$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: BMpHQ9BhYOGo4cpEbNHDJiLR4+T6gtyO/y8szjXzGJc= Subject key identifier: CC:C0:0A:CE:9F:67:03:4A:61:F1:DF:E7:AE:DC:34:27:A8:F1:E9:D2 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D52 Signing time: Thu 16 Apr 2026 17:57:00 +0000 Manifest this update: Thu 16 Apr 2026 17:56:59 +0000 Manifest next update: Thu 23 Apr 2026 17:56:59 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: kOPXhMs3E+5XIMN0nQHeKOFcysd8iI9ka++Kc4FEsuk=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: C7mWYt8BwOOq1nQu5Tay/Ds+1SGx2J5ybDPHnjoqgfU=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: 0aav2SojadrORDyi36eFDPixyT4HpgYJRilnRTO8Vew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Apr 16 17:56:59 2026 GMT Not After : Apr 23 17:56:59 2026 GMT Subject: CN=69e122ec-6e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:d6:b7:cd:38:8b:ce:51:a2:73:d0:e2:dd: a0:94:21:77:8a:58:00:6f:58:5a:44:ff:b3:e7:21: 46:24:a6:f8:64:44:64:fb:e3:04:bf:c1:b7:c1:d7: 44:aa:ce:d0:89:5e:51:64:b5:67:bc:96:9e:ff:4b: 0c:d9:c1:58:01:6f:fa:42:f9:db:0d:c3:f1:2a:62: dc:02:2b:1c:da:a4:72:61:4e:03:6f:0f:c5:b6:11: d0:ee:bc:ea:3d:fb:23:c7:df:9d:8c:57:14:f6:29: bc:0c:b2:35:0c:a0:da:b9:76:de:82:60:29:c4:99: 52:67:9d:e9:59:03:19:dc:a1:a7:e1:6b:69:21:16: a8:64:30:dd:fc:15:be:dd:13:60:30:5f:d4:3c:0d: 27:d6:0c:4a:44:15:79:4a:1e:e4:b1:c0:91:27:ea: 50:4b:19:7e:4b:cf:c3:ce:5f:21:27:ae:a1:a2:67: 6b:85:06:44:8e:b1:43:9f:12:33:ee:4f:41:c3:96: 87:b7:67:d8:7b:2c:c4:ec:60:8b:9c:b1:d9:27:69: 92:83:1c:a5:8f:18:d1:4c:78:f7:49:fc:61:6b:ae: bd:dc:00:23:07:cd:59:ff:ed:cc:8e:fc:3e:a8:1b: b6:3d:df:a3:27:dc:80:38:e1:1f:b9:20:38:e2:78: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C0:0A:CE:9F:67:03:4A:61:F1:DF:E7:AE:DC:34:27:A8:F1:E9:D2 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5e:54:e6:bb:0f:62:c6:f1:ae:c4:17:c1:9a:f0:c6:83:4e: 66:ce:d9:62:5a:b2:95:48:6f:a8:3d:1e:0a:88:ba:32:0a:ae: 21:0f:f2:de:8f:ac:79:9d:4a:1d:bc:42:d8:9e:67:0c:a0:5c: 60:3f:34:31:7a:bf:66:35:01:9c:3d:7f:72:d4:2e:86:15:2a: fb:1a:8c:87:05:65:87:1c:77:d5:25:b8:ef:a8:34:8e:98:64: 90:75:00:16:5b:3a:48:ac:5b:f9:a7:ca:72:89:d1:1e:49:35: 9d:c4:04:1d:8a:0d:0e:b0:16:c1:d0:8b:bb:d4:25:55:2e:ac: ae:93:38:88:af:7b:29:39:2d:fa:9f:7f:6b:5c:cf:30:8d:f0: 5e:99:cc:d7:3e:32:cd:82:11:76:87:ff:e0:d0:7f:5f:7e:a4: be:43:a0:31:4a:09:eb:76:14:6f:bb:84:e5:a4:53:0a:16:91: 92:8b:40:6b:14:b9:4c:5b:0b:83:65:17:e2:31:8e:47:a3:5f: 25:2f:96:29:d4:36:e7:19:61:0f:16:0a:d1:56:5a:df:4b:9f: 23:d8:4f:f5:32:e7:13:92:ae:64:65:71:5b:c9:cd:a7:ff:25: 84:4b:21:26:a2:3d:c5:98:24:bb:69:7b:90:46:ea:16:63:09: 32:d4:f5:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjYwNDE2MTc1NjU5WhcNMjYwNDIzMTc1NjU5WjAYMRYwFAYD VQQDEw02OWUxMjJlYy02ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwfWt804i85RonPQ4t2glCF3ilgAb1haRP+z5yFGJKb4ZERk++MEv8G3wddE qs7QiV5RZLVnvJae/0sM2cFYAW/6QvnbDcPxKmLcAisc2qRyYU4Dbw/FthHQ7rzq Pfsjx9+djFcU9im8DLI1DKDauXbegmApxJlSZ53pWQMZ3KGn4WtpIRaoZDDd/BW+ 3RNgMF/UPA0n1gxKRBV5Sh7kscCRJ+pQSxl+S8/Dzl8hJ66homdrhQZEjrFDnxIz 7k9Bw5aHt2fYeyzE7GCLnLHZJ2mSgxyljxjRTHj3Sfxha6693AAjB81Z/+3Mjvw+ qBu2Pd+jJ9yAOOEfuSA44niLBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzACs6f ZwNKYfHf567cNCeo8enSMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMl5U5rsPYsbxrsQXwZrwxoNOZs7ZYlqylUhvqD0eCoi6MgquIQ/y3o+seZ1K HbxC2J5nDKBcYD80MXq/ZjUBnD1/ctQuhhUq+xqMhwVlhxx31SW476g0jphkkHUA Fls6SKxb+afKconRHkk1ncQEHYoNDrAWwdCLu9QlVS6srpM4iK97KTkt+p9/a1zP MI3wXpnM1z4yzYIRdof/4NB/X36kvkOgMUoJ63YUb7uE5aRTChaRkotAaxS5TFsL g2UX4jGOR6NfJS+WKdQ25xlhDxYK0VZa30ufI9hP9TLnE5KuZGVxW8nNp/8lhEsh JqI9xZgku2l7kEbqFmMJMtT18Q== -----END CERTIFICATE-----Generated at Fri Apr 17 04:12:10 2026 by rpki-client