$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft File: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json) Hash identifier: /V05E5SNuh9xZuAMzwk9phVGzBodslMRbx9QAnUwB0s= Subject key identifier: 4D:63:73:CD:CB:EB:1A:92:FA:EC:0D:02:37:5E:9C:38:28:5A:F4:EA Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 Certificate issuer: /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft Manifest number: 0119 Signing time: Fri 17 Apr 2026 05:32:05 +0000 Manifest this update: Fri 17 Apr 2026 05:32:04 +0000 Manifest next update: Fri 24 Apr 2026 05:32:04 +0000 Files and hashes: 1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: UOQJef+gat6d8J+rGPI7zSBS7Hsa0u4c4c2dZmQKPno=) 2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: OMf3bH3yxhVkJLXPWPpo+JeDue+AzlqHbjI50Pp8r90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Validity Not Before: Apr 17 05:32:04 2026 GMT Not After : Apr 24 05:32:04 2026 GMT Subject: CN=69e1c5d4-d843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:83:99:5b:f5:b1:54:cc:e6:82:12:bf:32: ad:90:e7:8f:14:ac:65:7a:3b:36:b7:da:1d:e9:42: a9:2c:4b:b9:28:fe:71:19:13:dc:d3:03:8a:aa:fd: 70:38:90:57:d0:e5:71:d1:63:12:32:bb:9d:c4:9f: 6b:f9:2c:47:66:5c:88:14:0b:02:82:46:44:06:27: 6e:9c:d6:67:e9:ee:f4:16:82:de:87:62:7c:53:d1: bd:ec:9e:16:27:b9:23:a2:d6:44:09:63:88:0b:d2: eb:15:1e:0d:59:e1:8f:e9:65:dd:a1:02:8c:3c:fe: 0b:2c:f7:a5:a6:95:83:c0:70:7d:5a:c5:12:06:10: f4:e2:16:1e:ee:01:c3:4f:8b:90:57:a2:09:bf:01: 7e:09:5f:f2:e2:71:52:86:63:c4:f0:f7:e8:aa:27: 28:e8:9b:55:57:e7:c7:a4:09:69:a2:4b:43:9c:4b: a0:23:8d:3a:f2:bf:50:9f:92:b9:69:45:4b:13:34: 52:52:0a:a7:35:b0:0b:64:c3:af:ce:91:85:65:dd: c3:88:09:70:c7:7e:2e:4b:88:80:69:68:ac:66:b7: 93:91:55:21:f5:9a:e2:d6:1c:75:41:6b:fa:23:3b: b0:e0:61:fb:69:34:87:90:03:66:3d:2f:77:34:08: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:73:CD:CB:EB:1A:92:FA:EC:0D:02:37:5E:9C:38:28:5A:F4:EA X509v3 Authority Key Identifier: keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fe:90:48:79:6a:ff:c4:dc:99:d3:b4:49:7a:4e:37:63:f5: e9:0a:0d:83:75:b6:06:08:cd:ca:fa:65:4b:47:93:16:f3:46: d0:66:ad:b8:15:ba:94:18:8f:bc:38:0f:0b:51:f5:96:25:9d: 3b:7b:05:e5:a7:a7:e9:8c:3e:da:ec:6e:0c:e2:21:e6:15:96: f4:24:be:6a:26:de:2b:cc:ef:f5:62:8e:35:47:e6:ae:f3:2d: 4c:c7:f8:26:fd:b1:82:05:38:41:ac:60:ac:a6:51:f1:c2:92: a6:fe:af:37:3f:e9:0a:a7:c8:6b:b0:65:ca:c9:d0:18:fd:54: c3:09:3b:66:6c:95:fd:30:bf:e1:83:ce:d3:d1:3e:b7:8a:2e: 70:89:8c:38:75:77:ce:db:05:47:38:d5:a1:6f:a6:bc:9a:ab: 10:ae:fb:b6:47:a0:9d:ac:cc:4f:6b:62:22:42:e6:da:35:92: 66:0c:71:eb:ca:c3:35:60:86:51:62:47:73:03:2c:f4:e2:f1: ff:1c:97:6d:da:56:dd:58:88:56:69:a5:ac:38:59:3d:df:5b: f7:d2:d8:18:7b:cd:a3:71:d3:3d:76:b3:16:a5:00:5f:ca:3b: d2:40:f6:05:66:91:dc:26:c5:b3:50:bb:c1:92:63:99:88:c7: d4:c1:c5:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKEVEODJBMkZEN0RFMTQ3NTI3Q0ZDQzQyNDdBMjU2QzFB MEVEQjRFRDMwHhcNMjYwNDE3MDUzMjA0WhcNMjYwNDI0MDUzMjA0WjAYMRYwFAYD VQQDEw02OWUxYzVkNC1kODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ+DmVv1sVTM5oISvzKtkOePFKxlejs2t9od6UKpLEu5KP5xGRPc0wOKqv1w OJBX0OVx0WMSMrudxJ9r+SxHZlyIFAsCgkZEBidunNZn6e70FoLeh2J8U9G97J4W J7kjotZECWOIC9LrFR4NWeGP6WXdoQKMPP4LLPelppWDwHB9WsUSBhD04hYe7gHD T4uQV6IJvwF+CV/y4nFShmPE8Pfoqico6JtVV+fHpAlpoktDnEugI4068r9Qn5K5 aUVLEzRSUgqnNbALZMOvzpGFZd3DiAlwx34uS4iAaWisZreTkVUh9Zri1hx1QWv6 Izuw4GH7aTSHkANmPS93NAjZEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1jc83L 6xqS+uwNAjdenDgoWvTqMB8GA1UdIwQYMBaAFO2Cov194UdSfPzEJHolbBoO207T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yQjFDNDdGRThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIxSjhfTVFrZWlWc0dnN2JU dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZS2lfWDNoUjFKOF9NUWtlaVZzR2c3YlR0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mjc4Ny8yQjFDNDdGRThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIx SjhfTVFrZWlWc0dnN2JUdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZv6QSHlq/8TcmdO0SXpON2P16QoNg3W2BgjNyvplS0eTFvNG0GatuBW6lBiP vDgPC1H1liWdO3sF5aen6Yw+2uxuDOIh5hWW9CS+aibeK8zv9WKONUfmrvMtTMf4 Jv2xggU4QaxgrKZR8cKSpv6vNz/pCqfIa7BlysnQGP1Uwwk7ZmyV/TC/4YPO09E+ t4oucImMOHV3ztsFRzjVoW+mvJqrEK77tkegnazMT2tiIkLm2jWSZgxx68rDNWCG UWJHcwMs9OLx/xyXbdpW3ViIVmmlrDhZPd9b99LYGHvNo3HTPXazFqUAX8o70kD2 BWaR3CbFs1C7wZJjmYjH1MHF7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:12 2026 by rpki-client