$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: +VWndG1z03slHWnK395qzwviI/zz64sdUdWmgzQLeV0= Subject key identifier: A0:BA:A4:89:B8:7C:1B:E8:30:F9:00:60:55:9A:62:00:B4:6D:1D:CE Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: F4 Signing time: Fri 17 Apr 2026 06:03:48 +0000 Manifest this update: Fri 17 Apr 2026 06:03:48 +0000 Manifest next update: Fri 24 Apr 2026 06:03:48 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: 8rL+5grLjZjyiRI/7QnTu4xDyNUA/Uw0MMG1YYV6aZk=) 2: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=) 3: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=) 4: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Apr 17 06:03:48 2026 GMT Not After : Apr 24 06:03:48 2026 GMT Subject: CN=69e1cd44-f55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:36:71:dd:5a:48:2b:55:9c:a4:f3:c1:0f: 51:f2:d8:3b:a7:cd:d5:39:95:51:c4:f1:88:ba:fd: aa:8f:81:e5:e9:04:15:42:ba:b6:a0:aa:71:99:2a: b1:68:90:c3:cf:43:51:bd:1f:1f:df:43:17:e2:09: 50:77:1d:c6:31:fc:e7:4a:1c:da:77:f3:b8:65:f4: f2:58:74:fd:a2:7f:ff:bf:8b:30:c2:31:f6:ed:aa: df:4d:ba:55:97:15:43:c1:4f:32:61:26:34:fa:f3: 04:54:0e:12:2f:ed:56:c7:f1:38:0a:be:6a:81:68: 7a:79:d2:c9:be:a4:f5:e6:59:04:99:be:8e:1d:95: 6c:2d:30:aa:4d:38:6a:dc:17:d0:bd:e8:42:fc:ac: 4d:24:a0:71:b2:07:91:8c:5e:b8:0f:93:10:c2:76: 7a:5e:78:9b:9c:5b:59:7e:8b:b2:02:65:fc:38:62: c2:1a:72:12:36:3b:0c:14:36:fd:41:b1:51:d9:80: 18:d7:ea:5e:9a:19:ba:ff:52:1f:27:18:e8:de:1d: 9e:c1:e1:e3:29:97:a6:66:d6:d2:16:9d:3a:7c:61: 12:49:94:05:1b:ea:d0:a1:16:e5:a5:57:df:27:b6: bf:0f:c1:d3:ce:8e:60:e1:fc:12:52:f3:26:20:fb: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:A4:89:B8:7C:1B:E8:30:F9:00:60:55:9A:62:00:B4:6D:1D:CE X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:cb:7f:03:f3:9c:fd:9b:9c:c8:47:c8:44:a8:71:2c:42: 80:fa:ce:a6:78:d1:46:b8:e8:5e:5a:ea:98:ee:26:35:28:87: 78:1e:50:af:36:f8:be:ac:7f:1d:66:16:18:e7:e9:a1:df:1b: a5:bc:f7:2f:c0:8a:b5:7c:05:bc:8c:d2:31:5c:ff:22:3a:8b: 6f:a5:90:6c:6c:c0:f3:e7:e8:3d:2a:2c:fa:af:5c:46:ea:4c: 6a:9a:de:12:6f:53:13:cc:92:f0:cd:63:5d:5b:f8:0e:23:2a: 36:fe:cb:1c:67:02:b2:f9:4a:5e:ad:65:97:48:a4:7e:f9:84: e5:3c:00:e7:3b:48:4c:03:c7:42:6e:31:44:2f:20:1e:5b:65: 20:b0:5e:86:79:dd:7c:c5:51:7c:de:d0:44:40:dc:de:5b:25: b5:97:43:d6:9b:da:7b:df:73:19:2b:e2:f7:3d:8f:9b:ba:4a: 8a:c4:a0:7e:38:7a:86:26:2b:3b:ca:9f:53:fa:f0:84:74:71: 6a:c8:49:be:f6:4d:5f:39:63:cf:b3:7f:2b:69:87:5f:a0:6b: f2:7b:86:30:d3:b6:c4:c4:99:83:9d:3a:5a:55:ec:38:ef:19: 26:a7:e8:52:c3:f6:81:ce:6b:2b:fd:7a:6d:cd:f1:d5:1e:2d: 40:f2:27:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjYwNDE3MDYwMzQ4WhcNMjYwNDI0MDYwMzQ4WjAYMRYwFAYD VQQDEw02OWUxY2Q0NC1mNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhQ2cd1aSCtVnKTzwQ9R8tg7p83VOZVRxPGIuv2qj4Hl6QQVQrq2oKpxmSqx aJDDz0NRvR8f30MX4glQdx3GMfznShzad/O4ZfTyWHT9on//v4swwjH27arfTbpV lxVDwU8yYSY0+vMEVA4SL+1Wx/E4Cr5qgWh6edLJvqT15lkEmb6OHZVsLTCqTThq 3BfQvehC/KxNJKBxsgeRjF64D5MQwnZ6XnibnFtZfouyAmX8OGLCGnISNjsMFDb9 QbFR2YAY1+pemhm6/1IfJxjo3h2eweHjKZemZtbSFp06fGESSZQFG+rQoRblpVff J7a/D8HTzo5g4fwSUvMmIPu0dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKC6pIm4 fBvoMPkAYFWaYgC0bR3OMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0fLfwPznP2bnMhHyESocSxCgPrOpnjRRrjoXlrqmO4mNSiHeB5Qrzb4vqx/ HWYWGOfpod8bpbz3L8CKtXwFvIzSMVz/IjqLb6WQbGzA8+foPSos+q9cRupMapre Em9TE8yS8M1jXVv4DiMqNv7LHGcCsvlKXq1ll0ikfvmE5TwA5ztITAPHQm4xRC8g HltlILBehnndfMVRfN7QREDc3lsltZdD1pvae99zGSvi9z2Pm7pKisSgfjh6hiYr O8qfU/rwhHRxashJvvZNXzljz7N/K2mHX6Br8nuGMNO2xMSZg506WlXsOO8ZJqfo UsP2gc5rK/16bc3x1R4tQPInTg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:50 2026 by rpki-client