$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft File: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft (raw, json) Hash identifier: egsrM91OAIbNJaUE/o68zL5I/cmrB1rjV8n9JXsZipc= Subject key identifier: DC:E1:AE:94:B9:D6:86:85:EE:0E:07:B5:6A:A5:61:1D:90:BE:C3:88 Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7 Certificate issuer: /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft Manifest number: 2C Signing time: Sun 19 Apr 2026 08:21:38 +0000 Manifest this update: Sun 19 Apr 2026 08:21:38 +0000 Manifest next update: Sun 26 Apr 2026 08:21:38 +0000 Files and hashes: 1: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl (hash: xz6aHn+mc+EYvOVsstXJ8Spl5SGwclP9imb/3bm7Tdk=) 2: 3F6F4A1A01B211F19B62C4E66C6F56BC.roa (hash: tMHj5+/ILv6Qo4xWUT+IoiNMESbwl2vJsPhAT7WrKns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 08:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7 Validity Not Before: Apr 19 08:21:38 2026 GMT Not After : Apr 26 08:21:38 2026 GMT Subject: CN=69e49092-485c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:20:5f:cf:d5:59:65:e8:6e:8f:75:88:0d: 7d:ab:18:64:e0:a8:b2:34:37:33:82:af:23:5b:b4: 77:ff:00:47:20:d4:12:7e:19:00:2e:e2:71:71:37: c3:99:8a:c3:68:d8:59:58:98:b6:58:18:fb:99:ed: 96:89:8b:b7:82:e7:0f:8f:60:65:da:37:c5:c7:60: 02:e2:0f:d9:02:67:28:2a:5e:30:dd:f3:d3:23:d9: a8:3f:1b:cd:4a:e2:46:d1:63:c3:29:8f:2d:13:ec: 74:df:36:5f:ff:64:28:04:a3:a2:4f:3b:86:c4:78: fe:03:a8:65:e8:e6:46:ef:cf:00:d3:5e:52:93:d2: e2:5a:d8:a9:0f:cf:f2:44:f8:67:0a:30:54:c1:e8: 8f:34:97:71:04:b0:ac:a5:1b:44:2a:70:6c:3b:38: 99:59:14:94:2c:b9:c8:20:ca:77:94:e0:34:e7:14: 8d:3e:bb:3b:37:ee:84:4a:85:e6:9a:d9:d0:b0:50: 1b:20:0d:e6:6a:7a:40:fa:53:a7:52:6e:3c:1a:84: 1a:28:4b:4e:f9:58:b8:65:0b:18:df:33:5e:5b:4e: 3e:43:c3:ab:3e:69:84:78:02:48:38:55:7d:60:cd: c6:9d:a7:c3:77:9c:b0:aa:00:0b:b7:22:03:88:9b: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E1:AE:94:B9:D6:86:85:EE:0E:07:B5:6A:A5:61:1D:90:BE:C3:88 X509v3 Authority Key Identifier: keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:86:fb:9a:92:fa:11:05:24:36:e1:10:6b:d9:75:d9:5c:1b: bf:40:de:49:b6:a2:db:97:28:46:19:b9:5d:e2:43:28:2c:79: c0:ec:44:65:92:72:2b:1a:73:9d:82:10:b0:f5:3c:db:09:28: fb:82:dd:9a:71:df:65:6c:e7:42:07:c7:c2:3a:ac:32:bd:26: 9d:53:61:3a:cd:01:90:2f:3e:5c:73:1d:d9:77:2d:67:f2:3f: 84:a1:1f:9e:69:1c:a9:21:79:fe:d0:e4:10:64:e9:71:89:f3: 9b:c0:ab:68:b8:e9:3a:bb:57:b7:c4:25:fd:99:98:f5:67:72: 0d:de:d2:03:ce:b1:02:ee:58:ff:70:09:7e:98:14:92:2a:99: 91:3f:64:e0:a2:ed:ee:22:e6:03:2c:99:eb:3a:9b:47:2c:49: 1f:18:fb:bf:5a:3a:1d:ff:40:6d:1e:82:02:f3:64:8d:f3:f9: 03:82:18:a6:d6:7c:29:5b:bd:bb:db:5a:e6:88:e6:4f:0f:74: b3:75:16:c4:9e:07:54:f9:ce:3f:83:34:98:92:ea:b1:c2:5f: 5d:d3:97:b5:2c:fd:a7:99:77:d5:59:90:9c:bc:9e:33:2b:47: 35:39:8d:55:9f:a8:a6:af:09:7c:f9:59:f1:dd:5a:bd:6e:f5: a1:b7:0e:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTNDMDExMC8GA1UEBRMoNjFGQTcwODY4MTFDQjAzRkNCOTRDMzE2Q0ZFRUFEODg5 QTg1MjdGNzAeFw0yNjA0MTkwODIxMzhaFw0yNjA0MjYwODIxMzhaMBgxFjAUBgNV BAMTDTY5ZTQ5MDkyLTQ4NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSOSBfz9VZZehuj3WIDX2rGGTgqLI0NzOCryNbtHf/AEcg1BJ+GQAu4nFxN8OZ isNo2FlYmLZYGPuZ7ZaJi7eC5w+PYGXaN8XHYALiD9kCZygqXjDd89Mj2ag/G81K 4kbRY8Mpjy0T7HTfNl//ZCgEo6JPO4bEeP4DqGXo5kbvzwDTXlKT0uJa2KkPz/JE +GcKMFTB6I80l3EEsKylG0QqcGw7OJlZFJQsucggyneU4DTnFI0+uzs37oRKheaa 2dCwUBsgDeZqekD6U6dSbjwahBooS075WLhlCxjfM15bTj5Dw6s+aYR4Akg4VX1g zcadp8N3nLCqAAu3IgOIm3DLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3OGulLnW hoXuDge1aqVhHZC+w4gwHwYDVR0jBBgwFoAUYfpwhoEcsD/LlMMWz+6tiJqFJ/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFM0MwL0I1NzNCNEUwMDFC MTExRjE5QzFFNDJDMTZCNkY1NkJDL1lmcHdob0Vjc0RfTGxNTVd6LTZ0aUpxRkpf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWWZwd2hvRWNzRF9MbE1NV3otNnRpSnFGSl9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF M0MwL0I1NzNCNEUwMDFCMTExRjE5QzFFNDJDMTZCNkY1NkJDL1lmcHdob0Vjc0Rf TGxNTVd6LTZ0aUpxRkpfYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBzhvuakvoRBSQ24RBr2XXZXBu/QN5JtqLblyhGGbld4kMoLHnA7ERlknIrGnOd ghCw9TzbCSj7gt2acd9lbOdCB8fCOqwyvSadU2E6zQGQLz5ccx3Zdy1n8j+EoR+e aRypIXn+0OQQZOlxifObwKtouOk6u1e3xCX9mZj1Z3IN3tIDzrEC7lj/cAl+mBSS KpmRP2Tgou3uIuYDLJnrOptHLEkfGPu/Wjod/0BtHoIC82SN8/kDghim1nwpW727 21rmiOZPD3SzdRbEngdU+c4/gzSYkuqxwl9d05e1LP2nmXfVWZCcvJ4zK0c1OY1V n6imrwl8+Vnx3Vq9bvWhtw7D -----END CERTIFICATE-----Generated at Mon Apr 20 08:28:27 2026 by rpki-client