$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: yBzUFc6LqGiYAORRd/ekDuoywzXw59aO7igmch68PCY= Subject key identifier: 4E:79:B4:0D:17:C7:78:8B:97:6A:9F:6A:FB:CA:FC:78:38:F5:BC:20 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 2097 Signing time: Thu 16 Apr 2026 15:59:56 +0000 Manifest this update: Thu 16 Apr 2026 15:59:56 +0000 Manifest next update: Thu 23 Apr 2026 15:59:56 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: HS53zJqbWofwDxTek+vz4RXfksge4VwOvTfCefPJPp0=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: twO+avT1bwdOGN+sO1DTxPWxAD5/Gbl/GY9g75HuCDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Apr 16 15:59:56 2026 GMT Not After : Apr 23 15:59:56 2026 GMT Subject: CN=69e1077c-a5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:a4:e6:f2:2f:0d:67:fb:5c:8e:3f:29:38: 18:d7:96:54:75:be:b7:fc:06:09:21:1d:96:53:ab: e6:df:17:a9:84:f8:9b:33:52:71:61:f1:ec:9d:26: 65:89:65:1c:99:b6:91:1e:5f:b7:3b:ff:45:a9:0b: 2a:4e:3d:88:9b:d3:28:1f:88:47:37:ee:ec:d0:b1: b8:2b:29:2b:72:41:a8:9f:64:c4:78:84:f3:f7:7d: 1e:10:70:6f:97:e1:39:49:3f:61:a7:44:09:78:08: ab:ef:ae:8f:00:58:6a:95:6b:f4:07:24:92:2a:1e: 20:32:4b:af:19:9e:b1:a0:e9:f0:77:8a:ad:e4:dd: 24:7c:ba:66:81:d7:1a:ab:4b:7e:78:2b:da:36:f6: 4c:9e:1e:13:d0:f2:34:28:a5:0b:4b:69:0c:6a:bd: 11:22:51:11:97:40:75:be:d8:69:47:de:33:6c:f7: 61:f8:f9:df:c6:9f:2c:68:b0:d6:ce:46:c1:9d:1c: b8:e6:a0:db:a3:8b:b5:d5:5d:35:f5:8b:6f:46:c2: a9:cf:25:e1:9e:87:0e:64:17:8d:53:e4:af:e6:66: 41:1d:4c:ec:28:7d:1e:20:a6:42:60:32:3e:c4:11: 5f:15:8a:93:81:2f:2e:73:86:42:93:91:73:b3:28: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:79:B4:0D:17:C7:78:8B:97:6A:9F:6A:FB:CA:FC:78:38:F5:BC:20 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f4:f4:61:da:f1:2e:f5:f3:6b:8f:d5:e3:cb:3e:5c:d1:83: 8d:5f:c7:a0:08:3c:8e:bf:a7:a4:3a:a9:f8:d6:46:c3:51:4d: 09:b1:d3:20:fc:97:53:a9:e6:07:35:fe:6e:45:62:38:45:cb: 7b:33:4f:b4:6c:8c:b4:2a:11:57:6f:9f:74:2d:9d:1b:67:e0: ba:83:11:50:4c:8c:dc:09:34:10:be:29:12:6c:7c:60:f3:d1: 3a:d8:9a:bb:4d:c1:56:66:64:82:01:ad:c8:5c:4a:4d:2e:21: 17:2e:ef:b5:d0:e1:b7:b8:30:66:b0:cf:56:38:b4:1d:8a:52: a1:8b:c6:5e:ce:1b:ac:46:e8:48:30:3d:4c:13:79:95:1f:63: 74:c1:fc:b9:d5:79:71:68:42:c7:53:dd:2b:7e:78:ca:7c:ff: b2:27:31:50:fd:f1:78:0f:ec:61:52:ad:5a:72:b8:28:f6:21: 0a:1f:da:dc:20:ef:ba:04:23:7c:1d:77:6b:3f:b4:51:ea:83: 79:1f:d4:c9:e5:da:a4:e5:51:e7:a6:5a:aa:e9:4a:c6:b6:cc: e5:30:a1:45:74:41:26:c2:4c:2d:95:27:94:a9:e0:be:42:48: 15:0a:21:fe:cf:82:8a:73:79:61:1f:5c:69:d0:86:6e:12:7b: e9:bb:bf:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjYwNDE2MTU1OTU2WhcNMjYwNDIzMTU1OTU2WjAYMRYwFAYD VQQDEw02OWUxMDc3Yy1hNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk02k5vIvDWf7XI4/KTgY15ZUdb63/AYJIR2WU6vm3xephPibM1JxYfHsnSZl iWUcmbaRHl+3O/9FqQsqTj2Im9MoH4hHN+7s0LG4KykrckGon2TEeITz930eEHBv l+E5ST9hp0QJeAir766PAFhqlWv0BySSKh4gMkuvGZ6xoOnwd4qt5N0kfLpmgdca q0t+eCvaNvZMnh4T0PI0KKULS2kMar0RIlERl0B1vthpR94zbPdh+Pnfxp8saLDW zkbBnRy45qDbo4u11V019YtvRsKpzyXhnocOZBeNU+Sv5mZBHUzsKH0eIKZCYDI+ xBFfFYqTgS8uc4ZCk5FzsygTpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE55tA0X x3iLl2qfavvK/Hg49bwgMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANPT0YdrxLvXza4/V48s+XNGDjV/HoAg8jr+npDqp+NZGw1FNCbHTIPyXU6nm BzX+bkViOEXLezNPtGyMtCoRV2+fdC2dG2fguoMRUEyM3Ak0EL4pEmx8YPPROtia u03BVmZkggGtyFxKTS4hFy7vtdDht7gwZrDPVji0HYpSoYvGXs4brEboSDA9TBN5 lR9jdMH8udV5cWhCx1PdK354ynz/sicxUP3xeA/sYVKtWnK4KPYhCh/a3CDvugQj fB13az+0UeqDeR/UyeXapOVR56ZaqulKxrbM5TChRXRBJsJMLZUnlKngvkJIFQoh /s+CinN5YR9cadCGbhJ76bu/5w== -----END CERTIFICATE-----Generated at Fri Apr 17 16:24:34 2026 by rpki-client