$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json) Hash identifier: rSR4JD1LdDjbeLUIMwEmp/m8lu3WSGhc+e7+MWrth2Y= Subject key identifier: 1B:8B:6F:99:04:DD:02:B0:92:C8:E5:92:38:1E:F2:ED:91:BF:2F:EC Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft Manifest number: 0489 Signing time: Tue 21 Apr 2026 00:01:06 +0000 Manifest this update: Tue 21 Apr 2026 00:01:05 +0000 Manifest next update: Tue 28 Apr 2026 00:01:05 +0000 Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: 7vXEkzF8maES7UBqfPolecsD+OTL2iqYwYSfM3unAf4=) 2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: CxWoJR6Se2jSwedaoRYTtf5Ccc+rdHyvf5qIYgnZC84=) 3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: K+H/sCg/7uo16p0l9r8hsE4GJ7oFMKIq4jprTznasVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294 Validity Not Before: Apr 21 00:01:05 2026 GMT Not After : Apr 28 00:01:05 2026 GMT Subject: CN=69e6be42-4d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:1b:e7:98:5b:f8:50:26:16:bd:c7:f0:d9: f3:3b:6f:ff:b3:bb:18:18:e4:ba:62:34:95:fe:21: ad:d9:00:df:26:ea:e9:8d:30:ad:ca:bd:4e:70:2f: 99:21:2a:8b:fa:37:b0:8b:ab:49:46:5c:69:48:e6: 41:09:b3:cd:ef:89:cf:a6:fe:7a:ae:b4:e2:ed:0f: 8a:56:5f:31:6a:12:ff:3c:10:f6:b7:6e:6f:0c:63: a3:cc:b0:48:1e:a9:7e:34:c3:d2:d2:d7:b7:f4:c8: dd:84:be:35:90:c1:a5:9f:ce:2e:04:61:25:9a:0f: c9:88:09:88:7f:3b:e9:52:6d:dd:ed:28:7e:d6:a0: 2a:15:e0:77:74:6d:59:13:1b:fd:42:5f:e5:99:2b: 5e:c7:20:6d:6e:ac:87:c6:44:ce:60:7a:c7:58:b2: ac:6d:2c:1b:27:58:c8:c8:c9:57:a8:40:8b:c8:44: 08:ed:fc:fc:7c:5d:25:cc:98:2c:ca:33:61:cc:5b: 95:01:87:44:5d:a0:18:28:95:03:8c:ab:8a:88:98: f1:b0:27:c6:37:c5:05:d1:6a:4f:bd:7d:5e:78:5d: 21:b1:bd:bb:68:15:bc:01:0f:29:64:4d:c4:69:df: d1:65:e7:10:4d:98:c3:24:43:36:f0:0a:a0:a8:7f: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8B:6F:99:04:DD:02:B0:92:C8:E5:92:38:1E:F2:ED:91:BF:2F:EC X509v3 Authority Key Identifier: keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a2:c8:14:3e:70:c5:8b:cf:6b:49:4a:f9:4e:0e:2e:b3:92: 9a:41:28:f8:b4:95:09:7f:3b:23:ee:0e:8f:b7:24:c1:a6:74: 1e:13:68:a8:b9:dd:86:4b:99:41:8b:2f:ec:3c:7f:87:06:e9: 0a:1d:fd:12:4b:e3:6b:d6:1b:79:23:e3:fb:6f:dd:d2:b0:29: b5:65:c2:ee:e8:e1:5d:f7:96:78:c1:24:a8:82:11:11:29:10: 17:f7:51:08:4c:80:b4:bd:79:99:6d:77:dc:88:00:b9:39:0b: 28:5a:63:6c:48:d1:84:7e:a9:bf:a4:e3:39:99:76:0a:dd:89: ad:e0:e8:6a:dc:ee:be:50:13:40:4e:29:d4:38:79:d7:dd:fa: f2:db:cf:a1:00:f7:67:25:11:2e:f5:22:a7:33:58:df:cb:3a: 35:97:9d:5b:a0:26:e2:b1:c5:5a:73:23:32:cd:eb:8d:a3:cb: b1:29:65:3f:48:39:f4:ee:ca:47:a3:a8:2b:7c:05:e8:a3:ce: 29:0c:e8:6b:50:d0:8c:ba:45:84:96:f1:5e:0a:6d:44:3f:b1: ee:8a:a1:d8:20:a1:6a:8f:8d:ae:08:f8:60:af:38:c1:03:18: 17:76:88:a4:c0:8e:21:77:59:bc:a0:6d:3c:5c:f1:21:be:e3: 82:20:c4:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy RjE0NjMyOTQwHhcNMjYwNDIxMDAwMTA1WhcNMjYwNDI4MDAwMTA1WjAYMRYwFAYD VQQDEw02OWU2YmU0Mi00ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZsb55hb+FAmFr3H8NnzO2//s7sYGOS6YjSV/iGt2QDfJurpjTCtyr1OcC+Z ISqL+jewi6tJRlxpSOZBCbPN74nPpv56rrTi7Q+KVl8xahL/PBD2t25vDGOjzLBI Hql+NMPS0te39MjdhL41kMGln84uBGElmg/JiAmIfzvpUm3d7Sh+1qAqFeB3dG1Z Exv9Ql/lmStexyBtbqyHxkTOYHrHWLKsbSwbJ1jIyMlXqECLyEQI7fz8fF0lzJgs yjNhzFuVAYdEXaAYKJUDjKuKiJjxsCfGN8UF0WpPvX1eeF0hsb27aBW8AQ8pZE3E ad/RZecQTZjDJEM28AqgqH/yrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBuLb5kE 3QKwksjlkjge8u2Rvy/sMB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5 OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW6LIFD5wxYvPa0lK+U4OLrOSmkEo+LSVCX87I+4Oj7ckwaZ0HhNoqLndhkuZ QYsv7Dx/hwbpCh39Ekvja9YbeSPj+2/d0rAptWXC7ujhXfeWeMEkqIIRESkQF/dR CEyAtL15mW133IgAuTkLKFpjbEjRhH6pv6TjOZl2Ct2JreDoatzuvlATQE4p1Dh5 19368tvPoQD3ZyURLvUipzNY38s6NZedW6Am4rHFWnMjMs3rjaPLsSllP0g59O7K R6OoK3wF6KPOKQzoa1DQjLpFhJbxXgptRD+x7oqh2CChao+Nrgj4YK84wQMYF3aI pMCOIXdZvKBtPFzxIb7jgiDEnA== -----END CERTIFICATE-----Generated at Wed Apr 22 11:28:57 2026 by rpki-client