$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: Pbie9p8v9yjNt4M06iW3aYZW42bc4Xm1f9x1+cu2gHw= Subject key identifier: B5:58:C8:C0:B3:62:53:A2:2F:19:44:07:3D:80:32:CD:A6:B5:D0:73 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0C0D Signing time: Thu 16 Apr 2026 18:45:48 +0000 Manifest this update: Thu 16 Apr 2026 18:45:47 +0000 Manifest next update: Thu 23 Apr 2026 18:45:47 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: Oqw0RBwqwkOgEmi7fNwXRC4sKqU0hEVjQpfMl38kt8U=) 2: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=) 3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=) 4: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Apr 16 18:45:47 2026 GMT Not After : Apr 23 18:45:47 2026 GMT Subject: CN=69e12e5c-b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:03:15:4e:21:35:49:d0:58:c6:bf:a8:39:86: 33:6d:a8:fe:3d:d3:9c:10:b2:4c:8a:e3:30:f1:e4: 5d:bb:b6:73:45:aa:b1:47:6f:25:7d:69:c8:84:4f: d0:f9:3b:43:88:a9:88:95:05:b7:ba:4d:33:2f:1c: 83:09:78:72:23:d1:39:43:dc:0b:ae:3b:b1:fa:1b: 34:88:85:3b:7c:f6:1f:0c:d4:b0:c6:5a:f7:78:76: 21:16:48:a1:aa:31:b2:61:85:c5:46:08:95:4d:fb: 41:06:f8:1b:7d:4d:ea:1a:f7:19:80:b9:4d:fe:d3: fd:d2:64:2f:b3:2e:7a:48:ff:b3:58:2e:fe:3f:bf: 38:b6:05:57:40:88:8f:3a:4d:f7:5e:53:05:9d:50: 3a:23:a3:67:92:8a:5e:3f:0a:07:d0:3e:43:e0:c9: c4:71:5b:61:67:f1:3e:9c:de:10:43:83:0f:0b:22: 47:e4:74:31:a9:c3:d3:a2:b0:33:80:28:12:02:ff: 99:fa:ce:10:60:e4:61:30:d5:8d:01:06:7f:6b:cc: 7e:4f:7e:f4:14:45:3f:cf:0e:a0:97:20:93:ef:f3: ab:9c:3b:9c:8d:6f:df:ef:1c:18:3d:cf:56:2b:e1: 55:0b:50:f4:6b:71:3f:50:d7:62:46:2d:e2:6c:b8: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:58:C8:C0:B3:62:53:A2:2F:19:44:07:3D:80:32:CD:A6:B5:D0:73 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9e:81:5a:79:90:14:89:39:1e:20:17:27:53:7b:2c:e0:d5: 51:64:d9:8e:53:a9:c0:49:06:7c:06:93:fe:ad:9d:e3:6e:bf: 1e:11:3c:5d:46:8c:a8:ed:05:a6:5d:ad:16:bc:c6:a2:87:c4: 72:66:a7:d0:0b:37:1c:3b:44:2f:d6:02:44:7b:9a:fd:07:1c: 7c:e6:5a:18:d2:8c:c1:52:94:9c:11:ef:6b:3c:a1:fe:29:fb: 3d:f9:8f:41:b5:5f:b1:ba:ee:c3:4f:63:be:c6:63:10:0b:fb: 8a:69:89:c6:b4:eb:d1:7a:b2:65:d0:3b:31:c2:e9:5f:b8:d9: be:a5:d1:cd:55:3b:2b:4b:e9:7c:ae:dc:e6:02:68:c7:47:43: dc:bf:7c:9f:63:ff:9f:40:ab:91:81:67:8e:5e:06:ba:4c:06: 9e:22:67:54:c0:21:8c:66:33:a7:a8:50:ce:6b:75:3c:a0:35: 27:4e:e5:76:aa:59:c1:23:49:90:11:98:42:02:e3:37:91:7a: 1a:35:76:7b:b1:b0:e6:b8:3e:fb:13:24:20:52:29:1e:4e:1c: 4e:62:21:63:7b:3f:1d:5d:ed:cb:6a:7d:78:42:a4:ee:18:0b: 3a:a6:27:21:fd:32:5a:67:be:64:74:c3:41:bb:ed:84:34:0d: 7d:40:50:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjYwNDE2MTg0NTQ3WhcNMjYwNDIzMTg0NTQ3WjAYMRYwFAYD VQQDEw02OWUxMmU1Yy1iOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gMVTiE1SdBYxr+oOYYzbaj+PdOcELJMiuMw8eRdu7ZzRaqxR28lfWnIhE/Q +TtDiKmIlQW3uk0zLxyDCXhyI9E5Q9wLrjux+hs0iIU7fPYfDNSwxlr3eHYhFkih qjGyYYXFRgiVTftBBvgbfU3qGvcZgLlN/tP90mQvsy56SP+zWC7+P784tgVXQIiP Ok33XlMFnVA6I6NnkopePwoH0D5D4MnEcVthZ/E+nN4QQ4MPCyJH5HQxqcPTorAz gCgSAv+Z+s4QYORhMNWNAQZ/a8x+T370FEU/zw6glyCT7/OrnDucjW/f7xwYPc9W K+FVC1D0a3E/UNdiRi3ibLhWiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVYyMCz YlOiLxlEBz2AMs2mtdBzMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPp6BWnmQFIk5HiAXJ1N7LODVUWTZjlOpwEkGfAaT/q2d426/HhE8XUaMqO0F pl2tFrzGoofEcman0As3HDtEL9YCRHua/QccfOZaGNKMwVKUnBHvazyh/in7PfmP QbVfsbruw09jvsZjEAv7immJxrTr0XqyZdA7McLpX7jZvqXRzVU7K0vpfK7c5gJo x0dD3L98n2P/n0CrkYFnjl4GukwGniJnVMAhjGYzp6hQzmt1PKA1J07ldqpZwSNJ kBGYQgLjN5F6GjV2e7Gw5rg++xMkIFIpHk4cTmIhY3s/HV3ty2p9eEKk7hgLOqYn If0yWme+ZHTDQbvthDQNfUBQ2g== -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:44 2026 by rpki-client