$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft File: YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json) Hash identifier: iCxZu1SzDP00DXWrQwCa03hvTkx2y3S73pp2Ciqdaug= Subject key identifier: F7:AE:0D:3E:F9:17:89:A0:5A:0D:FA:93:8B:95:99:6E:B8:0D:DC:7B Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft Manifest number: 063B Signing time: Sat 04 Apr 2026 22:31:31 +0000 Manifest this update: Sat 04 Apr 2026 22:31:30 +0000 Manifest next update: Sat 11 Apr 2026 22:31:30 +0000 Files and hashes: 1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: PiX+WUnorch4/EGnrOE0axm9fWvlfKJez0waqraaeyc=) 2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: z3K78kKecVQMmJ50EY3GJXcrFCdRmrLxw9yA8ww2hMY=) 3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: 1uRa9qCZnC1NyVtsdBrtA6UVUVTLZi1rR+2Ai/+6L3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Validity Not Before: Apr 4 22:31:30 2026 GMT Not After : Apr 11 22:31:30 2026 GMT Subject: CN=69d19142-e892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:86:18:98:7f:82:cf:6f:88:7d:02:99:4b: d0:98:10:75:86:48:0e:04:34:39:ff:bc:0f:37:ae: 47:9c:53:6c:0d:ba:5f:d5:b8:9f:10:95:a5:ad:59: 53:c1:78:e6:92:a8:6d:e1:79:0f:e8:a5:23:84:9c: 45:90:03:3d:30:d7:04:95:6b:54:cd:cc:c7:a8:a1: 7b:33:fe:e7:d0:ed:00:3f:17:9e:ac:f6:62:78:5f: f9:73:a8:eb:d6:c6:5e:c8:a3:a5:cc:c6:e4:03:e6: 14:de:f2:df:ea:1c:5c:39:60:f2:29:fd:cb:58:7e: f6:77:e4:ee:88:f3:7b:a7:7d:02:c0:d8:05:f5:f3: b3:82:82:a1:44:fe:5d:53:64:0e:cd:fa:6e:21:2c: 57:ec:af:a6:61:5a:4f:9f:33:75:8b:81:98:b1:5b: 05:2e:8a:a0:ae:93:0b:3a:5b:e5:aa:01:43:e0:00: 8b:38:3c:d1:2f:91:43:7e:46:87:74:cc:57:69:25: 00:1b:9b:06:63:2b:c4:e6:52:23:28:a3:6a:8c:11: ab:33:6f:6c:c1:1c:67:6f:0e:52:5c:e6:4a:80:29: f2:24:bc:3b:98:8b:b1:2b:9a:26:f7:6e:23:18:97: 9b:c4:e3:a2:8c:cb:b1:e5:e1:39:c2:02:60:b7:4b: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AE:0D:3E:F9:17:89:A0:5A:0D:FA:93:8B:95:99:6E:B8:0D:DC:7B X509v3 Authority Key Identifier: keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fd:29:7a:75:90:6a:37:e3:17:29:9f:94:50:15:42:c8:8c: 81:dd:bf:b9:91:22:71:30:a9:a0:ae:02:86:59:03:e9:fd:49: 5b:65:13:b1:28:1b:bb:70:31:1a:95:28:6a:34:73:5b:27:75: 36:f2:82:18:1b:d8:9a:f2:6f:64:90:a7:d0:52:73:a3:97:a3: 5b:17:ff:3d:74:99:77:13:cd:d3:3c:b0:6a:f0:8e:d3:ee:f2: 8a:80:94:a5:9d:21:c4:33:41:c9:a6:92:fd:ac:25:ca:1b:7c: 23:cf:b7:c7:4d:ed:60:9f:49:55:69:be:8e:37:da:8b:c7:fa: bf:9f:11:7c:e2:58:f8:f8:97:f3:2d:73:38:a1:0e:9d:af:ed: 44:37:be:ed:50:91:ba:a8:3b:25:90:06:27:ac:33:35:fa:5f: bf:67:ba:65:01:51:09:ad:f6:08:4b:09:0e:b9:d8:a7:3b:2e: f7:e8:23:65:12:78:c6:64:d0:a6:d2:10:81:1d:07:32:9c:ef: 40:de:5f:06:1b:1e:39:c5:d1:44:6f:5a:8c:dd:1f:9b:a5:a0: b6:a2:65:82:27:78:5b:e9:91:f5:99:04:f0:fd:53:be:89:e3: 3f:f6:9c:47:74:2b:25:79:9d:d5:8e:5f:a2:45:3f:0a:b7:ed: 12:6c:55:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG RUJCRkU5QjQwHhcNMjYwNDA0MjIzMTMwWhcNMjYwNDExMjIzMTMwWjAYMRYwFAYD VQQDEw02OWQxOTE0Mi1lODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoKGGJh/gs9viH0CmUvQmBB1hkgOBDQ5/7wPN65HnFNsDbpf1bifEJWlrVlT wXjmkqht4XkP6KUjhJxFkAM9MNcElWtUzczHqKF7M/7n0O0APxeerPZieF/5c6jr 1sZeyKOlzMbkA+YU3vLf6hxcOWDyKf3LWH72d+TuiPN7p30CwNgF9fOzgoKhRP5d U2QOzfpuISxX7K+mYVpPnzN1i4GYsVsFLoqgrpMLOlvlqgFD4ACLODzRL5FDfkaH dMxXaSUAG5sGYyvE5lIjKKNqjBGrM29swRxnbw5SXOZKgCnyJLw7mIuxK5om924j GJebxOOijMux5eE5wgJgt0sJhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeuDT75 F4mgWg36k4uVmW64Ddx7MB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjU1RC9FN0E3N0JFRUQxMUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0 RzdjQzREaUNveVgtdV82YlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkf0penWQajfjFymflFAVQsiMgd2/uZEicTCpoK4ChlkD6f1JW2UTsSgbu3Ax GpUoajRzWyd1NvKCGBvYmvJvZJCn0FJzo5ejWxf/PXSZdxPN0zywavCO0+7yioCU pZ0hxDNByaaS/awlyht8I8+3x03tYJ9JVWm+jjfai8f6v58RfOJY+PiX8y1zOKEO na/tRDe+7VCRuqg7JZAGJ6wzNfpfv2e6ZQFRCa32CEsJDrnYpzsu9+gjZRJ4xmTQ ptIQgR0HMpzvQN5fBhseOcXRRG9ajN0fm6WgtqJlgid4W+mR9ZkE8P1TvonjP/ac R3QrJXmd1Y5fokU/CrftEmxV2Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:28:56 2026 by rpki-client