$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: uWB13wMrGsiUjfxrNvulPfdwjTd2NNS4MzaXKfcWK+M= Subject key identifier: 01:22:DE:FD:42:FD:E0:1C:76:9D:3B:10:85:A8:26:50:A1:7D:12:A8 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 0197 Signing time: Sun 05 Apr 2026 03:55:14 +0000 Manifest this update: Sun 05 Apr 2026 03:55:13 +0000 Manifest next update: Sun 12 Apr 2026 03:55:13 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: O41sRtzacVQ5gU+YBLPhqS+EB9NQjItdZQyVQbllsj0=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Apr 5 03:55:13 2026 GMT Not After : Apr 12 03:55:13 2026 GMT Subject: CN=69d1dd22-dfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:b8:e0:c7:57:16:ca:bc:cf:e9:79:dd:17: 6e:ca:52:c7:85:e9:d6:8c:df:7b:08:e3:75:c3:4f: 79:10:e7:0b:83:1a:b6:95:55:ec:2d:42:89:18:3e: ae:86:37:cd:4a:a9:e4:3a:ea:18:31:c1:04:21:45: 71:76:f0:bc:c7:da:ac:15:7f:c2:08:ff:01:3c:bb: 11:8c:bc:a7:b9:39:7c:42:d1:d0:60:57:be:1b:82: 8f:7c:fd:b1:f7:5b:01:52:e3:49:0e:95:40:ca:59: 30:4f:9c:45:c1:84:89:a4:a4:df:5a:12:4f:3b:4c: 4f:22:47:2b:74:73:24:44:c1:eb:7b:0d:b2:04:f9: 91:af:b2:da:44:09:22:c9:7e:28:9d:69:7f:bd:ec: 59:53:ec:8a:dd:54:79:02:41:0a:8c:c4:24:95:36: 98:ca:23:1c:32:cf:62:95:f9:22:38:4a:cb:0c:42: 1c:fd:53:dd:5d:08:ea:7a:a9:16:b0:68:3f:9e:77: 8c:03:ad:2e:2e:fb:6c:d3:17:47:e6:d2:38:4a:52: b9:e2:d4:b4:c5:6b:2a:1d:f5:dd:0b:ef:a8:c5:5c: 77:54:9d:e1:93:d9:85:05:50:a8:b0:8a:8b:f5:e6: d9:4a:2e:85:48:d1:11:06:3f:f6:e2:d3:05:c2:9c: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:DE:FD:42:FD:E0:1C:76:9D:3B:10:85:A8:26:50:A1:7D:12:A8 X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:db:2c:16:ea:48:a8:24:b8:87:29:c3:aa:50:d6:49:ac:ab: 35:0e:1b:cf:a9:4f:9b:bf:eb:09:30:f8:82:22:d5:85:7a:27: 7a:02:37:e4:2f:56:54:22:13:20:1d:68:49:75:f8:4d:3b:f6: 25:f4:0c:14:ee:45:90:85:67:62:f4:4a:78:12:62:cb:80:30: d0:e2:67:46:bf:15:b6:db:6c:0a:6f:f3:66:3f:dc:75:32:a8: b8:7e:c5:c3:ab:ec:40:13:25:fc:38:4a:5a:6e:63:c1:0d:23: bb:95:c2:16:2d:76:5a:35:69:ca:a2:ab:10:78:88:41:61:7b: a0:4f:2f:72:29:b2:f8:80:cb:5b:34:04:d0:e5:fd:50:34:1a: 40:a9:cc:b7:ef:b4:80:e7:42:3c:bb:6b:2a:e0:9e:cf:fc:49: 15:41:cc:0c:ed:f1:1a:3d:7b:ac:14:4b:13:e4:aa:8c:4d:d0: 8f:b2:39:7a:27:ca:67:09:17:06:47:3b:34:e3:8e:1c:26:30: b7:b2:1c:3d:7d:02:e9:9c:77:13:cc:26:c8:a0:04:bf:7b:44: 2a:38:21:b0:4d:d3:f8:85:93:7a:36:fe:4f:ba:22:75:03:24: 8e:1b:75:87:4f:67:1f:fb:ed:e5:07:48:f5:e2:5a:61:cd:f2: 7c:26:e9:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjYwNDA1MDM1NTEzWhcNMjYwNDEyMDM1NTEzWjAYMRYwFAYD VQQDEw02OWQxZGQyMi1kZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTm44MdXFsq8z+l53RduylLHhenWjN97CON1w095EOcLgxq2lVXsLUKJGD6u hjfNSqnkOuoYMcEEIUVxdvC8x9qsFX/CCP8BPLsRjLynuTl8QtHQYFe+G4KPfP2x 91sBUuNJDpVAylkwT5xFwYSJpKTfWhJPO0xPIkcrdHMkRMHrew2yBPmRr7LaRAki yX4onWl/vexZU+yK3VR5AkEKjMQklTaYyiMcMs9ilfkiOErLDEIc/VPdXQjqeqkW sGg/nneMA60uLvts0xdH5tI4SlK54tS0xWsqHfXdC++oxVx3VJ3hk9mFBVCosIqL 9ebZSi6FSNERBj/24tMFwpwxUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEi3v1C /eAcdp07EIWoJlChfRKoMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdssFupIqCS4hynDqlDWSayrNQ4bz6lPm7/rCTD4giLVhXonegI35C9WVCIT IB1oSXX4TTv2JfQMFO5FkIVnYvRKeBJiy4Aw0OJnRr8VtttsCm/zZj/cdTKouH7F w6vsQBMl/DhKWm5jwQ0ju5XCFi12WjVpyqKrEHiIQWF7oE8vcimy+IDLWzQE0OX9 UDQaQKnMt++0gOdCPLtrKuCez/xJFUHMDO3xGj17rBRLE+SqjE3Qj7I5eifKZwkX Bkc7NOOOHCYwt7IcPX0C6Zx3E8wmyKAEv3tEKjghsE3T+IWTejb+T7oidQMkjht1 h09nH/vt5QdI9eJaYc3yfCbpfg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:46:35 2026 by rpki-client