$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: M2g8WvwIN0y2iZbDQIMuXD//CjG3LUBBl90uig3ANgQ= Subject key identifier: 44:96:F1:64:90:48:A3:03:8A:6B:C7:A6:6F:7A:F1:BE:C4:55:66:D2 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 0553 Signing time: Thu 16 Apr 2026 23:23:02 +0000 Manifest this update: Thu 16 Apr 2026 23:23:02 +0000 Manifest next update: Thu 23 Apr 2026 23:23:02 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: YLZ4sw2bDD3pRYhHycj1iEQPHtLgdSWYz+gEI07MYxs=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Apr 16 23:23:02 2026 GMT Not After : Apr 23 23:23:02 2026 GMT Subject: CN=69e16f56-a447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:da:82:80:3e:46:dc:c7:b7:7a:ff:be:35: 96:f8:1b:7a:d6:2e:c6:fb:2c:9f:83:3d:52:21:4c: e4:09:44:07:c6:7d:77:b7:1c:f2:9e:58:23:5d:10: 81:11:b3:4c:6e:b4:9d:bd:32:66:e3:e2:c2:e7:ab: 7e:de:59:dc:99:2a:05:14:be:9f:8e:91:df:1e:c3: f9:8b:19:40:d2:d3:16:4a:13:06:60:be:c6:17:fb: 38:5e:fb:13:2c:d4:5a:0f:73:05:67:ac:41:59:28: 7d:df:94:88:d2:a2:ce:66:26:1a:c3:49:ca:74:50: d5:25:f8:e5:fd:56:4f:c5:5b:bf:2c:81:e2:da:d7: 6d:b6:e1:26:d0:99:ea:af:2f:21:21:d5:f1:ab:e8: fe:8f:3f:75:88:bd:77:ac:a8:25:00:82:e9:3f:77: e3:8c:31:ad:a6:1c:18:6c:d5:09:49:41:24:30:57: ea:76:ec:0f:8e:e5:f5:db:e2:92:43:c4:c3:99:d1: e0:19:6a:ee:00:62:73:56:66:ea:3c:13:1b:70:67: b2:63:d8:2d:d8:37:e7:83:7a:af:db:5c:e5:fd:9e: ac:49:b7:22:2e:c5:40:eb:90:fa:8d:54:9e:22:1b: 45:fe:d7:42:85:57:c1:ec:6a:45:44:2a:43:45:36: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:96:F1:64:90:48:A3:03:8A:6B:C7:A6:6F:7A:F1:BE:C4:55:66:D2 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f1:d4:25:83:c9:58:03:dc:eb:a4:1b:24:cc:36:1a:4b:23: ab:98:c0:d1:c8:da:cd:15:7f:80:44:ca:ad:c3:43:b1:bc:8f: a8:01:ba:c6:fd:04:27:b0:a2:03:2b:15:a2:4d:97:a4:f3:10: d8:6b:b2:69:a5:16:c3:94:bc:5c:09:6f:53:1b:09:b4:ae:94: e4:0d:5b:a6:87:9d:eb:e4:ec:93:e1:a7:b6:13:fa:82:5d:32: 07:1e:b8:4e:18:0f:dc:3b:21:2b:83:aa:28:c3:89:83:d0:b7: cf:d1:7b:70:8d:44:22:a0:c3:cb:7d:91:df:f0:f4:83:8f:a4: 0a:b3:df:ab:86:c0:d8:14:b3:d5:c3:f8:07:79:15:a2:a8:c7: d2:ac:48:1e:9e:27:c2:66:5e:f1:2a:ef:11:66:43:ed:8f:28: 3e:a7:69:a8:3c:c6:c1:63:b2:e8:79:0c:45:29:36:87:7b:1e: 2a:70:9e:b3:41:3c:13:48:68:88:25:f5:a5:a6:cd:bc:44:80: b4:c7:89:1a:81:89:b9:89:13:8a:da:3f:1d:87:53:01:25:97: c0:19:31:25:2d:fa:53:ca:83:c3:c4:52:e2:c5:54:1c:9d:f0: 86:7e:41:14:c2:59:da:51:a8:8f:89:5f:80:b3:dc:a1:70:8e: 9e:f4:e6:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwNDE2MjMyMzAyWhcNMjYwNDIzMjMyMzAyWjAYMRYwFAYD VQQDEw02OWUxNmY1Ni1hNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9nagoA+RtzHt3r/vjWW+Bt61i7G+yyfgz1SIUzkCUQHxn13txzynlgjXRCB EbNMbrSdvTJm4+LC56t+3lncmSoFFL6fjpHfHsP5ixlA0tMWShMGYL7GF/s4XvsT LNRaD3MFZ6xBWSh935SI0qLOZiYaw0nKdFDVJfjl/VZPxVu/LIHi2tdttuEm0Jnq ry8hIdXxq+j+jz91iL13rKglAILpP3fjjDGtphwYbNUJSUEkMFfqduwPjuX12+KS Q8TDmdHgGWruAGJzVmbqPBMbcGeyY9gt2Dfng3qv21zl/Z6sSbciLsVA65D6jVSe IhtF/tdChVfB7GpFRCpDRTZHWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESW8WSQ SKMDimvHpm968b7EVWbSMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATPHUJYPJWAPc66QbJMw2Gksjq5jA0cjazRV/gETKrcNDsbyPqAG6xv0EJ7Ci AysVok2XpPMQ2GuyaaUWw5S8XAlvUxsJtK6U5A1bpoed6+Tsk+GnthP6gl0yBx64 ThgP3DshK4OqKMOJg9C3z9F7cI1EIqDDy32R3/D0g4+kCrPfq4bA2BSz1cP4B3kV oqjH0qxIHp4nwmZe8SrvEWZD7Y8oPqdpqDzGwWOy6HkMRSk2h3seKnCes0E8E0ho iCX1pabNvESAtMeJGoGJuYkTito/HYdTASWXwBkxJS36U8qDw8RS4sVUHJ3whn5B FMJZ2lGoj4lfgLPcoXCOnvTmcg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:05:53 2026 by rpki-client