiZS04YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZo+QubSY4F8hBiz50ISGTc6zOLdelZdPEJgyy/D4BB6LZnNU/8wtZlj8Zr/ HwpMqFMpDkkbj1OQ1S08OQutCgR29/Q2fiyrM5TOTidHWwAgRnRl+BhxkWk2MI4J RT6DmapnkomdUMTmbFPjPvwWMTmzKDbKwLvZR1pn8tn4zU+EGoawqjU/qHURnqCU IQiHOLv3x1m5opVMLvm1PNEBwsj11po+Dem7iyZv7aS6oVavkQXE85gmm9qtUyat bd5wcMtNGqsII9MqpDA0sa+Zk6WsjTvGTORpZ2HTbo0uZSF6d298KwGKDyq7mfzv WF4e/acIFLYyo6BdYk5oL3TBiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKyuPfl GwFoUtLkoz6Tux7OoVksMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvoFse0AuS9/l9ReRJMspK0gXby9r8Rg+2OI99vr+7KmM2WnSgNcbdcswTbr/ ja3eQetnjwkER4lq4iOY1PhfZr5h4t8zLb/m4GJiVbfID8UfVWMIyYR+p/sYt1wu iWFMenbSpN2IF7KQxh/HRDDDH/VC1fAwSsqn+lSXCUcK9RZXkHzEYMjhyFHqGeXF R6y6gNXKgTa++uflkE2MXb1PqF62zdFqLYhlTQpnJx0Fd0LeSj1vTom63teK6KZF QQ/kR+/Hjkm/Frj0IZSODVny7l9dsSO91iOfQkp51o8ZJbdFxIAx5bwE+WHlZMCv 7FL1za/bKdTEkWQAl36+VHvfWw== -----END CERTIFICATE-----Generated at Fri Apr 24 19:18:10 2026 by rpki-client