$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft File: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json) Hash identifier: FKEvwHTA8y04oDA2vtiMxWDULis602EWjdcAxW6tVks= Subject key identifier: CF:64:68:16:FC:1D:B1:85:16:7D:20:5E:F4:6D:91:1E:25:1E:F1:D6 Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51 Certificate issuer: /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft Manifest number: 3C Signing time: Fri 17 Apr 2026 08:13:36 +0000 Manifest this update: Fri 17 Apr 2026 08:13:36 +0000 Manifest next update: Fri 24 Apr 2026 08:13:36 +0000 Files and hashes: 1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: 5WLQv1yGuhGQzFG8/NJ19JvLtfdOSnK6Nq4z07P4RpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451 Validity Not Before: Apr 17 08:13:36 2026 GMT Not After : Apr 24 08:13:36 2026 GMT Subject: CN=69e1ebb0-14ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:ad:97:31:46:b6:d6:21:ea:0a:e8:12:cb: bb:e6:8c:70:f1:f0:b0:f6:0d:d1:12:3b:82:32:8c: 9b:1e:64:6d:66:39:00:bf:82:7e:41:64:c6:bd:11: 16:f2:c1:6c:12:11:23:b7:7c:18:9b:fd:d3:37:60: 81:85:5b:51:b3:da:8a:e6:47:c3:9e:d3:0d:23:19: e2:1c:8c:cd:e7:b4:51:52:7a:d9:67:c8:8a:d5:1b: 85:c7:36:d2:3c:f1:67:01:a1:2c:f5:68:f4:54:80: 73:8e:78:8a:fc:48:ba:ce:17:90:b8:73:4b:53:c4: 48:f6:2e:65:84:90:f6:06:a3:ac:71:3b:8a:05:7f: ef:2e:2d:f4:65:73:26:02:54:9a:34:b1:39:24:02: 9e:28:74:9b:9c:20:48:53:d5:a1:a1:3e:5a:7e:c1: c1:c9:36:4d:bd:9b:33:0e:82:1d:e7:ea:e5:22:a3: 29:eb:b2:1e:13:a6:f7:9a:59:0a:f5:49:31:d1:9f: 5d:a5:f1:a7:47:ba:4e:44:73:b4:0d:47:f6:a0:61: 2e:c4:04:c0:2a:45:b6:3a:41:9c:5e:fc:8d:20:2a: cb:84:3c:bd:41:2f:25:6a:0e:30:4d:b3:a0:03:60: 3d:86:e5:4e:f9:7a:3b:3a:ff:ee:22:0e:e6:2c:3d: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:64:68:16:FC:1D:B1:85:16:7D:20:5E:F4:6D:91:1E:25:1E:F1:D6 X509v3 Authority Key Identifier: keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:aa:60:54:8f:6c:f3:03:19:ca:57:ea:9d:e0:53:fe:eb: 42:5f:26:7e:d0:52:9a:e5:2c:d7:36:35:ca:83:77:e7:5e:d7: de:a8:29:e4:a0:7c:78:b1:71:68:c0:f3:01:5c:a2:e8:c9:e1: d6:af:a8:4b:87:46:35:f0:6d:1b:28:f1:03:94:ed:ea:0d:03: 78:e0:ce:6f:5d:a3:42:fb:aa:d6:8b:c0:78:6d:59:13:55:ea: 1c:5b:5e:ee:3a:c9:e9:4e:c2:5e:09:7f:11:93:c1:85:23:91: 85:2b:e8:57:92:80:01:01:ac:ae:ed:d7:9f:b9:11:08:38:6a: 98:63:f5:09:98:ed:78:1c:49:02:b2:76:44:87:7e:a0:53:4d: 55:b8:cf:b6:78:2f:3f:ed:c1:21:51:19:c1:8f:67:88:24:7e: 60:03:bb:49:08:49:72:71:58:f2:3a:83:e7:2f:a9:32:b2:53: 15:ea:54:8b:8d:fb:15:8f:b4:c7:dc:9a:19:cf:78:7a:9e:9c: bf:8e:fd:85:bd:d2:73:3b:0a:c7:00:fe:7a:a5:cb:b7:4f:36: 27:38:cd:e2:11:dc:32:85:e7:78:42:23:ac:0e:e5:10:23:13: ac:80:e9:9a:01:b7:9b:e7:ba:d4:6b:79:21:ff:f9:f9:ab:dd: f9:31:e4:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDNCMDExMC8GA1UEBRMoNDRFQ0FGM0NGMzBEOTIwNDQxN0U3NUJCMzY1N0UyRjcy MTAxQTQ1MTAeFw0yNjA0MTcwODEzMzZaFw0yNjA0MjQwODEzMzZaMBgxFjAUBgNV BAMTDTY5ZTFlYmIwLTE0YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUYK2XMUa21iHqCugSy7vmjHDx8LD2DdESO4IyjJseZG1mOQC/gn5BZMa9ERby wWwSESO3fBib/dM3YIGFW1Gz2ormR8Oe0w0jGeIcjM3ntFFSetlnyIrVG4XHNtI8 8WcBoSz1aPRUgHOOeIr8SLrOF5C4c0tTxEj2LmWEkPYGo6xxO4oFf+8uLfRlcyYC VJo0sTkkAp4odJucIEhT1aGhPlp+wcHJNk29mzMOgh3n6uUioynrsh4TpveaWQr1 STHRn12l8adHuk5Ec7QNR/agYS7EBMAqRbY6QZxe/I0gKsuEPL1BLyVqDjBNs6AD YD2G5U75ejs6/+4iDuYsPdWPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz2RoFvwd sYUWfSBe9G2RHiUe8dYwHwYDVR0jBBgwFoAUROyvPPMNkgRBfnW7Nlfi9yEBpFEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREM0IwL0Y3OUQxNkE2RTQ4 QjExRjA5MkJCQUY2RTQ0NkY1NkJDL1JPeXZQUE1Oa2dSQmZuVzdObGZpOXlFQnBG RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUk95dlBQTU5rZ1JCZm5XN05sZmk5eUVCcEZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE M0IwL0Y3OUQxNkE2RTQ4QjExRjA5MkJCQUY2RTQ0NkY1NkJDL1JPeXZQUE1Oa2dS QmZuVzdObGZpOXlFQnBGRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqo6pgVI9s8wMZylfqneBT/utCXyZ+0FKa5SzXNjXKg3fnXtfeqCnkoHx4sXFo wPMBXKLoyeHWr6hLh0Y18G0bKPEDlO3qDQN44M5vXaNC+6rWi8B4bVkTVeocW17u OsnpTsJeCX8Rk8GFI5GFK+hXkoABAayu7defuREIOGqYY/UJmO14HEkCsnZEh36g U01VuM+2eC8/7cEhURnBj2eIJH5gA7tJCElycVjyOoPnL6kyslMV6lSLjfsVj7TH 3JoZz3h6npy/jv2FvdJzOwrHAP56pcu3TzYnOM3iEdwyhed4QiOsDuUQIxOsgOma Abeb57rUa3kh//n5q935MeSU -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:11 2026 by rpki-client