$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: iiXPDZ5T1ujinidsaMnQpw1N/NPgbI+o3xx+9CCCzwk= Subject key identifier: FB:6E:A1:4F:D9:3C:C8:88:F8:1A:E2:D7:23:BD:59:A4:D0:61:12:A9 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 0232 Signing time: Sun 05 Apr 2026 02:12:34 +0000 Manifest this update: Sun 05 Apr 2026 02:12:33 +0000 Manifest next update: Sun 12 Apr 2026 02:12:33 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: E9URdCi9XQsvAsASLFE0cvLe059TQM7KgrfRzzbKODk=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: jtEsNW5dsJnyiRP9T6w5VXMqncVI3hSz4F5K41d01ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Apr 5 02:12:33 2026 GMT Not After : Apr 12 02:12:33 2026 GMT Subject: CN=69d1c511-a792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:27:1c:f5:ac:04:f8:3a:16:6e:81:cd:26: 7d:3f:61:1a:48:9c:f9:56:cf:11:2a:f6:8d:f9:be: 54:0d:2e:cc:b7:9c:a4:c4:bb:6e:0b:79:d8:d5:23: 5a:f3:0d:5a:37:70:a2:eb:3a:bd:9b:49:c5:0e:3c: 03:a7:43:a3:97:55:8b:07:1f:92:01:c6:19:b5:ff: dd:0b:17:b4:39:0f:a5:f8:5e:8b:cc:f4:df:48:de: c8:25:a6:01:47:3a:7e:9d:32:e7:d2:1e:5d:9a:be: 1e:37:28:85:21:d0:50:d0:a0:63:c3:98:c2:f3:db: 84:4c:16:a1:fa:c0:15:53:34:f9:02:1e:00:23:f6: bb:5a:7c:a3:ca:ea:8b:48:5b:9e:ed:d3:d0:23:7d: 45:2f:f6:88:7f:f6:b9:05:c3:b4:23:ea:d0:3f:50: 7e:08:fc:06:91:25:cc:8b:f1:fe:73:73:f5:4c:5d: 8b:53:fe:04:02:6d:a2:63:0c:e1:08:88:ff:2f:76: a0:54:c1:4e:03:fa:1b:5e:4e:21:c5:b1:81:ba:5e: 98:ad:d8:aa:7f:c6:88:5d:d7:1f:46:48:5c:e9:6f: f8:26:3c:c5:f5:2e:cf:f3:ca:00:ec:b0:5c:ec:1d: ce:61:30:15:53:92:28:84:dd:f0:e1:5b:57:58:a2: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6E:A1:4F:D9:3C:C8:88:F8:1A:E2:D7:23:BD:59:A4:D0:61:12:A9 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6a:52:aa:ec:81:42:f2:e3:e9:9e:3c:0c:5b:e6:11:fe:88: f7:a3:92:c0:2c:86:78:36:97:fe:ac:dc:7f:82:1b:99:ee:a6: 05:7b:9c:f8:84:67:ad:e3:c0:12:c0:7e:ba:21:41:a2:34:f1: bc:71:0c:eb:53:5f:67:3f:c3:b4:6a:2b:4c:de:ba:2a:8b:2f: 36:68:af:66:74:28:e9:a8:a8:8e:20:26:e3:f6:e5:14:86:e4: 97:a9:29:93:73:35:d1:be:b0:b2:e9:f1:94:b2:65:a6:8b:32: 11:36:3d:3b:fa:26:b3:99:3d:b2:30:aa:0e:32:7b:9d:fa:02: 62:a7:58:2d:45:8c:64:e4:06:28:4b:a3:fa:47:99:25:89:20: c3:dd:d3:9d:49:d8:80:ff:e8:4b:48:4d:93:ec:5f:6d:ec:51: ea:01:cb:d2:57:df:a6:b6:7d:8b:59:f4:05:83:b9:8d:23:09: 6c:4b:f1:ca:b5:00:e5:42:05:e0:6a:96:96:cf:48:aa:06:12: 4e:5e:62:3c:25:85:db:6a:8e:7a:20:ea:f3:31:98:3d:e5:d1: c6:34:e2:44:eb:27:c5:8c:75:e4:a4:4f:5c:68:ac:ca:6b:c8: 80:c5:a2:e0:be:49:73:a5:e7:e3:39:6d:2f:52:0f:97:b1:bc: 7c:74:74:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjYwNDA1MDIxMjMzWhcNMjYwNDEyMDIxMjMzWjAYMRYwFAYD VQQDEw02OWQxYzUxMS1hNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7onHPWsBPg6Fm6BzSZ9P2EaSJz5Vs8RKvaN+b5UDS7Mt5ykxLtuC3nY1SNa 8w1aN3Ci6zq9m0nFDjwDp0Ojl1WLBx+SAcYZtf/dCxe0OQ+l+F6LzPTfSN7IJaYB Rzp+nTLn0h5dmr4eNyiFIdBQ0KBjw5jC89uETBah+sAVUzT5Ah4AI/a7WnyjyuqL SFue7dPQI31FL/aIf/a5BcO0I+rQP1B+CPwGkSXMi/H+c3P1TF2LU/4EAm2iYwzh CIj/L3agVMFOA/obXk4hxbGBul6Yrdiqf8aIXdcfRkhc6W/4JjzF9S7P88oA7LBc 7B3OYTAVU5IohN3w4VtXWKLB3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtuoU/Z PMiI+Bri1yO9WaTQYRKpMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC2pSquyBQvLj6Z48DFvmEf6I96OSwCyGeDaX/qzcf4Ibme6mBXuc+IRnrePA EsB+uiFBojTxvHEM61NfZz/DtGorTN66KosvNmivZnQo6aiojiAm4/blFIbkl6kp k3M10b6wsunxlLJlposyETY9O/oms5k9sjCqDjJ7nfoCYqdYLUWMZOQGKEuj+keZ JYkgw93TnUnYgP/oS0hNk+xfbexR6gHL0lffprZ9i1n0BYO5jSMJbEvxyrUA5UIF 4GqWls9IqgYSTl5iPCWF22qOeiDq8zGYPeXRxjTiROsnxYx15KRPXGisymvIgMWi 4L5Jc6Xn4zltL1IPl7G8fHR0iA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:08:17 2026 by rpki-client