$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: 1JMRx7/cFJcfO5iKfUcffMYPn8HTgrWR0Z6plz0NHyc= Subject key identifier: 7C:DC:DF:C4:DB:98:B5:FC:50:41:CB:9F:87:05:47:FA:5B:BF:FD:C8 Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 01C2 Signing time: Fri 17 Apr 2026 03:39:17 +0000 Manifest this update: Fri 17 Apr 2026 03:39:17 +0000 Manifest next update: Fri 24 Apr 2026 03:39:17 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: Szapmjs42tbYIPUmWDo2pvuNIOErC1H6OJwV6w4rW3o=) 2: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: u48zpmX4MX32BsS3SWmiT1sLqFE6P1rFb2rRJj5ZiBw=) 3: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: MD6k5wA0AqG/dEECYzynxqcMbFFUqeKVXvzHIx4QFZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Apr 17 03:39:17 2026 GMT Not After : Apr 24 03:39:17 2026 GMT Subject: CN=69e1ab65-0619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fe:90:b7:53:c2:68:77:89:17:d5:49:f2:9b: 2b:ad:70:ef:96:21:36:6c:4a:74:ae:9b:9c:3a:5a: 99:69:00:91:02:6d:0a:1c:71:8a:b1:8d:8c:cf:97: 4b:ce:94:6e:3b:c3:47:7f:c6:15:6f:24:e1:b2:5d: 3f:cc:7b:b4:be:8d:7a:65:2f:43:98:a6:56:7b:d1: 4d:87:ba:50:34:df:f9:43:1f:5a:af:d1:35:ed:5c: bd:d2:c0:8d:c4:de:21:ab:36:31:0a:1e:f9:b3:59: 1e:8f:dd:a1:71:17:8d:ad:9a:ba:a7:54:58:46:89: 21:f2:fb:7b:88:3a:9b:1f:9f:fc:0a:b9:33:1c:be: 05:7e:83:db:3b:45:01:d5:9e:a6:eb:3b:9f:cf:a4: 4f:f6:8d:00:1f:81:4a:36:cb:70:82:29:52:36:31: 01:45:4c:48:f8:74:52:ec:3a:c3:13:f0:f9:7d:72: f6:9e:48:82:1d:02:41:b9:4e:eb:a1:66:85:cd:bb: bd:0b:da:b5:2c:07:da:54:9d:34:64:62:ae:ec:7a: 23:1a:fc:45:02:39:98:90:22:71:19:9e:cf:87:87: 61:29:31:f0:04:71:69:da:81:73:0c:15:db:cc:ae: cc:33:09:96:4a:0d:a0:88:88:79:ae:87:44:23:a6: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:DF:C4:DB:98:B5:FC:50:41:CB:9F:87:05:47:FA:5B:BF:FD:C8 X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:9f:bf:67:7a:db:77:9a:58:e2:f1:95:b3:3f:af:e0:d0:11: 22:00:a8:c7:40:4f:5a:ca:d4:68:06:3d:86:a6:2d:58:d7:00: 01:8d:fa:5d:2b:29:7b:ac:d3:3c:14:ba:a9:3e:31:5d:47:c5: 18:2d:7f:84:e4:05:ab:1e:83:27:3b:bd:7e:04:d5:d7:3b:cd: a2:67:17:ce:5e:c1:c6:22:6e:a7:5b:6c:70:86:b0:76:7d:7b: a6:c2:86:41:aa:f3:c8:30:d5:ab:0c:33:01:13:9c:2c:20:3b: 8b:f9:da:c1:61:38:cc:35:12:20:68:a6:b2:64:7f:f4:fa:6c: cf:e5:2a:11:58:ab:69:29:f5:93:6b:ec:82:f2:dd:a4:65:e1: 64:cf:56:97:98:4d:5e:c9:3d:6c:10:5f:75:3c:af:6d:35:f9: 58:d5:dd:65:f0:a5:1e:da:34:6f:0a:7d:ff:f9:b1:cb:50:56: 19:e1:6e:df:ab:86:bb:c7:a2:a2:fc:7f:58:0d:d3:27:8a:e9: ae:46:e9:68:57:75:e6:af:34:9d:6c:ed:3c:ce:b9:35:9a:b5: 32:6e:4c:c4:08:65:4c:f4:00:ab:75:3a:d3:43:23:82:47:b2: 25:11:dc:2e:ad:8e:39:fa:1f:0a:04:f8:5b:52:1f:20:31:95: 3d:a4:35:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjYwNDE3MDMzOTE3WhcNMjYwNDI0MDMzOTE3WjAYMRYwFAYD VQQDEw02OWUxYWI2NS0wNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8f6Qt1PCaHeJF9VJ8psrrXDvliE2bEp0rpucOlqZaQCRAm0KHHGKsY2Mz5dL zpRuO8NHf8YVbyThsl0/zHu0vo16ZS9DmKZWe9FNh7pQNN/5Qx9ar9E17Vy90sCN xN4hqzYxCh75s1kej92hcReNrZq6p1RYRokh8vt7iDqbH5/8CrkzHL4FfoPbO0UB 1Z6m6zufz6RP9o0AH4FKNstwgilSNjEBRUxI+HRS7DrDE/D5fXL2nkiCHQJBuU7r oWaFzbu9C9q1LAfaVJ00ZGKu7HojGvxFAjmYkCJxGZ7Ph4dhKTHwBHFp2oFzDBXb zK7MMwmWSg2giIh5rodEI6Y9CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzc38Tb mLX8UEHLn4cFR/pbv/3IMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApp+/Z3rbd5pY4vGVsz+v4NARIgCox0BPWsrUaAY9hqYtWNcAAY36XSspe6zT PBS6qT4xXUfFGC1/hOQFqx6DJzu9fgTV1zvNomcXzl7BxiJup1tscIawdn17psKG QarzyDDVqwwzAROcLCA7i/nawWE4zDUSIGimsmR/9Ppsz+UqEViraSn1k2vsgvLd pGXhZM9Wl5hNXsk9bBBfdTyvbTX5WNXdZfClHto0bwp9//mxy1BWGeFu36uGu8ei ovx/WA3TJ4rprkbpaFd15q80nWztPM65NZq1Mm5MxAhlTPQAq3U600MjgkeyJRHc Lq2OOfofCgT4W1IfIDGVPaQ1EQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:32 2026 by rpki-client