$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: 0xV36Xnlm0rJU94AA2K88HVyyWlmthBthMXEXm27G28= Subject key identifier: AC:8D:41:6B:76:95:79:44:4A:48:34:5C:5B:48:E9:23:BC:F7:11:89 Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 0101 Signing time: Sun 05 Apr 2026 05:33:15 +0000 Manifest this update: Sun 05 Apr 2026 05:33:14 +0000 Manifest next update: Sun 12 Apr 2026 05:33:14 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: eJBrVEyxIRpUss9l4V3TXZwF6BjrjzKiVBs4RhMe1Is=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: ReDU3pM6puyTOqvPDYn/OPZQZEhbfRxZyleb6fyedWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Apr 5 05:33:14 2026 GMT Not After : Apr 12 05:33:14 2026 GMT Subject: CN=69d1f41a-9474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:f1:0b:10:1a:12:bb:f5:8d:69:19:08:83: f3:9d:53:cf:f3:db:71:c0:0f:1b:dc:e2:0b:6b:f0: ed:62:9d:01:47:fe:e0:91:e2:72:77:6b:a5:85:19: 28:c2:89:cf:51:cb:66:b5:70:0b:da:25:72:37:99: 5f:5f:8c:d2:3b:63:4a:77:ac:a1:16:ee:39:f7:00: 90:15:9c:57:49:16:c9:82:35:9a:2a:cd:bb:63:7d: c4:f8:95:45:4e:83:68:1a:fd:fd:af:e6:1d:ed:e8: 21:1f:a4:9f:a7:1e:83:d2:72:11:dd:77:26:ff:f5: 58:3d:71:26:57:ed:74:5e:23:e6:fe:a2:86:e6:11: cf:c4:0c:bd:f0:bc:6d:65:b4:3b:58:3e:4d:fb:dd: 6e:30:ab:11:b5:97:82:96:b5:ef:3d:e2:e2:27:78: a1:47:7d:4a:b1:83:84:c7:3e:ca:b9:b4:01:22:f2: f9:b7:0d:f6:fc:7c:35:d8:6c:6f:4c:2c:87:7b:1a: 70:e3:f4:6b:18:f4:c0:72:ac:c7:7a:64:67:39:e8: 30:eb:e8:b7:22:95:88:42:b1:c9:63:a1:0e:ef:18: d0:78:f5:c9:a8:12:89:28:28:32:36:e8:0e:39:72: 1f:0f:16:fc:a6:f7:d6:31:21:14:46:19:6c:42:59: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8D:41:6B:76:95:79:44:4A:48:34:5C:5B:48:E9:23:BC:F7:11:89 X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b4:27:cd:5f:7f:ef:c9:ed:74:0c:c0:45:bd:a1:74:77:de: d2:a2:6e:87:21:de:ab:b7:7a:0a:62:f6:8f:2f:01:7f:ad:13: 7c:49:c1:a6:c4:4a:aa:82:ee:03:dd:f6:f7:ca:9c:01:44:91: bc:d9:d4:5b:a5:59:ad:64:00:85:b9:c1:fe:2b:9f:4c:4e:e0: f8:13:74:d0:8d:ce:c4:02:a2:68:a6:a3:b0:9c:34:3a:82:39: c9:a2:4d:f0:6f:80:20:20:82:11:e8:77:b0:33:d8:b2:90:6a: aa:a1:6c:10:49:53:1e:6d:b4:00:4f:5d:03:df:03:ea:23:a5: ae:40:d9:f3:c9:f7:c8:42:9c:43:5d:4b:5a:ee:4d:aa:99:84: 11:17:44:3c:71:32:bd:ad:d4:c4:42:6e:65:69:5e:a3:2d:a0: c0:f4:e8:34:68:24:99:8e:bf:cd:25:59:d8:7e:e2:51:e1:86: 4a:cf:66:08:57:b2:16:54:7a:e2:9f:82:65:d6:99:ac:28:14: 08:a2:bb:fa:cf:9d:25:d2:bd:96:0c:43:a0:6f:be:88:1f:e1: 18:09:fd:13:98:f1:b0:85:9d:74:f8:ac:58:fb:00:aa:5e:39: b4:4a:d0:8b:a5:db:d0:65:17:e5:d9:3a:74:ff:da:df:05:0b: 1f:b4:1d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJGQzUxMTAvBgNVBAUTKEZEODhERUY5QTZCRERCRUE1OTM4OUVEQzYxNzFBQURD QTEwNkI1MDkwHhcNMjYwNDA1MDUzMzE0WhcNMjYwNDEyMDUzMzE0WjAYMRYwFAYD VQQDEw02OWQxZjQxYS05NDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfnxCxAaErv1jWkZCIPznVPP89txwA8b3OILa/DtYp0BR/7gkeJyd2ulhRko wonPUctmtXAL2iVyN5lfX4zSO2NKd6yhFu459wCQFZxXSRbJgjWaKs27Y33E+JVF ToNoGv39r+Yd7eghH6Sfpx6D0nIR3Xcm//VYPXEmV+10XiPm/qKG5hHPxAy98Lxt ZbQ7WD5N+91uMKsRtZeClrXvPeLiJ3ihR31KsYOExz7KubQBIvL5tw32/Hw12Gxv TCyHexpw4/RrGPTAcqzHemRnOegw6+i3IpWIQrHJY6EO7xjQePXJqBKJKCgyNugO OXIfDxb8pvfWMSEURhlsQllMWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyNQWt2 lXlESkg0XFtI6SO89xGJMB8GA1UdIwQYMBaAFP2I3vmmvdvqWTie3GFxqtyhBrUJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FREFCRDIzMEFC M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTItcFpPSjdjWVhHcTNLRUd0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkZDNS9FREFCRDIzMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTIt cFpPSjdjWVhHcTNLRUd0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMrQnzV9/78ntdAzARb2hdHfe0qJuhyHeq7d6CmL2jy8Bf60TfEnBpsRKqoLu A93298qcAUSRvNnUW6VZrWQAhbnB/iufTE7g+BN00I3OxAKiaKajsJw0OoI5yaJN 8G+AICCCEeh3sDPYspBqqqFsEElTHm20AE9dA98D6iOlrkDZ88n3yEKcQ11LWu5N qpmEERdEPHEyva3UxEJuZWleoy2gwPToNGgkmY6/zSVZ2H7iUeGGSs9mCFeyFlR6 4p+CZdaZrCgUCKK7+s+dJdK9lgxDoG++iB/hGAn9E5jxsIWddPisWPsAql45tErQ i6Xb0GUX5dk6dP/a3wULH7QdyQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:07 2026 by rpki-client