$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json) Hash identifier: V/6ogSrDaIcmkq8MBXCumS5KyAfudHYKOiOiXD+3rm4= Subject key identifier: ED:0A:69:83:B1:7E:9B:4D:D2:F3:63:22:50:ED:61:3D:69:1C:0F:0D Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft Manifest number: 020A Signing time: Sun 05 Apr 2026 02:35:14 +0000 Manifest this update: Sun 05 Apr 2026 02:35:13 +0000 Manifest next update: Sun 12 Apr 2026 02:35:13 +0000 Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: WhrZo7ycg1J5j+yVsbzq8EYiP9/wbFVLBKxe8+EEH7Q=) 2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: tV7zN4p6YBZjKHrlAaXgAexa7jVk375T1BwHlahtKKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: Apr 5 02:35:13 2026 GMT Not After : Apr 12 02:35:13 2026 GMT Subject: CN=69d1ca61-b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:42:11:3e:90:7e:ae:21:68:d7:b5:10:f7: 12:d8:bb:c8:a7:c5:a4:ee:ad:29:58:9a:15:12:12: 30:9d:f3:f2:36:5e:3e:61:05:0d:ed:2c:f7:64:b0: 3c:0a:85:60:7d:e8:92:f2:4f:38:cb:8e:d4:ea:38: be:41:2c:43:33:66:9d:61:85:2e:89:23:b4:77:60: 96:9d:5e:5f:e2:4b:72:e0:1d:62:96:b3:7c:6b:67: 57:f5:25:44:7f:bb:15:c3:ed:fc:e4:0e:01:32:85: af:67:d1:2e:9d:10:0b:a7:ed:75:40:df:73:ed:c5: 31:2c:2d:ea:1a:6d:dd:5b:2c:0e:67:4a:b8:36:96: c2:4f:cc:e8:1e:45:01:7b:47:e6:9f:00:45:84:14: da:4b:02:75:be:78:0f:91:93:f4:96:16:cf:7f:61: 49:eb:21:7b:16:75:42:db:b8:34:ad:de:4b:1b:21: 01:3e:4f:73:b5:95:08:1f:80:e3:1b:51:73:68:2d: 9a:89:49:b9:89:9f:05:f9:07:90:3d:84:b6:6a:0a: 08:15:c1:b3:a4:ab:bb:74:be:df:e4:94:de:fb:ff: 1b:fa:04:0a:bb:4d:4a:af:64:83:13:92:b5:f1:9e: f8:71:60:ad:ce:6c:f1:98:47:27:de:70:d4:ba:0e: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0A:69:83:B1:7E:9B:4D:D2:F3:63:22:50:ED:61:3D:69:1C:0F:0D X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b7:6e:f0:bd:1f:35:54:b6:c4:e8:ef:17:0e:32:05:53:d2: 2d:3a:12:e6:11:b5:f0:dc:92:3c:2b:18:b8:03:e9:3a:65:03: 3b:4e:63:3f:62:c6:78:d3:55:1b:64:f4:00:87:bd:b6:38:19: 87:44:4a:1f:0f:6d:17:40:d8:02:31:f4:c5:bd:94:5b:70:cd: 85:71:01:f8:b6:e0:1a:88:62:35:26:ac:b4:7b:30:6e:82:99: 70:39:8c:05:28:e2:41:1e:1c:60:71:de:0e:8c:e9:37:b6:e4: 07:26:4e:74:64:f4:5a:7a:c4:0e:60:b0:ca:1a:77:30:4b:bc: 28:a3:a8:ef:37:bc:7c:4a:36:0d:ae:7a:5e:0d:e8:3b:6c:ae: 63:fe:fe:33:2f:ae:84:1a:d7:4f:d8:09:9c:71:7c:2b:c6:4a: 79:69:58:c0:ef:6a:4a:cd:83:30:24:a5:46:fa:f5:fc:86:83: ce:7d:e8:0c:3a:1f:04:18:ea:f4:8e:c8:e4:03:e0:97:86:e7: 70:d0:9a:4b:fc:cc:ab:80:a4:77:85:9a:39:09:fc:fa:4e:4c: 57:ac:62:6e:cf:6f:af:64:41:56:ac:81:bd:9e:3d:bd:04:7e: f1:c5:00:82:a7:a6:d4:1b:87:b5:f7:b6:d2:5b:1d:81:f8:84: 8d:dd:75:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjYwNDA1MDIzNTEzWhcNMjYwNDEyMDIzNTEzWjAYMRYwFAYD VQQDEw02OWQxY2E2MS1iMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qVCET6Qfq4haNe1EPcS2LvIp8Wk7q0pWJoVEhIwnfPyNl4+YQUN7Sz3ZLA8 CoVgfeiS8k84y47U6ji+QSxDM2adYYUuiSO0d2CWnV5f4kty4B1ilrN8a2dX9SVE f7sVw+385A4BMoWvZ9EunRALp+11QN9z7cUxLC3qGm3dWywOZ0q4NpbCT8zoHkUB e0fmnwBFhBTaSwJ1vngPkZP0lhbPf2FJ6yF7FnVC27g0rd5LGyEBPk9ztZUIH4Dj G1FzaC2aiUm5iZ8F+QeQPYS2agoIFcGzpKu7dL7f5JTe+/8b+gQKu01Kr2SDE5K1 8Z74cWCtzmzxmEcn3nDUug7IQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0KaYOx fptN0vNjIlDtYT1pHA8NMB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrdu8L0fNVS2xOjvFw4yBVPSLToS5hG18NySPCsYuAPpOmUDO05jP2LGeNNV G2T0AIe9tjgZh0RKHw9tF0DYAjH0xb2UW3DNhXEB+LbgGohiNSastHswboKZcDmM BSjiQR4cYHHeDozpN7bkByZOdGT0WnrEDmCwyhp3MEu8KKOo7ze8fEo2Da56Xg3o O2yuY/7+My+uhBrXT9gJnHF8K8ZKeWlYwO9qSs2DMCSlRvr1/IaDzn3oDDofBBjq 9I7I5APgl4bncNCaS/zMq4Ckd4WaOQn8+k5MV6xibs9vr2RBVqyBvZ49vQR+8cUA gqem1BuHtfe20lsdgfiEjd11cg== -----END CERTIFICATE-----Generated at Mon Apr 6 10:35:39 2026 by rpki-client