$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: DHeFSrvafOZsYN36E4sS9NeziveXTtoktDQFZV6FbWg= Subject key identifier: 5C:41:3A:F9:85:03:FC:94:C3:D4:9D:19:90:88:E0:9C:BF:74:58:F4 Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: 013D Signing time: Fri 17 Apr 2026 05:05:14 +0000 Manifest this update: Fri 17 Apr 2026 05:05:13 +0000 Manifest next update: Fri 24 Apr 2026 05:05:13 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: NJ9n+/W77R1TOAYGatRCaA3W/WB8/Hbnv2b5rkY4jP8=) 2: 2F5670EAABF411F0A51AED16C4F9AE02.roa (hash: G7nOpaEeJJxWIo3Us0CUcma/QDCYjsfPhli5/OvVTII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Apr 17 05:05:13 2026 GMT Not After : Apr 24 05:05:13 2026 GMT Subject: CN=69e1bf8a-5df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:f6:f4:32:e5:ed:4c:f9:6f:ef:7b:98:81: d3:c8:a9:2f:ba:c7:41:60:eb:67:09:1d:c8:d2:46: 34:0f:47:e1:2b:7f:4e:3b:35:e1:cd:a6:2b:4b:86: da:24:1f:69:bd:f9:09:2a:0a:eb:6f:d8:14:d4:86: da:3f:af:48:c2:9a:ab:4d:32:e5:31:79:da:00:a3: ee:79:9f:bd:92:51:88:6f:ec:58:72:9b:44:0d:45: 14:04:34:7a:f5:e8:4f:c0:5b:36:cd:d6:5f:f4:38: 62:7c:2c:9b:9f:34:08:31:c6:cd:33:c7:eb:71:06: 30:03:c4:f0:83:72:6d:1d:ab:3a:40:d9:86:2e:0e: d0:af:3c:b4:dd:0b:fe:75:37:a9:64:d7:c7:27:89: fd:48:7a:50:36:2d:7e:e0:a4:c8:50:15:3f:9b:fd: e7:19:2a:00:03:48:2c:0e:40:3d:1f:de:c7:12:8b: d5:6b:11:f4:0f:ce:d4:09:d0:7f:28:d0:19:03:73: be:1e:82:a5:e4:80:0c:2a:57:42:2d:22:0c:4e:4f: 36:de:db:5c:b7:06:0d:82:f2:80:5c:25:d7:cb:a5: 4f:5f:ae:b1:6e:59:41:fb:35:f4:43:95:13:e4:79: 81:ba:59:3c:45:86:ed:26:63:bc:c7:b6:6f:0e:1e: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:3A:F9:85:03:FC:94:C3:D4:9D:19:90:88:E0:9C:BF:74:58:F4 X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bb:0c:5d:73:e4:b6:6b:a0:4f:77:ca:74:83:14:29:0b:24: 52:0a:18:18:ca:31:04:6f:7b:0a:18:43:81:66:78:a5:43:2c: 52:af:08:49:34:b1:fa:72:61:93:01:63:67:93:72:e3:88:8a: f1:38:ec:df:a9:ff:28:94:b7:96:dc:32:bf:90:4a:d2:69:8d: 89:85:df:38:0e:1d:65:be:ab:bc:9c:09:2d:ee:61:d8:ca:f0: d8:81:ff:93:19:e5:1c:ec:96:90:14:64:cc:42:24:88:99:47: d5:0e:1b:9c:7c:92:dc:40:0e:d1:80:6e:05:b7:2d:bf:e9:77: 81:b7:bd:b3:61:81:bd:3e:72:3e:6e:a5:dd:44:ea:e5:b7:3e: 2c:3f:43:d1:21:07:60:7e:6f:72:9a:a9:93:66:99:b1:4c:a4: d5:50:2c:b1:0f:4f:47:9a:15:31:e0:fd:14:18:5c:94:64:ac: ad:ee:37:80:85:32:02:85:f8:51:8b:ed:17:65:f7:f2:d5:cb: 70:af:b3:3e:d7:39:50:b5:5a:b0:02:e6:a9:0d:12:16:63:f5: be:9e:5f:28:ad:b3:76:57:7b:56:ac:5b:50:a0:4c:33:f5:05: ef:51:74:84:cb:4e:e5:bb:45:59:18:c8:90:1f:49:a0:2a:3c: 72:03:3b:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjYwNDE3MDUwNTEzWhcNMjYwNDI0MDUwNTEzWjAYMRYwFAYD VQQDEw02OWUxYmY4YS01ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLD29DLl7Uz5b+97mIHTyKkvusdBYOtnCR3I0kY0D0fhK39OOzXhzaYrS4ba JB9pvfkJKgrrb9gU1IbaP69IwpqrTTLlMXnaAKPueZ+9klGIb+xYcptEDUUUBDR6 9ehPwFs2zdZf9DhifCybnzQIMcbNM8frcQYwA8Twg3JtHas6QNmGLg7Qrzy03Qv+ dTepZNfHJ4n9SHpQNi1+4KTIUBU/m/3nGSoAA0gsDkA9H97HEovVaxH0D87UCdB/ KNAZA3O+HoKl5IAMKldCLSIMTk823ttctwYNgvKAXCXXy6VPX66xbllB+zX0Q5UT 5HmBulk8RYbtJmO8x7ZvDh4LbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxBOvmF A/yUw9SdGZCI4Jy/dFj0MB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn7sMXXPktmugT3fKdIMUKQskUgoYGMoxBG97ChhDgWZ4pUMsUq8ISTSx+nJh kwFjZ5Ny44iK8Tjs36n/KJS3ltwyv5BK0mmNiYXfOA4dZb6rvJwJLe5h2Mrw2IH/ kxnlHOyWkBRkzEIkiJlH1Q4bnHyS3EAO0YBuBbctv+l3gbe9s2GBvT5yPm6l3UTq 5bc+LD9D0SEHYH5vcpqpk2aZsUyk1VAssQ9PR5oVMeD9FBhclGSsre43gIUyAoX4 UYvtF2X38tXLcK+zPtc5ULVasALmqQ0SFmP1vp5fKK2zdld7VqxbUKBMM/UF71F0 hMtO5btFWRjIkB9JoCo8cgM71g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:20 2026 by rpki-client