$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: 4IQv9wHp1O16bd0UmPaTqCYZVMvdU3yNVJbzLS1A3p4= Subject key identifier: 76:03:B2:48:A6:39:44:A2:1F:B9:AB:5E:7A:C7:72:9C:54:39:44:C6 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: FF Signing time: Sun 05 Apr 2026 05:38:36 +0000 Manifest this update: Sun 05 Apr 2026 05:38:36 +0000 Manifest next update: Sun 12 Apr 2026 05:38:36 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: 6OttdtJDizQ+Wj7Uyg6oThEYIAtHWzVpm4/MEpWx4Ao=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: 5VO9AYfUls793WW6aylahYoLQQVtZJJZe9EelPOo2yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Apr 5 05:38:36 2026 GMT Not After : Apr 12 05:38:36 2026 GMT Subject: CN=69d1f55c-d27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:66:3b:90:36:f7:25:e5:cf:53:4b:a4:81: ed:7f:30:5f:99:36:3a:f0:9f:c6:99:eb:bd:cc:53: 27:8f:a6:2f:59:e5:d6:21:05:14:ce:94:da:10:db: 03:84:7b:77:98:84:24:f4:cb:ca:6f:bf:39:d3:cf: 31:20:9c:98:f0:de:a9:d3:8c:9f:a9:cd:e8:f3:71: 1f:7b:1c:e8:5b:23:cb:11:1e:71:f8:5e:38:af:22: 7c:66:1c:2c:d7:92:76:34:50:d7:d3:f3:d1:19:cb: 35:cc:b9:86:90:d3:57:c2:d1:59:1d:0e:ea:3e:57: 8e:c9:5c:9c:7e:13:e0:2e:bf:45:8e:a6:44:77:9d: 0f:7c:b1:05:06:07:a4:f9:99:48:9e:28:fe:89:fa: 41:90:fd:13:7a:1f:36:51:9c:a1:a7:65:55:14:92: a4:5e:a8:b8:0b:2c:a5:f9:28:7f:78:72:ed:aa:9f: 00:a2:01:23:69:c5:99:e8:cf:af:a9:a1:bc:9b:47: 38:8e:cd:e9:cd:b1:fe:3a:aa:71:7b:03:24:93:6f: f5:5b:7c:bb:38:04:29:db:06:72:93:f8:8d:11:c8: 89:27:f5:c8:79:8e:b2:cc:88:40:a3:7f:04:03:70: a4:04:5d:da:04:a9:10:92:ee:7e:8b:75:c2:84:1e: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:B2:48:A6:39:44:A2:1F:B9:AB:5E:7A:C7:72:9C:54:39:44:C6 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:38:7f:90:75:95:aa:97:fe:70:96:cd:04:ee:53:8d:6c:57: 8a:05:12:e8:dc:05:1b:68:5c:b2:a4:b1:af:12:d2:b7:c6:7c: ef:9f:96:f4:ee:07:4a:d1:b2:d0:37:c4:f5:4e:f2:fb:86:b2: 5d:ae:dd:1e:9d:94:63:e5:f1:2f:f2:8a:07:bb:a5:8b:da:83: b0:58:09:54:40:75:cd:ef:52:37:bf:38:2b:a2:bd:1c:db:dc: 7f:2c:df:44:40:ef:e6:ef:9c:fd:a4:90:00:47:57:2b:b0:25: b8:b7:fd:a9:16:9d:44:4e:19:00:79:17:3c:02:e7:1a:e9:84: eb:10:b3:09:7f:a5:5c:e9:65:52:0e:2c:fa:6b:f5:40:a1:be: 00:80:f4:e5:cd:f0:7f:7e:23:b6:9d:de:12:48:38:46:7a:b3: f7:ff:df:d0:e7:c0:01:02:7e:f0:58:f0:9a:94:01:ee:0b:43: f1:6f:be:76:8e:b8:a2:14:93:84:14:5c:5c:16:3a:6e:9a:02: 6f:fd:06:61:13:22:c4:20:10:25:22:9c:4b:e6:c6:3c:26:15: 0c:96:bc:64:5f:1c:68:8a:c7:16:e4:fc:c4:dd:2b:dc:12:e2: 1d:a9:36:b1:db:5f:e2:a2:3c:ec:3c:fc:90:42:4a:93:b1:1f: 56:f8:dc:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjYwNDA1MDUzODM2WhcNMjYwNDEyMDUzODM2WjAYMRYwFAYD VQQDEw02OWQxZjU1Yy1kMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzRmO5A29yXlz1NLpIHtfzBfmTY68J/Gmeu9zFMnj6YvWeXWIQUUzpTaENsD hHt3mIQk9MvKb785088xIJyY8N6p04yfqc3o83EfexzoWyPLER5x+F44ryJ8Zhws 15J2NFDX0/PRGcs1zLmGkNNXwtFZHQ7qPleOyVycfhPgLr9FjqZEd50PfLEFBgek +ZlInij+ifpBkP0Teh82UZyhp2VVFJKkXqi4Cyyl+Sh/eHLtqp8AogEjacWZ6M+v qaG8m0c4js3pzbH+OqpxewMkk2/1W3y7OAQp2wZyk/iNEciJJ/XIeY6yzIhAo38E A3CkBF3aBKkQku5+i3XChB7eJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYDskim OUSiH7mrXnrHcpxUOUTGMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFDh/kHWVqpf+cJbNBO5TjWxXigUS6NwFG2hcsqSxrxLSt8Z875+W9O4HStGy 0DfE9U7y+4ayXa7dHp2UY+XxL/KKB7uli9qDsFgJVEB1ze9SN784K6K9HNvcfyzf REDv5u+c/aSQAEdXK7AluLf9qRadRE4ZAHkXPALnGumE6xCzCX+lXOllUg4s+mv1 QKG+AID05c3wf34jtp3eEkg4Rnqz9//f0OfAAQJ+8FjwmpQB7gtD8W++do64ohST hBRcXBY6bpoCb/0GYRMixCAQJSKcS+bGPCYVDJa8ZF8caIrHFuT8xN0r3BLiHak2 sdtf4qI87Dz8kEJKk7EfVvjcpA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:22 2026 by rpki-client