$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: Ry6B5K2JjXjtplb8wOH4NLerQ8UfWQBU0AhODs8rFQo= Subject key identifier: 67:35:07:85:15:6B:20:E8:BF:53:E3:13:E2:0E:71:8E:69:36:65:E0 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 0881 Signing time: Sat 04 Apr 2026 20:28:14 +0000 Manifest this update: Sat 04 Apr 2026 20:28:13 +0000 Manifest next update: Sat 11 Apr 2026 20:28:13 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: OOXlAKuvT2mF1wiQDuXYIx3gbwi3bLdJqteTT63JF5Y=) 2: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: /mxloS7ClCcaj5x0floJR4T78S/qjwGI70YG2UCZk8Q=) 3: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: dQd4m5byeKJORC74YKFJB4r+c7cujg4OEtxCIHvr0lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Apr 4 20:28:13 2026 GMT Not After : Apr 11 20:28:13 2026 GMT Subject: CN=69d1745e-b94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:d7:92:c0:00:60:6e:32:4f:94:0c:8b:29: 74:12:3e:aa:19:c5:bc:1f:14:5c:d8:85:fb:b2:e9: f9:67:42:ea:00:47:30:97:91:aa:2a:6e:c6:87:43: 87:32:43:1f:93:28:01:41:7d:28:6e:67:48:09:23: 62:22:38:ac:97:70:2a:96:81:af:b0:13:43:b1:6e: 62:22:e3:34:87:55:ae:89:60:0a:f5:ef:cf:cc:78: 6a:88:98:96:31:0c:9a:eb:1c:ca:45:f0:31:cd:93: 4f:83:78:48:fc:a9:73:fe:97:a4:96:4b:c0:21:82: da:20:eb:1c:ff:ff:97:b6:20:0d:3c:7a:e4:4f:ce: 21:98:c0:15:d6:2b:11:de:d7:9d:47:25:85:a9:00: 76:ef:79:3e:38:c5:43:51:99:99:4a:d4:b3:a3:3a: 96:4c:96:20:27:86:ed:1b:06:7a:e6:13:42:68:98: 7a:cd:fc:b4:b4:86:1d:d7:a2:b2:dd:dd:ec:66:ca: 57:99:9b:3b:d3:0e:fd:ed:31:3b:77:da:e5:0f:3a: c0:af:00:b4:b0:22:19:64:5e:9a:07:8a:8d:d2:9b: ba:aa:75:6c:57:53:5c:44:83:01:ba:c7:59:1d:c4: 2e:63:1f:db:87:ef:1d:88:ef:27:7d:25:11:fb:c5: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:35:07:85:15:6B:20:E8:BF:53:E3:13:E2:0E:71:8E:69:36:65:E0 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:68:52:f7:80:36:ae:30:b2:65:c8:06:8d:4e:e6:dd:09:24: 7b:0f:90:c2:3b:fc:91:ce:36:4a:b6:3e:89:51:a6:c7:db:78: 34:38:45:c0:1b:ae:cf:63:3d:ae:22:c3:93:0e:5c:a9:b4:8d: 71:bf:08:74:15:00:1a:e1:73:6d:95:68:f7:6d:e6:53:70:09: 6f:f4:35:4d:83:ff:85:c5:2e:63:66:31:1a:44:20:74:ce:a7: 3c:51:7f:b1:6d:3c:92:01:b9:7e:5b:03:94:b3:de:64:3e:f5: 0f:ca:54:72:4c:56:c8:d4:82:aa:f9:36:c5:cc:a9:5b:52:9f: b4:12:87:b6:bb:ab:92:e7:82:cc:30:42:14:77:04:5b:a1:2a: 91:15:9a:47:9c:3d:6b:b1:4f:ea:8d:f2:0c:d4:d3:6e:65:35: e8:81:18:94:8c:35:01:73:17:5a:ac:1c:99:56:f7:d1:e7:ca: d2:47:15:cd:0b:f5:ad:59:19:22:5d:85:0d:a5:40:bb:a7:c3: f8:c6:72:b4:62:1a:ad:55:fe:6e:8b:76:3b:55:03:25:32:26: f5:ca:5f:0c:6a:9f:7d:3a:f1:c3:8c:1e:a9:91:32:b2:fe:a9: f9:f6:0a:a3:87:c0:83:f2:fb:5e:a3:b7:0a:5c:04:af:7a:ff: 21:39:6d:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwNDA0MjAyODEzWhcNMjYwNDExMjAyODEzWjAYMRYwFAYD VQQDEw02OWQxNzQ1ZS1iOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZfXksAAYG4yT5QMiyl0Ej6qGcW8HxRc2IX7sun5Z0LqAEcwl5GqKm7Gh0OH MkMfkygBQX0obmdICSNiIjisl3AqloGvsBNDsW5iIuM0h1WuiWAK9e/PzHhqiJiW MQya6xzKRfAxzZNPg3hI/Klz/peklkvAIYLaIOsc//+XtiANPHrkT84hmMAV1isR 3tedRyWFqQB273k+OMVDUZmZStSzozqWTJYgJ4btGwZ65hNCaJh6zfy0tIYd16Ky 3d3sZspXmZs70w797TE7d9rlDzrArwC0sCIZZF6aB4qN0pu6qnVsV1NcRIMBusdZ HcQuYx/bh+8diO8nfSUR+8X3RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGc1B4UV ayDov1PjE+IOcY5pNmXgMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZmhS94A2rjCyZcgGjU7m3Qkkew+Qwjv8kc42SrY+iVGmx9t4NDhFwBuuz2M9 riLDkw5cqbSNcb8IdBUAGuFzbZVo923mU3AJb/Q1TYP/hcUuY2YxGkQgdM6nPFF/ sW08kgG5flsDlLPeZD71D8pUckxWyNSCqvk2xcypW1KftBKHtrurkueCzDBCFHcE W6EqkRWaR5w9a7FP6o3yDNTTbmU16IEYlIw1AXMXWqwcmVb30efK0kcVzQv1rVkZ Il2FDaVAu6fD+MZytGIarVX+bot2O1UDJTIm9cpfDGqffTrxw4weqZEysv6p+fYK o4fAg/L7XqO3ClwEr3r/ITltUA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:28:57 2026 by rpki-client