$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: KTPKk+5rmQLsg9pfAQOnzl69iuTpEDpmrmzBdMWcl5o= Subject key identifier: 5A:83:D9:6C:23:19:3A:F7:50:09:92:E1:9C:BB:09:F6:5E:5D:24:64 Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 052A Signing time: Fri 17 Apr 2026 00:00:44 +0000 Manifest this update: Fri 17 Apr 2026 00:00:43 +0000 Manifest next update: Fri 24 Apr 2026 00:00:43 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: JCxucTE+qa3cQUzDMiHnhE2Eq/97hhWEp0yGir7CwZg=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: HlHozKQbiUgJEzpu3Hjn82lhGmduZGu23FAaPzM4W3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Apr 17 00:00:43 2026 GMT Not After : Apr 24 00:00:43 2026 GMT Subject: CN=69e1782c-d0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:e9:93:56:9e:9b:57:85:24:32:b0:8d:d7: c5:39:53:23:b3:66:f0:9e:44:c8:e9:7c:20:37:ed: 3a:0e:07:6a:33:e8:97:fc:75:6b:c7:df:9c:69:ef: 73:5e:82:ab:ac:09:eb:47:1a:01:52:2c:ec:c9:f2: 7a:02:12:9b:71:76:c4:85:74:1e:13:09:3d:a9:25: a8:d7:16:ae:fd:e5:1a:9a:7c:59:9f:61:11:eb:87: 53:95:a0:cc:a2:4b:8e:76:a3:4f:32:66:93:ce:0b: 76:a4:33:6c:2f:d4:8e:19:a9:e8:cf:ed:47:5b:95: dd:27:c0:86:0a:fe:1b:ca:f5:b6:35:06:58:98:ae: c8:72:3f:c1:0a:2a:57:fe:05:2d:25:30:a8:18:4d: a6:29:0b:79:20:36:ea:ca:ef:e8:e0:53:8f:09:b6: 31:fe:34:eb:21:a6:32:fa:79:34:91:7a:99:ed:93: bb:1a:16:e0:a6:ec:33:fe:c3:26:d5:24:a6:ad:6d: 03:2c:17:e3:1d:6a:9d:5f:fc:fb:e1:26:84:76:bf: e9:71:ba:74:ef:ed:b0:82:14:b1:94:6a:58:b9:40: fe:16:af:3b:ba:78:d9:22:6f:f0:66:bb:91:01:44: 6b:59:50:38:95:b3:b2:0b:41:07:ae:eb:37:74:9a: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:83:D9:6C:23:19:3A:F7:50:09:92:E1:9C:BB:09:F6:5E:5D:24:64 X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:73:55:3f:9c:5d:9c:33:91:cb:fd:4a:0b:33:43:b9:4f:ce: 3b:bc:f1:59:71:10:6b:46:33:ce:96:4e:82:be:df:39:f2:8b: b6:aa:6e:bb:55:c1:63:2b:d4:90:ea:44:e9:7e:71:c6:e7:a1: 95:0b:0c:fd:b3:fa:2f:22:ce:17:9c:6b:9f:58:12:25:3a:2c: 7b:f7:ed:7d:15:b4:74:31:6b:0a:a7:a9:08:0f:58:d6:6a:b2: 4b:86:0e:ac:6e:2f:68:b4:d3:5e:15:52:5c:a8:91:e5:ec:0a: bd:40:8c:dc:5e:03:cb:d3:9d:02:8e:96:27:1b:a8:5d:3f:a7: 26:de:76:5d:79:19:d9:d8:45:c1:1e:35:83:74:4f:96:ee:b6: 8b:77:0c:0f:b3:58:f5:9c:c7:b3:62:87:bc:d0:0f:56:95:91: 76:38:a4:33:b4:31:24:92:d7:11:be:34:f6:b5:40:09:b0:19: 19:31:2c:95:ee:05:c6:e8:65:b6:07:ef:51:3c:e9:87:20:d7: c3:73:0b:d2:cd:1c:dc:27:8a:4d:c5:61:5c:0a:15:50:f8:00: 8f:67:14:f9:a3:62:9a:3d:e2:5c:6b:14:94:74:66:ff:d2:ce: 57:23:55:23:91:eb:9d:8c:cb:63:9b:c7:d2:93:02:22:1c:38: e6:db:bc:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDYzQjcwMUI3MjcwNkYzMTkwQkVGOEJGQkZBMzRGRkEz M0Y0RjZCRDYwHhcNMjYwNDE3MDAwMDQzWhcNMjYwNDI0MDAwMDQzWjAYMRYwFAYD VQQDEw02OWUxNzgyYy1kMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWfpk1aem1eFJDKwjdfFOVMjs2bwnkTI6XwgN+06DgdqM+iX/HVrx9+cae9z XoKrrAnrRxoBUizsyfJ6AhKbcXbEhXQeEwk9qSWo1xau/eUamnxZn2ER64dTlaDM okuOdqNPMmaTzgt2pDNsL9SOGanoz+1HW5XdJ8CGCv4byvW2NQZYmK7Icj/BCipX /gUtJTCoGE2mKQt5IDbqyu/o4FOPCbYx/jTrIaYy+nk0kXqZ7ZO7Ghbgpuwz/sMm 1SSmrW0DLBfjHWqdX/z74SaEdr/pcbp07+2wghSxlGpYuUD+Fq87unjZIm/wZruR AURrWVA4lbOyC0EHrus3dJqJ5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqD2Wwj GTr3UAmS4Zy7CfZeXSRkMB8GA1UdIwQYMBaAFGO3AbcnBvMZC++L+/o0/6M/T2vW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9ZN2NCdHljRzh4a0w3NHY3LWpUX296OVBh OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9ZN2NCdHljRzh4 a0w3NHY3LWpUX296OVBhOVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHNVP5xdnDORy/1KCzNDuU/OO7zxWXEQa0YzzpZOgr7fOfKLtqpuu1XBYyvU kOpE6X5xxuehlQsM/bP6LyLOF5xrn1gSJTose/ftfRW0dDFrCqepCA9Y1mqyS4YO rG4vaLTTXhVSXKiR5ewKvUCM3F4Dy9OdAo6WJxuoXT+nJt52XXkZ2dhFwR41g3RP lu62i3cMD7NY9ZzHs2KHvNAPVpWRdjikM7QxJJLXEb409rVACbAZGTEsle4Fxuhl tgfvUTzphyDXw3ML0s0c3CeKTcVhXAoVUPgAj2cU+aNimj3iXGsUlHRm/9LOVyNV I5HrnYzLY5vH0pMCIhw45tu8AA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:38:44 2026 by rpki-client