$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: RbvkuvIna5GnD+ztsjBmmoV+RwnwVlfJ2e+IHo+gTk8= Subject key identifier: 20:B4:EB:57:88:5F:31:9D:99:C7:7F:44:57:F1:1C:1C:F9:60:4E:4C Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 01E7 Signing time: Mon 27 Apr 2026 03:22:20 +0000 Manifest this update: Mon 27 Apr 2026 03:22:19 +0000 Manifest next update: Mon 04 May 2026 03:22:19 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: GbXdErVnwji25gy6gcKPUUZRXTJCPj2v8RMvm8GKkGQ=) 2: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 3: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) 4: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Apr 27 03:22:19 2026 GMT Not After : May 4 03:22:19 2026 GMT Subject: CN=69eed66b-121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:95:28:dd:75:cc:3b:77:aa:44:f4:c5:4c: 07:fb:94:bb:68:16:ba:1c:22:67:1a:3a:3e:7a:e0: d9:49:e0:df:c0:bf:9e:0a:fd:18:5f:2e:cc:b8:a7: 68:e8:c3:1d:bd:a1:fa:26:8f:75:28:46:5c:6b:70: ec:48:23:75:52:38:84:dd:4e:79:af:77:8f:f2:a7: fe:b5:b9:c8:df:1c:fb:80:36:3b:1e:5c:0c:68:08: b7:e1:8b:92:dc:80:8d:f2:43:29:fe:c5:34:72:26: a4:98:d6:f8:f8:9e:a1:2b:13:b4:5a:94:ba:a0:8d: 7a:91:fe:8e:58:23:cb:dc:a7:4d:41:69:6c:40:2f: 8d:11:b6:e7:58:4f:20:a7:45:35:71:20:92:81:26: 71:1f:c0:cb:53:87:f6:04:1b:94:d5:84:d3:fd:c1: 1a:ca:8b:e8:35:40:a3:41:78:8d:83:7f:f9:9d:50: 0e:d7:3a:77:ad:38:97:1e:4e:5c:fd:d5:49:94:5f: 4e:9f:9a:17:18:b5:38:ae:b2:c5:3a:ce:64:e7:fe: fc:5a:73:63:72:1a:a2:c9:d6:67:0a:fb:9f:06:44: 94:d6:53:aa:c3:e1:5b:e3:4f:c9:02:a1:a0:9e:49: 72:db:8f:63:65:bc:df:99:ee:7f:68:77:7a:76:86: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:EB:57:88:5F:31:9D:99:C7:7F:44:57:F1:1C:1C:F9:60:4E:4C X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:35:7b:c8:e9:4e:a1:9f:39:7a:79:c9:95:8a:c6:f9:a3:e6: 2b:19:10:e3:9b:7f:d0:30:f0:32:64:20:76:1a:ea:c3:24:f4: 96:14:6c:a4:f8:b0:02:5a:b3:9c:61:c7:c4:07:2e:e1:97:a5: c1:5b:e2:36:4c:5e:07:dd:b3:cf:d7:65:ad:2e:ee:1b:92:b4: 0a:97:a1:b1:92:89:5b:c7:b8:3e:eb:a4:3a:2c:fd:02:09:88: 9e:4e:cb:99:5a:c8:14:5c:85:22:61:67:58:cd:34:aa:88:4e: cf:14:85:6d:6e:20:be:7d:7a:3f:15:fb:e4:c3:5b:2c:17:b8: 0c:d1:93:d5:9b:88:e2:ba:be:27:28:df:c0:27:78:97:20:32: 72:80:8b:0e:99:91:1a:95:42:d8:ae:9f:79:c5:f2:64:ea:10: bc:2c:50:65:b4:cc:d9:73:50:56:68:70:53:9e:65:e5:ae:94: 37:e2:97:11:18:2b:bc:66:44:53:9a:92:eb:33:3d:dc:c9:71: 90:c2:bb:f0:1c:12:9e:23:88:9c:ef:da:5e:b2:6d:4f:e9:b0: 93:4d:1f:5d:b9:09:a5:c1:e6:90:e1:ec:36:24:5a:25:29:3f: a4:86:33:89:0d:33:ea:b5:aa:86:4d:40:4e:d6:1a:cc:d9:8e: 63:b3:15:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwNDI3MDMyMjE5WhcNMjYwNTA0MDMyMjE5WjAYMRYwFAYD VQQDEw02OWVlZDY2Yi0xMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPyVKN11zDt3qkT0xUwH+5S7aBa6HCJnGjo+euDZSeDfwL+eCv0YXy7MuKdo 6MMdvaH6Jo91KEZca3DsSCN1UjiE3U55r3eP8qf+tbnI3xz7gDY7HlwMaAi34YuS 3ICN8kMp/sU0ciakmNb4+J6hKxO0WpS6oI16kf6OWCPL3KdNQWlsQC+NEbbnWE8g p0U1cSCSgSZxH8DLU4f2BBuU1YTT/cEayovoNUCjQXiNg3/5nVAO1zp3rTiXHk5c /dVJlF9On5oXGLU4rrLFOs5k5/78WnNjchqiydZnCvufBkSU1lOqw+Fb40/JAqGg nkly249jZbzfme5/aHd6doY14QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCC061eI XzGdmcd/RFfxHBz5YE5MMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALjV7yOlOoZ85ennJlYrG+aPmKxkQ45t/0DDwMmQgdhrqwyT0lhRspPiwAlqz nGHHxAcu4ZelwVviNkxeB92zz9dlrS7uG5K0CpehsZKJW8e4PuukOiz9AgmInk7L mVrIFFyFImFnWM00qohOzxSFbW4gvn16PxX75MNbLBe4DNGT1ZuI4rq+JyjfwCd4 lyAycoCLDpmRGpVC2K6fecXyZOoQvCxQZbTM2XNQVmhwU55l5a6UN+KXERgrvGZE U5qS6zM93MlxkMK78BwSniOInO/aXrJtT+mwk00fXbkJpcHmkOHsNiRaJSk/pIYz iQ0z6rWqhk1ATtYazNmOY7MVXg== -----END CERTIFICATE-----Generated at Tue Apr 28 12:49:36 2026 by rpki-client