$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: lLfK0B0lH9AOCLpVLzkq1L6nlln2Gzl/kJU9AAGg6HE= Subject key identifier: 93:C2:2D:9E:92:D0:57:8E:F4:D6:7F:FF:1F:F2:B2:4D:DB:71:CD:F8 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 021D Signing time: Fri 17 Apr 2026 02:39:48 +0000 Manifest this update: Fri 17 Apr 2026 02:39:47 +0000 Manifest next update: Fri 24 Apr 2026 02:39:47 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: SXWZJs5phtNXVgWalwKAFijva2KILp3mteM8EDK+Tos=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: o7EjUV2YZchqIdy9iUxIZM/t/ml5aY2rZmcv+MlQwaA=) 3: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: NSXDDAq8nX85x5kt9In+oT+8R1Iyp1p7SGrj1C1gVOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Apr 17 02:39:47 2026 GMT Not After : Apr 24 02:39:47 2026 GMT Subject: CN=69e19d74-f561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:5b:4f:ff:b7:06:c6:ad:a8:29:31:be:09: 65:db:46:49:a5:33:e0:76:f6:3d:91:21:61:2f:55: 77:58:28:2d:85:e7:06:0a:38:ff:ce:a0:89:dd:a8: 21:0c:81:80:ff:4e:0c:ef:2b:e5:de:0e:d4:6b:37: 97:8c:b6:99:e1:8e:8c:40:5d:eb:71:0b:12:52:c0: 89:3e:d0:cf:30:22:52:92:46:15:2e:15:eb:d7:63: 00:8a:aa:f0:0c:26:e9:ea:c1:17:e2:89:44:c6:39: 78:df:3d:f7:07:53:fb:61:6b:c8:41:a9:d9:2b:ec: 96:01:9e:c9:36:c3:9a:51:e0:30:cf:68:11:7d:41: 13:24:ae:9f:84:71:9c:af:f6:a0:b3:8b:72:c8:34: 30:8e:98:4e:33:63:2c:e7:e5:93:da:6d:a7:bc:30: f1:c8:77:98:6f:71:4c:4e:38:cd:ae:8b:ad:22:b3: 17:8c:cd:b2:18:81:77:53:cf:f5:ef:d5:57:20:cd: 76:2c:07:d1:28:63:10:9b:fe:19:9d:29:39:ee:8a: ec:a4:22:a8:77:a3:90:86:76:ef:7b:e7:99:0c:2c: f7:72:84:c3:b6:62:a7:bd:8f:22:0a:d6:3d:04:89: 33:a4:76:9a:9c:37:74:a3:34:0c:75:62:53:aa:e7: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C2:2D:9E:92:D0:57:8E:F4:D6:7F:FF:1F:F2:B2:4D:DB:71:CD:F8 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:22:75:2d:c5:4a:a5:37:09:85:c8:6c:93:c0:65:35:8d:d0: b7:42:d4:fd:cc:22:6f:98:a5:76:0e:9e:71:0f:c6:2c:b5:9d: d6:bf:7e:a3:f9:fb:bf:b7:95:5c:41:96:58:55:2c:ed:8d:bc: 04:8b:d4:29:9e:8c:66:c9:a9:d8:42:d9:47:50:8b:71:2d:45: f9:c7:9c:4a:67:b1:e1:6a:7e:14:0f:ba:3b:b5:76:07:7d:99: 1a:87:d4:bd:3f:ac:3b:25:fc:39:f1:45:1b:03:bf:13:f7:c5: bc:5d:fe:0c:ad:d4:a1:40:c4:d9:c8:8e:c5:a2:d0:34:c0:08: 1c:71:84:2f:61:58:3e:f9:01:be:f3:dd:f0:39:51:51:5f:b1: 30:c6:ce:a1:ad:5d:2d:4d:b3:09:4f:0a:29:bd:ab:a5:3f:23: 97:8e:d4:1c:5e:83:69:5a:92:aa:79:99:ed:4b:e4:f8:00:0b: ea:7b:bb:99:c8:ee:99:72:e3:f7:c5:cc:46:05:2c:29:87:76: 23:a4:e2:4b:b8:cb:c5:a5:1a:f6:87:0d:3b:bb:8c:2d:5c:73: bc:91:7f:52:5e:29:18:5c:31:fb:b9:31:c5:81:cc:49:d1:31: 35:34:c8:a2:32:87:04:9c:99:7f:9d:6f:c6:44:5f:72:8c:5a: 36:da:c5:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjYwNDE3MDIzOTQ3WhcNMjYwNDI0MDIzOTQ3WjAYMRYwFAYD VQQDEw02OWUxOWQ3NC1mNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0ZbT/+3BsatqCkxvgll20ZJpTPgdvY9kSFhL1V3WCgthecGCjj/zqCJ3agh DIGA/04M7yvl3g7UazeXjLaZ4Y6MQF3rcQsSUsCJPtDPMCJSkkYVLhXr12MAiqrw DCbp6sEX4olExjl43z33B1P7YWvIQanZK+yWAZ7JNsOaUeAwz2gRfUETJK6fhHGc r/ags4tyyDQwjphOM2Ms5+WT2m2nvDDxyHeYb3FMTjjNroutIrMXjM2yGIF3U8/1 79VXIM12LAfRKGMQm/4ZnSk57orspCKod6OQhnbve+eZDCz3coTDtmKnvY8iCtY9 BIkzpHaanDd0ozQMdWJTqudNQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPCLZ6S 0FeO9NZ//x/ysk3bcc34MB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdiJ1LcVKpTcJhchsk8BlNY3Qt0LU/cwib5ildg6ecQ/GLLWd1r9+o/n7v7eV XEGWWFUs7Y28BIvUKZ6MZsmp2ELZR1CLcS1F+cecSmex4Wp+FA+6O7V2B32ZGofU vT+sOyX8OfFFGwO/E/fFvF3+DK3UoUDE2ciOxaLQNMAIHHGEL2FYPvkBvvPd8DlR UV+xMMbOoa1dLU2zCU8KKb2rpT8jl47UHF6DaVqSqnmZ7Uvk+AAL6nu7mcjumXLj 98XMRgUsKYd2I6TiS7jLxaUa9ocNO7uMLVxzvJF/Ul4pGFwx+7kxxYHMSdExNTTI ojKHBJyZf51vxkRfcoxaNtrFBw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:59:47 2026 by rpki-client