$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: HsMcAe7VVjHQzsPqTJ6YyedByHR6RVsAoSsAKrPAbNg= Subject key identifier: 3F:E6:75:3C:86:51:4D:B7:A0:51:CD:6D:11:03:24:89:96:95:28:6E Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 68 Signing time: Fri 17 Apr 2026 07:38:04 +0000 Manifest this update: Fri 17 Apr 2026 07:38:04 +0000 Manifest next update: Fri 24 Apr 2026 07:38:04 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: IIXCgHUz8/YIeRN7ZKB9DsOOzanlzbF9Y82+wKdrhSU=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: LyWvvw+ErBjB7W8o/R8I1LcD7CF1lU/R94KhGen7GVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Apr 17 07:38:04 2026 GMT Not After : Apr 24 07:38:04 2026 GMT Subject: CN=69e1e35c-0a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:2d:af:74:d4:35:26:f7:19:47:10:70:1e: 03:84:5c:76:13:a1:8d:f6:61:a6:08:f1:cf:1c:73: bd:d0:76:86:d6:27:e0:f9:67:0a:35:c9:d6:42:34: d7:94:a6:c3:04:67:2f:39:f8:e1:f5:0e:de:54:55: 45:ab:30:72:43:eb:82:6b:c0:15:84:ce:91:0b:db: b4:a3:60:ba:1e:f7:83:83:a6:7a:e2:56:94:04:98: 59:aa:d4:c5:28:ff:da:7d:cf:c5:20:3d:c9:13:85: fb:28:3d:3c:e8:10:4e:90:40:95:26:42:b5:ec:e4: 09:29:c8:f5:3d:84:ac:58:15:04:1c:d5:45:67:7b: 8c:5c:21:01:84:46:a5:e9:22:86:9b:f5:97:bd:b9: ff:e0:84:4e:a3:c9:73:9e:aa:de:1d:59:3a:32:de: 18:8d:6f:5c:76:4f:4f:75:90:f4:a1:89:02:c8:be: 4e:e7:c4:93:9a:a8:18:02:6c:26:aa:02:64:98:12: 1e:cc:e9:1d:88:1d:45:6f:a8:04:4e:4e:49:9b:5c: f8:d4:0b:19:6b:50:ed:57:b5:8e:e3:76:bf:6e:a5: 5d:35:b0:99:96:52:f7:83:8c:88:31:31:a6:17:aa: 37:01:da:5d:7e:d0:69:ec:48:a2:b9:89:1d:27:0f: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E6:75:3C:86:51:4D:B7:A0:51:CD:6D:11:03:24:89:96:95:28:6E X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d9:76:02:65:2a:9a:03:6d:8a:21:e8:7c:55:61:79:00:65: 17:f1:ba:0f:57:98:4b:85:36:2d:61:6f:be:34:ca:ce:1f:df: 34:54:d1:e0:be:c1:6f:96:42:d2:92:4a:a1:d0:30:92:c8:12: 16:2c:af:59:15:f1:1a:86:f1:47:f1:3f:1f:d6:0b:69:fe:f0: 9e:cc:7f:ac:af:0e:83:bf:04:94:a0:a7:d4:00:35:e4:2e:03: de:21:2a:7a:c8:1b:84:2a:31:f0:7f:0b:32:fb:4f:9d:9a:34: d5:38:3c:dc:19:28:ba:69:21:db:65:4a:98:c9:db:4b:88:11: 50:be:73:0e:6e:02:14:3a:0b:f3:46:43:a6:63:a4:c6:26:bd: bd:04:9f:b1:42:a6:b8:61:90:a7:bf:ab:66:ed:0e:e1:ce:f2: 42:f3:27:3f:fa:72:22:14:63:fe:e0:3c:8e:40:2c:1b:45:8e: a5:3d:dd:4f:78:12:f4:b3:61:e3:35:8a:90:a6:4c:af:61:c4: b5:fb:26:49:1b:e2:39:df:00:3c:8c:57:98:25:4c:43:9b:04: ef:52:a5:79:ac:16:c5:80:9c:0f:a5:37:8f:8e:a0:c6:99:86: 08:98:95:96:f7:98:3c:44:b5:e5:aa:bc:a2:b6:b5:25:9b:86: 5a:96:03:12 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNjA0MTcwNzM4MDRaFw0yNjA0MjQwNzM4MDRaMBgxFjAUBgNV BAMTDTY5ZTFlMzVjLTBhNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCthy2vdNQ1JvcZRxBwHgOEXHYToY32YaYI8c8cc73QdobWJ+D5Zwo1ydZCNNeU psMEZy85+OH1Dt5UVUWrMHJD64JrwBWEzpEL27SjYLoe94ODpnriVpQEmFmq1MUo /9p9z8UgPckThfsoPTzoEE6QQJUmQrXs5AkpyPU9hKxYFQQc1UVne4xcIQGERqXp Ioab9Ze9uf/ghE6jyXOeqt4dWToy3hiNb1x2T091kPShiQLIvk7nxJOaqBgCbCaq AmSYEh7M6R2IHUVvqAROTkmbXPjUCxlrUO1XtY7jdr9upV01sJmWUveDjIgxMaYX qjcB2l1+0GnsSKK5iR0nD+4HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUP+Z1PIZR TbegUc1tEQMkiZaVKG4wHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDFGLzE0RDA5QzAyOURBQjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3 OXdhN2JrUEYyZHl0X3gzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAz2XYCZSqaA22KIeh8VWF5AGUX8boPV5hLhTYtYW++NMrOH980VNHgvsFvlkLS kkqh0DCSyBIWLK9ZFfEahvFH8T8f1gtp/vCezH+srw6DvwSUoKfUADXkLgPeISp6 yBuEKjHwfwsy+0+dmjTVODzcGSi6aSHbZUqYydtLiBFQvnMObgIUOgvzRkOmY6TG Jr29BJ+xQqa4YZCnv6tm7Q7hzvJC8yc/+nIiFGP+4DyOQCwbRY6lPd1PeBL0s2Hj NYqQpkyvYcS1+yZJG+I53wA8jFeYJUxDmwTvUqV5rBbFgJwPpTePjqDGmYYImJWW 95g8RLXlqryitrUlm4ZalgMS -----END CERTIFICATE-----Generated at Fri Apr 17 15:33:08 2026 by rpki-client