$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: qGNWraMLm5T1sb0L2HOqC9lWWZPY6xroOLssZVT19bw= Subject key identifier: 9F:58:FB:5C:38:EF:FB:65:16:75:B6:73:1F:0C:A1:06:3E:05:81:20 Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 01C7 Signing time: Sun 19 Apr 2026 03:33:29 +0000 Manifest this update: Sun 19 Apr 2026 03:33:28 +0000 Manifest next update: Sun 26 Apr 2026 03:33:28 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: D0hvQioWhcDbVrHlYA14suB2/mzL00QRU7JVgpGcu8c=) 2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=) 3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Validity Not Before: Apr 19 03:33:28 2026 GMT Not After : Apr 26 03:33:28 2026 GMT Subject: CN=69e44d08-4854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:56:87:b3:72:a3:b7:2f:dc:86:80:48:db: 36:7d:99:69:fb:dd:69:57:9f:72:d4:73:96:71:fc: 0b:4f:15:fc:e9:5c:84:09:0a:2e:f4:9b:66:dd:05: 7b:4d:e2:bf:9f:3c:b6:50:cc:d8:df:15:0e:ec:9b: 4d:79:91:59:0f:fe:ee:0d:de:0f:ae:49:55:a2:01: f9:2e:b4:d9:cf:ed:c9:20:7f:d1:f7:15:ff:6f:93: 39:ed:b6:87:5d:2f:22:ad:7f:25:c2:c5:48:fc:2d: 38:7e:a6:f4:7c:57:9f:8d:b6:ea:10:39:b1:5f:b4: ee:9d:e8:58:ca:50:9e:ab:43:e2:f1:97:ff:d2:e0: bf:90:0f:e4:ce:0f:91:e8:25:53:4d:35:48:47:01: 98:0c:0a:22:6d:f1:ae:a8:99:d7:5c:89:e3:70:ce: 59:60:91:60:f4:8b:4f:7a:2d:6d:d0:a4:e5:eb:6f: 11:55:3f:e2:ae:bc:45:a5:42:bd:78:af:50:e3:21: 8b:36:3f:1f:76:7a:f0:71:53:0f:2e:b1:d7:44:76: 80:59:86:e5:34:ca:0e:ff:41:49:23:68:6b:c7:08: f5:be:8c:48:94:06:72:64:0a:aa:b3:c6:47:63:5d: 25:3b:b6:02:45:f6:39:88:fa:0b:fe:47:67:c8:5c: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:58:FB:5C:38:EF:FB:65:16:75:B6:73:1F:0C:A1:06:3E:05:81:20 X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:2f:3a:90:66:fc:95:97:25:1c:cf:5d:db:46:7f:f5:1d:3a: 9c:84:46:6e:5e:74:f2:06:ac:df:72:ad:aa:34:e5:f0:5c:74: a1:40:4e:c8:5e:94:04:21:50:ed:95:ed:17:b3:56:31:60:3e: f2:6e:0c:bd:3e:ec:83:1a:15:bf:9d:cf:4c:d5:7b:fe:db:c9: d7:a0:71:6c:65:88:c8:63:66:e1:64:ba:ea:fe:e9:8f:c9:8b: 38:77:69:fc:0e:d1:22:ac:7c:87:30:1b:f7:73:8b:ea:21:ec: c0:58:f6:cc:c6:8e:56:d1:fb:f8:f1:88:31:b1:e0:95:b8:c9: ab:c1:5a:45:ba:8a:04:c0:53:f9:4d:61:79:4d:4e:36:22:a8: 2e:2a:54:36:f6:25:c5:30:a7:b5:62:0b:49:dd:b0:a3:c6:7e: 29:4a:61:29:cc:4d:98:6a:ad:d7:cb:a8:e0:8a:66:cd:94:ab: 4f:32:63:e5:28:a7:f3:d9:81:b4:d4:59:69:0b:f2:2b:98:fe: 7c:0e:3e:89:55:50:12:f7:c7:84:b5:36:71:12:1a:18:c7:c7: c9:53:ab:e1:0b:71:01:03:e6:3a:31:ee:d3:6b:3a:7b:50:ba: 93:b4:df:88:50:20:f8:c4:af:5e:4b:a6:bc:64:90:aa:11:2c: 10:f4:da:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz MjVDNUE2MEIwHhcNMjYwNDE5MDMzMzI4WhcNMjYwNDI2MDMzMzI4WjAYMRYwFAYD VQQDEw02OWU0NGQwOC00ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqixWh7Nyo7cv3IaASNs2fZlp+91pV59y1HOWcfwLTxX86VyECQou9Jtm3QV7 TeK/nzy2UMzY3xUO7JtNeZFZD/7uDd4PrklVogH5LrTZz+3JIH/R9xX/b5M57baH XS8irX8lwsVI/C04fqb0fFefjbbqEDmxX7TunehYylCeq0Pi8Zf/0uC/kA/kzg+R 6CVTTTVIRwGYDAoibfGuqJnXXInjcM5ZYJFg9ItPei1t0KTl628RVT/irrxFpUK9 eK9Q4yGLNj8fdnrwcVMPLrHXRHaAWYblNMoO/0FJI2hrxwj1voxIlAZyZAqqs8ZH Y10lO7YCRfY5iPoL/kdnyFw+6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9Y+1w4 7/tlFnW2cx8MoQY+BYEgMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABy86kGb8lZclHM9d20Z/9R06nIRGbl508gas33KtqjTl8Fx0oUBOyF6UBCFQ 7ZXtF7NWMWA+8m4MvT7sgxoVv53PTNV7/tvJ16BxbGWIyGNm4WS66v7pj8mLOHdp /A7RIqx8hzAb93OL6iHswFj2zMaOVtH7+PGIMbHglbjJq8FaRbqKBMBT+U1heU1O NiKoLipUNvYlxTCntWILSd2wo8Z+KUphKcxNmGqt18uo4IpmzZSrTzJj5Sin89mB tNRZaQvyK5j+fA4+iVVQEvfHhLU2cRIaGMfHyVOr4QtxAQPmOjHu02s6e1C6k7Tf iFAg+MSvXkumvGSQqhEsEPTatQ== -----END CERTIFICATE-----Generated at Sun Apr 19 09:33:15 2026 by rpki-client