$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: QkUXgWV5mCduLsa7ODJenM5X6o/hmas5YcIcCAHJh8c= Subject key identifier: CE:02:C0:FD:39:62:9B:FA:BE:D6:A4:55:0B:A5:ED:23:E3:B1:5F:A9 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3533 Signing time: Thu 16 Apr 2026 14:55:40 +0000 Manifest this update: Thu 16 Apr 2026 14:55:39 +0000 Manifest next update: Thu 23 Apr 2026 14:55:39 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: wUAvrwLQ4vqIW7bdEm3vfPI0rm969dXCmn/v8qQA1xs=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Apr 16 14:55:39 2026 GMT Not After : Apr 23 14:55:39 2026 GMT Subject: CN=69e0f86b-e02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:07:5c:84:b9:72:6f:e2:2c:00:c2:a3:47: e3:11:08:f0:7c:a8:25:61:43:09:15:bf:e9:93:45: 42:b1:eb:87:a1:0b:40:64:fb:d0:72:74:5d:93:0a: 84:11:0a:26:59:2a:41:ed:04:93:ac:82:19:21:e9: 8e:f9:0b:91:fb:5d:1d:f4:d4:10:52:70:70:56:cc: e6:84:04:21:f4:18:ae:7c:ea:df:aa:df:8f:ec:1d: 06:c6:34:fd:77:2c:f2:3c:d1:34:ee:be:7f:dc:29: e6:2f:61:eb:f9:fe:71:39:f0:d7:5f:46:5e:42:19: d0:7e:f0:64:8e:c1:2b:12:72:dc:02:1f:99:16:df: c3:f5:91:00:8a:f7:76:36:8e:39:4c:57:98:e3:49: 99:49:98:9d:3d:ec:a9:b0:ed:fb:66:13:20:61:2c: ef:47:35:4c:aa:02:b3:b9:42:19:db:ee:c1:19:68: ea:d6:fb:86:1a:3e:65:67:c9:37:45:65:bd:67:1b: 91:e0:10:56:e9:7d:ca:bd:c2:bf:1c:ef:ba:e9:ae: ed:74:61:4e:e8:87:50:53:5e:bd:84:5e:ea:19:cb: 66:b4:2a:13:01:9e:ce:c7:54:aa:29:c1:1f:da:b8: 23:22:21:4f:99:ef:9e:cd:2a:77:a4:12:bb:23:85: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:02:C0:FD:39:62:9B:FA:BE:D6:A4:55:0B:A5:ED:23:E3:B1:5F:A9 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:9a:f4:fc:62:8d:6d:92:54:f7:93:23:4c:3d:f5:2b:56:e3: b8:d1:13:09:92:47:9f:9e:83:3c:4f:91:89:5d:ac:62:d1:93: d7:3e:64:0c:37:f2:62:46:0b:84:5e:ec:55:26:41:78:43:e8: 9f:d0:b8:9d:bf:4c:8b:26:ca:50:05:18:f9:84:3f:36:87:5d: 7e:7b:aa:3a:53:23:65:d5:40:e2:ab:76:88:7b:5e:6a:11:12: 33:83:df:77:bd:3e:b6:b6:20:54:f9:90:e1:11:39:de:c1:52: fc:a1:63:9c:fa:83:dd:3c:03:5e:65:78:49:72:09:85:d5:44: 05:04:92:37:5b:f2:c9:29:3d:63:38:35:b3:18:20:5c:03:6c: a3:94:8a:11:ca:ba:fe:f1:8b:e1:35:ce:6d:34:43:66:52:54: 77:3c:6e:82:1e:7a:d7:26:57:5a:72:75:8c:98:30:8d:8c:91: 5a:af:f6:d7:0a:6b:0c:4f:4c:16:76:c5:80:64:6c:92:c3:3f: 5c:7d:09:a8:a9:fd:9a:83:1e:b1:a5:dc:0c:d0:07:5c:ab:5a: 6a:15:a1:4c:07:ea:91:45:49:78:6c:b2:ae:46:9c:80:1f:af: 0f:c4:a4:6c:72:b6:5c:08:d1:23:0c:8f:cc:7b:2b:02:43:74: 4c:f7:78:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYwNDE2MTQ1NTM5WhcNMjYwNDIzMTQ1NTM5WjAYMRYwFAYD VQQDEw02OWUwZjg2Yi1lMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhYHXIS5cm/iLADCo0fjEQjwfKglYUMJFb/pk0VCseuHoQtAZPvQcnRdkwqE EQomWSpB7QSTrIIZIemO+QuR+10d9NQQUnBwVszmhAQh9BiufOrfqt+P7B0GxjT9 dyzyPNE07r5/3CnmL2Hr+f5xOfDXX0ZeQhnQfvBkjsErEnLcAh+ZFt/D9ZEAivd2 No45TFeY40mZSZidPeypsO37ZhMgYSzvRzVMqgKzuUIZ2+7BGWjq1vuGGj5lZ8k3 RWW9ZxuR4BBW6X3KvcK/HO+66a7tdGFO6IdQU169hF7qGctmtCoTAZ7Ox1SqKcEf 2rgjIiFPme+ezSp3pBK7I4Us8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4CwP05 Ypv6vtakVQul7SPjsV+pMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0pr0/GKNbZJU95MjTD31K1bjuNETCZJHn56DPE+RiV2sYtGT1z5kDDfyYkYL hF7sVSZBeEPon9C4nb9MiybKUAUY+YQ/NoddfnuqOlMjZdVA4qt2iHteahESM4Pf d70+trYgVPmQ4RE53sFS/KFjnPqD3TwDXmV4SXIJhdVEBQSSN1vyySk9Yzg1sxgg XANso5SKEcq6/vGL4TXObTRDZlJUdzxugh561yZXWnJ1jJgwjYyRWq/21wprDE9M FnbFgGRsksM/XH0JqKn9moMesaXcDNAHXKtaahWhTAfqkUVJeGyyrkacgB+vD8Sk bHK2XAjRIwyPzHsrAkN0TPd44Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:55 2026 by rpki-client