$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: +C5U0litLHSzv0OLVTjFMyVQ8vKHDekBtNfiYJZa3ww= Subject key identifier: FC:D9:B3:A6:F1:A5:EA:57:FD:06:91:4B:07:15:B6:01:CD:33:10:AC Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0441 Signing time: Fri 17 Apr 2026 00:10:23 +0000 Manifest this update: Fri 17 Apr 2026 00:10:22 +0000 Manifest next update: Fri 24 Apr 2026 00:10:22 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: PqOjhd1dClBxpI7RYHZyaChKmsfgvMOKNlng+0jq/4k=) 2: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=) 3: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Apr 17 00:10:22 2026 GMT Not After : Apr 24 00:10:22 2026 GMT Subject: CN=69e17a6f-be54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:3b:71:df:56:84:d7:66:c1:54:3b:57:0d: e0:35:1b:65:18:c7:c3:e9:ec:47:5a:a5:8b:e2:eb: b8:04:ed:98:7f:91:8c:82:5a:67:e7:46:bf:5c:e1: e5:1d:19:de:4e:63:1f:85:61:eb:43:82:50:15:1d: 63:52:aa:4f:e1:17:c8:1e:cc:90:95:ba:e3:90:93: 9a:ee:8c:0b:dc:14:5f:8e:0a:cb:5c:fc:9a:ef:01: 75:b6:2c:26:a8:41:91:f4:6c:4e:91:ba:65:b8:14: c6:4a:86:2d:fe:9a:92:ee:43:8f:10:28:38:d5:0a: 63:93:17:58:d1:89:ca:fd:5d:5f:d4:76:75:37:07: d6:dd:22:f7:c2:c4:f8:3f:14:00:15:ea:c5:70:03: 5f:35:c5:81:96:42:85:45:0c:c8:b6:5e:d5:0f:25: e4:2b:cc:5c:87:36:27:82:10:e3:c6:b7:86:f2:43: 3e:50:20:66:ea:7a:33:5b:7f:b5:8f:fa:7b:d9:48: ad:c1:53:61:24:f6:13:a6:2c:70:b3:e3:23:41:92: ee:55:86:b0:e5:c8:cc:05:fe:d8:06:8f:6b:52:60: 84:5c:74:50:62:72:6c:56:41:20:80:34:ac:6a:f0: 68:ba:38:a2:8f:de:58:90:65:6b:60:f5:44:d1:b7: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D9:B3:A6:F1:A5:EA:57:FD:06:91:4B:07:15:B6:01:CD:33:10:AC X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e7:a7:74:fb:a4:6f:f5:0f:62:3c:68:fc:34:ea:e4:82:4a: bf:ca:08:df:23:91:2e:23:f7:ee:be:80:c9:a1:eb:fa:80:b7: 45:61:c3:cc:25:fd:2b:6b:10:3e:7a:1f:30:ee:96:19:67:76: 57:ed:d1:f2:9e:58:5f:e4:4e:c7:2e:8a:bb:3b:d0:9a:51:57: 5a:6e:48:6e:ea:d4:1c:9b:1b:cf:a7:3b:2b:24:c4:6e:53:c7: a7:72:0d:c3:1e:a2:ed:68:de:ac:a4:44:84:12:7e:a7:fe:b1: 3c:57:a3:e9:67:17:af:2c:0c:40:39:ff:d4:a2:1e:72:77:59: d0:cb:90:c0:0e:36:6f:36:14:b0:3a:5e:3c:32:a5:7c:e8:00: 7a:62:07:07:f9:4d:b9:b2:19:e2:84:2b:22:23:07:36:51:f4: 2b:31:3a:df:4c:d0:25:bf:f3:c7:ab:25:e7:83:79:00:00:13: 21:db:78:b1:6b:6d:1a:72:98:7f:37:92:31:68:fc:af:b4:61: e2:aa:6c:0b:09:79:0b:83:9d:45:3b:da:d5:10:9d:de:6e:1f: b1:65:2b:8a:1a:ca:71:09:0d:32:2c:a6:6b:0b:c4:0d:f8:55: 10:12:d8:e1:4f:df:2a:c7:6e:b9:17:29:21:b0:c9:10:c4:1d: 62:a4:c2:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwNDE3MDAxMDIyWhcNMjYwNDI0MDAxMDIyWjAYMRYwFAYD VQQDEw02OWUxN2E2Zi1iZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIA7cd9WhNdmwVQ7Vw3gNRtlGMfD6exHWqWL4uu4BO2Yf5GMglpn50a/XOHl HRneTmMfhWHrQ4JQFR1jUqpP4RfIHsyQlbrjkJOa7owL3BRfjgrLXPya7wF1tiwm qEGR9GxOkbpluBTGSoYt/pqS7kOPECg41QpjkxdY0YnK/V1f1HZ1NwfW3SL3wsT4 PxQAFerFcANfNcWBlkKFRQzItl7VDyXkK8xchzYnghDjxreG8kM+UCBm6nozW3+1 j/p72UitwVNhJPYTpixws+MjQZLuVYaw5cjMBf7YBo9rUmCEXHRQYnJsVkEggDSs avBoujiij95YkGVrYPVE0be1QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzZs6bx pepX/QaRSwcVtgHNMxCsMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEeendPukb/UPYjxo/DTq5IJKv8oI3yORLiP37r6AyaHr+oC3RWHDzCX9K2sQ PnofMO6WGWd2V+3R8p5YX+ROxy6KuzvQmlFXWm5IburUHJsbz6c7KyTEblPHp3IN wx6i7WjerKREhBJ+p/6xPFej6WcXrywMQDn/1KIecndZ0MuQwA42bzYUsDpePDKl fOgAemIHB/lNubIZ4oQrIiMHNlH0KzE630zQJb/zx6sl54N5AAATIdt4sWttGnKY fzeSMWj8r7Rh4qpsCwl5C4OdRTva1RCd3m4fsWUrihrKcQkNMiymawvEDfhVEBLY 4U/fKsduuRcpIbDJEMQdYqTCYQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:13 2026 by rpki-client