$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json) Hash identifier: HW6A5cbt5/k+TaYY15U+ZATL56Wie0bvpWkNaS2+d+c= Subject key identifier: 3C:1F:11:3D:56:C0:6A:64:F4:58:7D:DC:C2:E5:7F:06:17:63:0A:6B Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft Manifest number: 07 Signing time: Mon 20 Apr 2026 16:05:57 +0000 Manifest this update: Mon 20 Apr 2026 16:05:57 +0000 Manifest next update: Mon 27 Apr 2026 16:05:57 +0000 Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: VGWZJxRHffchMZzw1Qr6o2ucmsZx1LvmORlBh8KdElk=) 2: E685F69A372D11F1A4767B088F833773.roa (hash: Qin1CSenHeWf6qKBdgvv65CH/jbRnOCli4KnV1U3QUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 16:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Apr 20 16:05:57 2026 GMT Not After : Apr 27 16:05:57 2026 GMT Subject: CN=69e64ee5-f021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:34:ca:52:34:7a:ac:ee:af:1c:fb:aa:86: d6:f9:0c:0c:bf:ca:ad:d1:5e:2f:3f:39:51:85:cc: 23:55:ac:2a:71:fc:fe:fe:05:3a:cf:49:5a:fd:08: e1:e8:a0:de:f2:26:f2:3d:0d:0e:f1:c7:da:11:fc: ae:19:0f:e2:d5:92:62:0f:f0:88:66:23:77:5b:56: 83:c0:ab:b4:d5:36:16:e3:ba:18:66:53:ea:ae:4c: 0d:6d:61:fa:78:f1:d5:50:41:1a:b7:b8:60:51:2d: 82:ca:79:de:5c:5d:d6:3c:ba:bb:0c:5c:55:1e:9a: 8c:7e:4a:3f:90:d9:f0:d4:21:4a:1b:ca:aa:6a:3e: fa:89:9f:85:37:2d:be:18:dc:c8:4d:84:bc:7b:b2: 48:5e:02:60:f4:ce:cb:3a:ea:8e:99:87:82:2d:d3: 5c:6b:be:aa:ba:39:cf:7e:63:f7:50:28:85:7a:0f: c2:50:5a:ec:d5:a5:0f:2f:e1:3d:5c:33:a5:26:b2: af:f0:b1:93:2a:21:ac:37:74:ba:9b:c9:82:33:96: b6:d9:69:8c:03:78:fd:08:fb:11:cd:ef:dc:b8:fb: f0:0b:3c:0c:49:83:42:4a:57:71:34:cc:62:73:6d: 98:c2:7e:c8:58:58:f1:57:84:d6:fd:72:f3:8b:7c: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1F:11:3D:56:C0:6A:64:F4:58:7D:DC:C2:E5:7F:06:17:63:0A:6B X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1a:cd:29:ae:64:00:a8:47:3c:53:ea:68:1b:04:a8:28:06: ef:06:6e:59:5b:84:78:57:68:2f:37:79:97:97:02:3c:8c:a2: 82:5e:62:cd:37:d5:2b:f3:a4:39:b4:ad:b7:33:43:74:d4:ba: 58:4c:70:b3:08:ed:26:ec:52:c0:9d:d0:64:c2:5d:a2:f7:ff: ba:6a:35:c6:b7:44:a2:71:fa:ba:ce:2a:98:64:d1:2b:b9:96: a4:c4:a6:6e:4f:3c:49:a4:34:26:f9:e5:96:e0:2f:b4:f5:ac: ac:73:70:fd:e8:f3:5a:66:43:fe:66:0c:37:ef:4a:17:4e:28: 34:39:4b:98:34:fd:75:71:fb:67:c0:6d:05:48:92:d2:80:dd: 28:4a:44:c3:2c:e6:0c:82:15:ce:f1:31:54:4c:e6:13:1a:c5: 9a:64:ed:09:0a:1a:b6:a4:8b:4b:64:91:df:02:2b:21:55:50: 0c:2f:5e:da:bf:32:2e:85:b4:df:2b:2b:ae:71:9f:bb:40:c6: 55:66:e2:f7:cb:0d:62:28:c8:ba:33:a6:4b:9f:6f:22:68:94: ba:19:0d:72:e2:ac:71:23:dd:d6:3f:b3:94:81:d0:54:0f:f6: 8c:ae:3f:ad:33:7c:16:9f:f0:46:af:33:db:88:8c:1d:c0:b9: 13:7e:f2:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy RkJEOTYyRDAeFw0yNjA0MjAxNjA1NTdaFw0yNjA0MjcxNjA1NTdaMBgxFjAUBgNV BAMTDTY5ZTY0ZWU1LWYwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+ETTKUjR6rO6vHPuqhtb5DAy/yq3RXi8/OVGFzCNVrCpx/P7+BTrPSVr9COHo oN7yJvI9DQ7xx9oR/K4ZD+LVkmIP8IhmI3dbVoPAq7TVNhbjuhhmU+quTA1tYfp4 8dVQQRq3uGBRLYLKed5cXdY8ursMXFUemox+Sj+Q2fDUIUobyqpqPvqJn4U3Lb4Y 3MhNhLx7skheAmD0zss66o6Zh4It01xrvqq6Oc9+Y/dQKIV6D8JQWuzVpQ8v4T1c M6Umsq/wsZMqIaw3dLqbyYIzlrbZaYwDeP0I+xHN79y4+/ALPAxJg0JKV3E0zGJz bZjCfshYWPFXhNb9cvOLfPz7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPB8RPVbA amT0WH3cwuV/BhdjCmswHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB ODRBLzc3QUM3QkQyMzRGNzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhY SjVyQ0oyVFRMWGktOWxpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBAGs0prmQAqEc8U+poGwSoKAbvBm5ZW4R4V2gvN3mXlwI8jKKCXmLNN9Ur86Q5 tK23M0N01LpYTHCzCO0m7FLAndBkwl2i9/+6ajXGt0Sicfq6ziqYZNEruZakxKZu TzxJpDQm+eWW4C+09aysc3D96PNaZkP+Zgw370oXTig0OUuYNP11cftnwG0FSJLS gN0oSkTDLOYMghXO8TFUTOYTGsWaZO0JChq2pItLZJHfAishVVAML17avzIuhbTf KyuucZ+7QMZVZuL3yw1iKMi6M6ZLn28iaJS6GQ1y4qxxI93WP7OUgdBUD/aMrj+t M3wWn/BGrzPbiIwdwLkTfvJg -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:02 2026 by rpki-client