$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: 4D4s2vsznwRMVH7Gra2/SqmlKU0jsi1hJC4EscuEGao= Subject key identifier: 83:CB:B1:9B:FB:76:54:17:7D:1F:3C:34:9B:94:3F:0D:BA:C0:D9:0B Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 020A Signing time: Fri 17 Apr 2026 02:48:29 +0000 Manifest this update: Fri 17 Apr 2026 02:48:29 +0000 Manifest next update: Fri 24 Apr 2026 02:48:29 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: bqQnaKnf/NSM7zcqQnYXzMyTBNQ5NwOnaQts71eFirQ=) 2: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k=) 3: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Apr 17 02:48:29 2026 GMT Not After : Apr 24 02:48:29 2026 GMT Subject: CN=69e19f7d-ed34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:1a:e9:9f:1b:63:47:a2:19:f0:c8:02:3d: 7d:d3:67:4d:bb:7f:21:d5:89:57:aa:31:4e:df:80: 0c:36:7e:98:ae:1b:c9:bf:1d:73:fe:43:43:03:5c: 52:92:6e:f6:53:23:66:1e:ef:b1:f5:f9:31:d2:ba: 72:6a:28:42:34:f3:57:23:e4:dd:51:9d:ba:e2:e1: e6:7c:ff:a0:fa:58:2f:df:22:e4:2e:86:fb:e9:38: 5b:5a:53:93:04:11:7f:5c:61:2a:49:d5:15:9c:88: ce:a4:1f:09:35:ab:a8:64:20:10:aa:95:89:97:0a: db:61:87:c3:82:50:4f:14:96:a8:7e:c3:f0:dd:9b: c5:83:a1:bf:ca:cc:97:2f:42:fd:bb:b5:4c:ca:a3: f7:52:a8:8d:bc:b6:6d:85:71:b8:46:9f:18:c6:bc: 00:3a:aa:09:1c:cf:b4:cf:0f:d7:18:7d:58:8c:8f: 3a:ed:d1:6b:19:11:a0:5d:8d:5e:60:8c:5d:53:2a: 0b:47:44:2e:cc:ae:8b:4f:20:72:56:55:69:05:1e: 33:14:ac:f6:37:ab:97:ba:54:60:e6:e4:2d:44:15: 96:11:05:dc:fe:c1:09:83:be:f2:61:e0:8b:69:6e: d0:62:2c:2f:09:25:81:90:f9:cf:0e:1c:7f:f9:f1: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CB:B1:9B:FB:76:54:17:7D:1F:3C:34:9B:94:3F:0D:BA:C0:D9:0B X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:97:4d:18:a5:a6:bf:17:43:43:32:3f:cb:ca:1c:42:d9: 14:52:3a:c8:91:20:c4:bc:bb:b5:18:0a:f4:57:77:21:84:1c: f4:29:37:c3:47:ce:6e:41:9b:13:99:29:3a:44:b7:4e:3f:84: bf:ca:f8:01:72:80:d1:49:e7:cc:1a:a1:cc:08:bd:1a:95:00: d0:01:3e:35:c7:10:d2:c4:74:c3:da:e8:74:91:c5:e8:d0:74: e0:35:6a:96:2e:3a:ad:70:c0:40:07:9b:60:4b:3a:65:29:3e: ca:8e:95:50:ce:42:b1:e5:b8:1a:a0:25:8a:e5:6d:d9:dd:0f: 1c:fa:a3:44:e7:12:8d:0e:54:1d:fa:22:34:ec:96:6d:61:f4: 27:69:97:60:f7:5c:cc:00:ad:a2:6a:bf:a8:65:84:67:3a:82: 69:00:6a:93:76:b2:87:f2:81:20:56:5b:01:92:09:dd:c7:3e: 4e:67:ed:7e:8a:84:6e:48:ce:2b:ca:8e:34:46:ae:65:15:89: 41:d4:f9:06:81:69:78:eb:92:ff:de:79:89:c5:d7:15:5f:bc: e6:fb:db:38:33:c5:79:93:d1:35:58:ab:e9:c0:17:4c:3c:dc: 8d:e0:4c:6f:3b:b6:ad:2c:38:2c:0c:90:07:a1:c3:62:bc:af: f6:f7:64:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwNDE3MDI0ODI5WhcNMjYwNDI0MDI0ODI5WjAYMRYwFAYD VQQDEw02OWUxOWY3ZC1lZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB4a6Z8bY0eiGfDIAj1902dNu38h1YlXqjFO34AMNn6YrhvJvx1z/kNDA1xS km72UyNmHu+x9fkx0rpyaihCNPNXI+TdUZ264uHmfP+g+lgv3yLkLob76ThbWlOT BBF/XGEqSdUVnIjOpB8JNauoZCAQqpWJlwrbYYfDglBPFJaofsPw3ZvFg6G/ysyX L0L9u7VMyqP3UqiNvLZthXG4Rp8YxrwAOqoJHM+0zw/XGH1YjI867dFrGRGgXY1e YIxdUyoLR0QuzK6LTyByVlVpBR4zFKz2N6uXulRg5uQtRBWWEQXc/sEJg77yYeCL aW7QYiwvCSWBkPnPDhx/+fENSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPLsZv7 dlQXfR88NJuUPw26wNkLMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqICXTRilpr8XQ0MyP8vKHELZFFI6yJEgxLy7tRgK9Fd3IYQc9Ck3w0fObkGb E5kpOkS3Tj+Ev8r4AXKA0UnnzBqhzAi9GpUA0AE+NccQ0sR0w9rodJHF6NB04DVq li46rXDAQAebYEs6ZSk+yo6VUM5CseW4GqAliuVt2d0PHPqjROcSjQ5UHfoiNOyW bWH0J2mXYPdczACtomq/qGWEZzqCaQBqk3ayh/KBIFZbAZIJ3cc+TmftfoqEbkjO K8qONEauZRWJQdT5BoFpeOuS/955icXXFV+85vvbODPFeZPRNVir6cAXTDzcjeBM bzu2rSw4LAyQB6HDYryv9vdkXg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:57:41 2026 by rpki-client