$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: J4WoevL2oTnYdsY/WU2HDcygTDnIxL2jTTQBfPj+Syw= Subject key identifier: 91:8E:ED:0C:DD:0D:07:54:A1:64:E1:B9:06:51:D9:93:3B:54:74:3A Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: A9 Signing time: Tue 21 Apr 2026 07:23:33 +0000 Manifest this update: Tue 21 Apr 2026 07:23:32 +0000 Manifest next update: Tue 28 Apr 2026 07:23:32 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: RX7dp0vuaZbFj7aPtwGRU7TL5apa9fm1x32KAfgI1JQ=) 2: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=) 3: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=) 4: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=) 5: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Apr 21 07:23:32 2026 GMT Not After : Apr 28 07:23:32 2026 GMT Subject: CN=69e725f5-2dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:b6:32:9e:ab:fa:54:af:47:99:e0:72:5e: ab:20:86:fb:63:a2:08:b6:fa:13:ef:58:70:3f:cb: 53:7f:ca:63:dc:fe:00:17:ca:55:42:df:2f:56:e8: 19:9e:77:82:ec:b6:33:7d:40:c4:9d:11:ac:30:c2: 77:92:01:1d:7e:d9:67:97:7c:33:7a:85:fe:42:a3: 23:ba:76:bc:59:ec:10:ab:9c:e4:b0:a6:88:1e:a3: 9b:fe:7f:73:20:56:5f:d6:35:0c:e4:6b:25:5a:32: 7e:ef:31:20:a8:7b:5a:09:99:c5:4a:63:af:c1:ea: 0b:8c:ee:b5:75:e0:46:fd:a1:64:19:fd:e7:c7:a9: 9d:0c:8a:48:ff:48:65:94:a4:b0:8a:33:91:6e:51: 3e:3d:0c:f1:03:9b:9c:f8:f6:a6:47:83:90:3b:c0: cc:d6:87:a9:e2:ad:1f:b3:f5:05:db:12:82:0b:87: 0c:c1:d0:94:0c:91:a9:32:68:c0:24:88:9c:be:08: 04:2f:eb:4f:cb:ee:64:c3:58:87:40:3c:1f:fd:30: 6a:18:c2:ab:45:f8:e1:4b:61:d0:14:05:b0:d7:af: 0b:58:e5:55:e2:e0:27:c5:99:06:8e:12:48:12:c3: b7:9b:54:d1:4f:e9:77:77:74:55:a3:21:11:1f:43: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:ED:0C:DD:0D:07:54:A1:64:E1:B9:06:51:D9:93:3B:54:74:3A X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:39:91:9d:93:9e:92:1f:ef:3b:ad:af:40:11:e5:ba:7c:fe: 7b:df:08:26:7c:b8:d0:12:e4:73:32:65:d7:3f:ab:5a:de:25: 68:74:07:f3:05:3d:b1:d7:fe:95:79:b1:6f:b4:f8:d3:9f:99: 87:92:67:6d:5e:06:f0:b8:ba:9a:b7:b7:6d:ed:03:48:53:99: 2a:cd:5f:a2:10:95:89:31:5f:b1:ea:56:38:d7:97:dd:66:ce: c2:72:f9:71:5b:26:96:20:21:eb:93:3d:f0:03:99:c7:d5:e5: 59:35:72:b0:f5:1f:e8:b4:27:d0:8e:01:28:06:ae:fe:1f:40: 42:2a:de:ff:13:5e:38:c4:e6:48:07:04:fa:21:93:26:ad:28: 76:91:4b:b7:4a:e6:f1:3e:7b:08:f2:8d:86:a5:0a:b7:a0:a2: 4f:1b:20:f4:65:6b:5b:32:46:04:52:0f:de:db:56:50:96:97: ff:59:5d:cc:cb:9d:44:13:ec:24:4b:7e:f0:d5:38:e4:90:df: 53:47:14:02:b2:be:ed:82:0b:fa:0b:cf:39:d4:a9:fc:70:4e: c1:35:78:95:8b:63:53:80:f7:18:61:bf:e8:35:b1:a4:ff:4a: f8:f7:1c:90:7a:17:b7:07:e9:32:8a:5d:be:54:86:97:ac:69: fa:31:c5:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYwNDIxMDcyMzMyWhcNMjYwNDI4MDcyMzMyWjAYMRYwFAYD VQQDEw02OWU3MjVmNS0yZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8m2Mp6r+lSvR5ngcl6rIIb7Y6IItvoT71hwP8tTf8pj3P4AF8pVQt8vVugZ nneC7LYzfUDEnRGsMMJ3kgEdftlnl3wzeoX+QqMjuna8WewQq5zksKaIHqOb/n9z IFZf1jUM5GslWjJ+7zEgqHtaCZnFSmOvweoLjO61deBG/aFkGf3nx6mdDIpI/0hl lKSwijORblE+PQzxA5uc+PamR4OQO8DM1oep4q0fs/UF2xKCC4cMwdCUDJGpMmjA JIicvggEL+tPy+5kw1iHQDwf/TBqGMKrRfjhS2HQFAWw168LWOVV4uAnxZkGjhJI EsO3m1TRT+l3d3RVoyERH0Np5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGO7Qzd DQdUoWThuQZR2ZM7VHQ6MB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsjmRnZOekh/vO62vQBHlunz+e98IJny40BLkczJl1z+rWt4laHQH8wU9sdf+ lXmxb7T405+Zh5JnbV4G8Li6mre3be0DSFOZKs1fohCViTFfsepWONeX3WbOwnL5 cVsmliAh65M98AOZx9XlWTVysPUf6LQn0I4BKAau/h9AQire/xNeOMTmSAcE+iGT Jq0odpFLt0rm8T57CPKNhqUKt6CiTxsg9GVrWzJGBFIP3ttWUJaX/1ldzMudRBPs JEt+8NU45JDfU0cUArK+7YIL+gvPOdSp/HBOwTV4lYtjU4D3GGG/6DWxpP9K+Pcc kHoXtwfpMopdvlSGl6xp+jHFow== -----END CERTIFICATE-----Generated at Wed Apr 22 00:10:31 2026 by rpki-client