$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json) Hash identifier: Aj1lxoBvet9Bldd5rx7rT9E3FNwTsfvDZjfzGGJFVLM= Subject key identifier: DF:EC:E4:A9:FB:1D:A1:64:B4:36:EB:87:33:EE:EC:75:95:6C:49:31 Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft Manifest number: 010F Signing time: Fri 17 Apr 2026 05:40:03 +0000 Manifest this update: Fri 17 Apr 2026 05:40:03 +0000 Manifest next update: Fri 24 Apr 2026 05:40:03 +0000 Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: SxLBdixOV74GFBojo0zWfk3hgr+QCvl5tCQISzlfkMY=) 2: 181772049FD811EF8680B438C4F9AE02.roa (hash: nlnEqbRNBdElRTHPRbYW578QyapawXEp7sk2hMeS67g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Validity Not Before: Apr 17 05:40:03 2026 GMT Not After : Apr 24 05:40:03 2026 GMT Subject: CN=69e1c7b3-aa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:4f:45:86:77:29:e7:19:05:c2:fd:94:04: 60:2f:cf:7f:62:d2:6f:5d:e0:05:3b:10:4d:66:a3: 22:77:db:5e:8e:d0:b9:bd:22:fe:0c:85:e8:e8:ed: 68:08:f0:be:62:c4:48:9a:2a:82:af:a4:99:cf:0a: d4:6d:5a:dd:20:6f:d9:1a:b4:74:1f:e4:ae:ca:fa: 97:93:37:16:a9:dd:5b:5e:e9:22:c4:8d:67:60:36: 67:43:37:90:4e:a2:72:1f:7e:63:1f:ba:30:4e:7e: 7c:d9:80:78:eb:16:83:59:9b:a2:21:bb:04:86:af: 46:2e:86:c9:1f:69:66:ad:bd:16:16:2c:dd:5c:22: ae:bc:de:6d:71:93:08:9f:38:0e:91:43:2f:bc:3e: e2:8d:c1:40:02:cc:f7:1c:1b:9f:8f:81:6c:20:db: 81:11:75:99:fc:ff:c1:2a:36:a8:29:00:15:27:86: 45:e0:2d:38:74:5d:b4:59:a7:fc:04:31:8f:74:c7: b1:e8:8b:94:21:87:26:f2:5f:33:74:6b:0d:7a:67: b1:75:53:c2:88:b1:e1:ea:cf:09:12:07:2a:5e:f3: 64:eb:4d:8a:91:d1:0e:7d:d3:32:f6:fb:2f:99:27: 7b:98:69:bb:24:ed:1f:47:15:21:68:4a:e0:8d:48: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:E4:A9:FB:1D:A1:64:B4:36:EB:87:33:EE:EC:75:95:6C:49:31 X509v3 Authority Key Identifier: keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a7:5b:91:c0:01:b9:61:ff:44:1a:09:08:0a:90:28:eb:f1: 7c:56:7d:f5:bb:f8:88:3c:2d:26:d0:8c:6c:2b:8e:a5:b7:62: ba:49:29:05:11:ec:69:99:33:c6:61:13:81:7f:2b:45:42:87: c7:00:4d:d1:f9:91:43:4b:0e:8e:6f:8c:10:0d:a1:35:4f:4d: 8d:07:55:10:ea:b2:30:cf:8f:b4:55:ef:8d:be:f6:1e:5f:3f: 81:22:75:d2:f6:1e:e1:e8:4c:7e:ab:1e:22:82:8a:21:60:91: 87:4b:08:24:c9:cb:6d:a2:3e:09:9c:96:8e:86:c1:31:c2:88: 9a:c0:e6:b9:bb:27:35:c3:a7:64:f6:23:22:75:6f:26:89:42: b8:38:b0:db:f8:4d:d2:ef:cb:87:ae:87:44:25:b3:ca:07:6b: 6a:90:5a:b2:e8:67:32:f4:7e:6b:f9:8c:e2:98:80:7d:4a:b3: 9f:a5:bc:55:55:c0:40:f0:b4:52:eb:cf:c0:c1:4b:48:d8:a1: 57:86:8b:62:d8:37:ad:94:bc:22:15:d5:f5:47:f3:d4:eb:a0: b6:f9:26:4f:57:46:3a:80:ae:42:f9:dd:00:ab:54:cb:62:00: c5:8c:78:2a:5d:4d:a9:33:1a:cd:c6:01:fa:11:2b:8e:64:66: c0:c7:89:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDYwNkVCMjk1ODI1NEFDOThCNjMzNkVBQTQxQUM4MEIy RENCMTlDNkUwHhcNMjYwNDE3MDU0MDAzWhcNMjYwNDI0MDU0MDAzWjAYMRYwFAYD VQQDEw02OWUxYzdiMy1hYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvFPRYZ3KecZBcL9lARgL89/YtJvXeAFOxBNZqMid9tejtC5vSL+DIXo6O1o CPC+YsRImiqCr6SZzwrUbVrdIG/ZGrR0H+SuyvqXkzcWqd1bXukixI1nYDZnQzeQ TqJyH35jH7owTn582YB46xaDWZuiIbsEhq9GLobJH2lmrb0WFizdXCKuvN5tcZMI nzgOkUMvvD7ijcFAAsz3HBufj4FsINuBEXWZ/P/BKjaoKQAVJ4ZF4C04dF20Waf8 BDGPdMex6IuUIYcm8l8zdGsNemexdVPCiLHh6s8JEgcqXvNk602KkdEOfdMy9vsv mSd7mGm7JO0fRxUhaErgjUhFaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/s5Kn7 HaFktDbrhzPu7HWVbEkxMB8GA1UdIwQYMBaAFGBuspWCVKyYtjNuqkGsgLLcsZxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CNURGQzhDMDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJKaTJNMjZxUWF5QXN0eXhu RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lHNnlsWUpVckppMk0yNnFRYXlBc3R5eG5HNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CNURGQzhDMDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJK aTJNMjZxUWF5QXN0eXhuRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnKdbkcABuWH/RBoJCAqQKOvxfFZ99bv4iDwtJtCMbCuOpbdiukkpBRHsaZkz xmETgX8rRUKHxwBN0fmRQ0sOjm+MEA2hNU9NjQdVEOqyMM+PtFXvjb72Hl8/gSJ1 0vYe4ehMfqseIoKKIWCRh0sIJMnLbaI+CZyWjobBMcKImsDmubsnNcOnZPYjInVv JolCuDiw2/hN0u/Lh66HRCWzygdrapBasuhnMvR+a/mM4piAfUqzn6W8VVXAQPC0 UuvPwMFLSNihV4aLYtg3rZS8IhXV9Ufz1OugtvkmT1dGOoCuQvndAKtUy2IAxYx4 Kl1NqTMazcYB+hErjmRmwMeJeA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:44:02 2026 by rpki-client