$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: jtfDpm8Rp0BHXHj6k10Wfz8OP/DcVuP/BQyXivnEw8A= Subject key identifier: D7:3E:21:2C:54:98:A3:A4:D8:D5:FA:E9:31:D9:D7:09:85:FF:16:99 Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: E3 Signing time: Sun 05 Apr 2026 05:55:17 +0000 Manifest this update: Sun 05 Apr 2026 05:55:16 +0000 Manifest next update: Sun 12 Apr 2026 05:55:16 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: w/BEYt8COP5lB/xnva6MYvZe4ZEZjhAvqQZ8aO9xo7Y=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: eYKV4envgCgs3WvH6pBo9YBy1q8A8VpKoNaaI9QRSww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: Apr 5 05:55:16 2026 GMT Not After : Apr 12 05:55:16 2026 GMT Subject: CN=69d1f944-faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:9a:76:b9:1f:fd:46:68:9d:1b:c2:eb:4c: 0c:7d:3b:95:33:a9:e0:fe:20:18:bb:c8:4b:4c:8d: cb:1f:df:5a:33:2e:fc:de:c1:00:44:91:56:6b:c8: c6:d2:aa:55:47:64:05:27:5b:4d:01:f6:66:35:d9: f4:8b:47:e6:ba:80:64:e1:1e:cd:0c:73:d2:aa:6c: 1f:8d:da:d8:2e:2f:8c:e0:33:a2:3f:b9:4a:07:07: ca:78:3b:e3:ce:73:7e:fa:fb:dd:65:13:63:b7:71: d9:32:c9:c3:4f:b7:5f:f1:8b:12:14:f0:fb:ff:e0: 88:7d:3f:c4:82:4a:aa:5b:7a:6e:41:08:ca:27:df: 7b:67:eb:7a:75:ae:c5:ac:0b:f6:53:c7:d6:6b:5a: 78:89:b1:7f:b7:72:fd:e4:a9:e6:24:71:c3:36:23: 49:cc:6f:95:44:de:70:6b:5f:04:c5:7c:70:9a:88: 44:2e:0d:a2:0e:81:aa:1e:80:96:86:3a:76:9c:85: ae:6b:7c:69:ce:bd:b3:7f:e1:1d:15:76:30:81:fa: fd:c7:dc:e8:5e:7c:78:22:7d:7e:3e:92:eb:f4:6e: d9:7f:2a:12:6e:ee:5f:b5:05:4a:f9:d5:93:0b:86: ae:76:c1:49:9e:ca:b9:37:58:4b:22:f8:eb:e0:9b: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:21:2C:54:98:A3:A4:D8:D5:FA:E9:31:D9:D7:09:85:FF:16:99 X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:06:1e:45:f3:41:30:ba:b7:df:86:87:96:36:5d:ef:84:da: 0c:a5:db:2a:56:4b:27:d5:14:27:0f:ff:ed:8b:f8:13:df:bd: bb:c0:da:57:1c:0a:9f:95:e1:5b:4e:ef:2b:2c:59:05:53:59: 66:e8:90:b8:b1:89:7c:4a:5b:fa:e1:db:3b:b9:ed:c3:c7:db: a0:bf:2d:25:d0:49:c1:98:6d:7e:e8:54:d5:ec:f8:fe:73:aa: 8e:d8:5b:36:8a:37:36:75:98:44:1f:dd:7f:86:d4:f8:f2:86: cd:cd:0d:cc:ba:63:27:e5:70:47:c7:d4:51:3f:93:17:51:da: 27:8b:e4:e8:10:2d:70:d4:f4:a4:49:1a:85:1e:df:6c:7a:c1: 25:27:dd:b9:31:7f:8a:a5:dc:aa:ca:1f:bd:29:48:97:a1:78: 64:52:13:1b:b0:a5:fe:6d:85:a7:1e:71:2b:68:7a:f0:6d:13: ce:a2:f4:5a:e0:87:71:c8:a4:76:be:49:1e:16:c6:76:d8:2a: 52:49:da:5f:4c:54:c6:92:4f:b7:1f:c6:32:be:0b:de:9f:36: a9:06:73:e4:a6:be:65:90:30:b1:4c:46:b6:0d:93:c4:60:26: d4:cd:5c:f8:fd:50:ce:40:c4:f9:04:18:ae:93:4a:91:89:ed: 22:c5:9d:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEN0IxMTAvBgNVBAUTKDYxNEQxRUM4QjY5M0U3QkI1RjMyQ0ZBNTI3QjUwMjgz MjY5REZFMkIwHhcNMjYwNDA1MDU1NTE2WhcNMjYwNDEyMDU1NTE2WjAYMRYwFAYD VQQDEw02OWQxZjk0NC1mYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0buadrkf/UZonRvC60wMfTuVM6ng/iAYu8hLTI3LH99aMy783sEARJFWa8jG 0qpVR2QFJ1tNAfZmNdn0i0fmuoBk4R7NDHPSqmwfjdrYLi+M4DOiP7lKBwfKeDvj znN++vvdZRNjt3HZMsnDT7df8YsSFPD7/+CIfT/EgkqqW3puQQjKJ997Z+t6da7F rAv2U8fWa1p4ibF/t3L95KnmJHHDNiNJzG+VRN5wa18ExXxwmohELg2iDoGqHoCW hjp2nIWua3xpzr2zf+EdFXYwgfr9x9zoXnx4In1+PpLr9G7ZfyoSbu5ftQVK+dWT C4audsFJnsq5N1hLIvjr4Jue8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNc+ISxU mKOk2NX66THZ1wmF/xaZMB8GA1UdIwQYMBaAFGFNHsi2k+e7XzLPpSe1AoMmnf4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ3Qi9BNzRGNUVEQ0Q4 NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3dGZNcy1sSjdVQ2d5YWRf aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ3Qi9BNzRGNUVEQ0Q4NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3 dGZNcy1sSjdVQ2d5YWRfaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiAYeRfNBMLq334aHljZd74TaDKXbKlZLJ9UUJw//7Yv4E9+9u8DaVxwKn5Xh W07vKyxZBVNZZuiQuLGJfEpb+uHbO7ntw8fboL8tJdBJwZhtfuhU1ez4/nOqjthb Noo3NnWYRB/df4bU+PKGzc0NzLpjJ+VwR8fUUT+TF1HaJ4vk6BAtcNT0pEkahR7f bHrBJSfduTF/iqXcqsofvSlIl6F4ZFITG7Cl/m2Fpx5xK2h68G0TzqL0WuCHccik dr5JHhbGdtgqUknaX0xUxpJPtx/GMr4L3p82qQZz5Ka+ZZAwsUxGtg2TxGAm1M1c +P1QzkDE+QQYrpNKkYntIsWdMA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:17 2026 by rpki-client