$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: uxtSSRxKA1dKLQYRJBgNlipQ5KiW1KlI9UlJG4E9qDc= Subject key identifier: 42:85:74:CD:84:B4:E0:7C:9A:D1:65:B0:0E:01:EE:0E:D5:0C:03:67 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0CB4 Signing time: Thu 16 Apr 2026 18:25:13 +0000 Manifest this update: Thu 16 Apr 2026 18:25:12 +0000 Manifest next update: Thu 23 Apr 2026 18:25:12 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: BqavfqCqLu46tsduiADZB8BSjEhn2gi//yOyGOS8N1s=) 2: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=) 3: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Apr 16 18:25:12 2026 GMT Not After : Apr 23 18:25:12 2026 GMT Subject: CN=69e12989-d1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:26:27:10:b1:79:d2:8c:db:ca:d8:84:d4: 9c:29:0b:a8:a5:a6:68:eb:71:0c:84:d0:be:7d:25: 30:fb:81:23:7b:a5:22:f1:bb:a2:5d:66:7a:3d:4f: 0a:c8:58:89:1e:f0:d0:b6:70:ca:2a:83:5e:a0:92: 6a:ae:68:dd:ec:8d:49:79:83:ef:78:80:59:b1:80: 5a:3a:53:fd:89:3b:d4:8d:90:fd:93:5f:30:aa:be: fc:04:62:b2:62:20:ee:41:13:44:90:ae:d1:b8:ec: 1e:39:39:35:76:55:f5:d8:28:ec:e6:0c:75:4c:96: e6:4b:eb:e4:8a:2c:92:1e:e2:18:aa:fc:50:a8:36: 49:8f:16:a5:b9:bc:89:5a:92:38:bd:83:8d:a5:65: 1f:15:5c:2a:3b:f1:b7:c9:ac:96:55:b2:e1:0d:ae: 01:bf:ff:53:8e:45:8e:fa:0d:47:d9:f5:af:da:a9: 70:d4:68:73:b6:24:69:46:71:2d:b8:fa:3d:c3:8e: e4:71:79:e3:40:7b:ff:ba:48:39:2c:19:a6:ef:1b: e7:84:8d:72:da:20:bb:f5:6e:c5:a0:26:96:0b:b8: 61:f9:7e:0b:32:d6:bf:4e:d8:2b:b1:eb:fe:9e:ab: af:e2:d1:98:5d:ad:43:eb:a9:e7:2b:46:c1:4d:b8: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:74:CD:84:B4:E0:7C:9A:D1:65:B0:0E:01:EE:0E:D5:0C:03:67 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:52:a3:5a:54:de:00:d2:d0:8e:83:04:73:ca:50:cd:6c:79: 80:33:e5:2c:45:e2:d9:07:33:04:6b:c7:cb:45:a7:5c:a3:03: 31:54:5e:e4:6a:90:78:b7:80:13:89:c4:22:42:d9:9a:09:ef: 9c:a9:ea:ce:4b:2b:f4:1d:cd:f2:15:ad:80:f1:ed:7c:e8:6e: 5b:fb:99:0b:bf:34:4b:d0:05:2e:5e:e7:07:1f:fa:d0:9c:0c: c3:32:ce:e4:6c:eb:30:d6:a2:e1:3e:7d:23:7a:2c:90:7a:b7: 25:2b:17:cf:4f:39:86:d5:14:8f:e0:78:14:d3:d5:63:4e:b7: 7f:c2:27:93:51:e1:a3:eb:af:2a:d7:9d:65:52:ae:64:57:16: b3:26:97:83:69:eb:64:3a:64:9d:a5:76:32:1c:60:10:f1:45: 23:b5:fd:8e:d5:d9:13:c4:b4:c7:06:95:60:79:7b:1b:ef:c9: 25:6a:a2:e1:7b:e1:2e:fc:e3:7d:d2:d3:f6:8f:df:4f:0d:ed: 6c:ca:b1:fe:67:38:2d:18:55:ee:c6:66:1e:00:d2:47:5a:0e: c4:c7:1b:1d:49:d7:91:57:e3:3f:57:83:4f:8b:e0:97:55:1c: a8:77:16:e8:8d:12:b1:f4:75:73:ec:ee:5f:52:ee:e1:44:d4: 0d:5f:ee:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjYwNDE2MTgyNTEyWhcNMjYwNDIzMTgyNTEyWjAYMRYwFAYD VQQDEw02OWUxMjk4OS1kMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlEmJxCxedKM28rYhNScKQuopaZo63EMhNC+fSUw+4Eje6Ui8buiXWZ6PU8K yFiJHvDQtnDKKoNeoJJqrmjd7I1JeYPveIBZsYBaOlP9iTvUjZD9k18wqr78BGKy YiDuQRNEkK7RuOweOTk1dlX12Cjs5gx1TJbmS+vkiiySHuIYqvxQqDZJjxalubyJ WpI4vYONpWUfFVwqO/G3yayWVbLhDa4Bv/9TjkWO+g1H2fWv2qlw1GhztiRpRnEt uPo9w47kcXnjQHv/ukg5LBmm7xvnhI1y2iC79W7FoCaWC7hh+X4LMta/Ttgrsev+ nquv4tGYXa1D66nnK0bBTbg+yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKFdM2E tOB8mtFlsA4B7g7VDANnMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAklKjWlTeANLQjoMEc8pQzWx5gDPlLEXi2QczBGvHy0WnXKMDMVRe5GqQeLeA E4nEIkLZmgnvnKnqzksr9B3N8hWtgPHtfOhuW/uZC780S9AFLl7nBx/60JwMwzLO 5GzrMNai4T59I3oskHq3JSsXz085htUUj+B4FNPVY063f8Ink1Hho+uvKtedZVKu ZFcWsyaXg2nrZDpknaV2MhxgEPFFI7X9jtXZE8S0xwaVYHl7G+/JJWqi4XvhLvzj fdLT9o/fTw3tbMqx/mc4LRhV7sZmHgDSR1oOxMcbHUnXkVfjP1eDT4vgl1UcqHcW 6I0SsfR1c+zuX1Lu4UTUDV/uOQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:28:34 2026 by rpki-client