$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: 8mI1xrYd/cKXfHqy41zRsYYHQDU/YVDEHabdguX7eVk= Subject key identifier: 34:BC:5D:2D:57:B3:4E:DA:16:F8:4D:7A:6F:76:9C:68:2D:F9:E6:63 Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: D4 Signing time: Fri 17 Apr 2026 06:32:06 +0000 Manifest this update: Fri 17 Apr 2026 06:32:06 +0000 Manifest next update: Fri 24 Apr 2026 06:32:06 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: tInSnfysZQOnSLKBDG0Wu5r4GqAdiZG0BVnA0Uy0H8A=) 2: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: R1p9dQL4bQTShVkefJ6wu3GyIsys6P/r91scXSAjXPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: Apr 17 06:32:06 2026 GMT Not After : Apr 24 06:32:06 2026 GMT Subject: CN=69e1d3e6-a44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:25:97:6f:f4:4a:ba:71:0f:f2:78:1e:a9: d6:45:c8:b9:58:d5:b9:42:a5:91:03:6a:82:c2:bc: d6:05:2d:7c:93:f3:81:3d:7d:5e:21:fa:3e:32:f5: 65:db:16:72:31:f9:43:dd:c0:28:dd:35:3a:6b:69: 70:e3:d6:02:24:c7:e6:aa:8b:2a:0f:71:f6:e7:d8: 71:97:63:23:af:d1:fa:a2:77:75:67:c0:ff:c2:2b: 7b:35:a1:e4:4b:5f:bc:d1:4a:31:f3:8c:d9:bd:83: 24:f7:1a:48:37:17:dd:93:94:72:2e:96:0d:2a:4c: 99:8f:ea:49:e1:95:20:67:9b:f9:4b:74:d7:83:5e: 3b:59:18:d3:c4:f9:fc:c6:cb:70:6e:2a:bb:22:3e: a4:4e:6d:1e:8f:56:9b:a1:ee:5b:01:12:de:c8:6e: e5:93:ec:62:47:dd:90:74:4e:9c:c7:e8:35:48:1c: 1c:ed:da:2a:75:64:a3:59:7c:8c:43:49:50:ef:31: 70:ac:ad:3d:c2:ba:1a:04:9d:09:61:74:75:7c:cc: f1:ec:a6:7b:0b:25:80:34:7d:03:55:77:e2:0a:4b: 61:ea:87:2c:a4:aa:84:19:1f:51:29:4a:fc:53:b9: fc:c9:80:e3:3a:ac:e5:b9:e9:6e:75:01:e2:a0:c9: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BC:5D:2D:57:B3:4E:DA:16:F8:4D:7A:6F:76:9C:68:2D:F9:E6:63 X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ad:84:f4:db:d0:27:fd:a7:83:00:0c:2b:5f:21:a2:75:ff: 9d:74:84:a8:9e:62:70:de:87:95:1a:a6:6e:cb:e4:10:77:51: cb:59:25:21:6f:22:97:a1:03:06:d4:d4:5e:74:21:38:fd:af: ce:7a:4a:b0:2f:ab:1a:34:81:24:84:00:cd:18:0f:cc:33:99: da:3b:af:5a:9d:37:33:3a:f3:58:06:fe:53:ac:1a:6c:5f:74: cf:92:15:ad:67:f6:f9:3a:4c:ca:ab:7d:f9:55:17:4d:1e:83: 93:8c:58:4e:44:01:02:21:f2:cf:d4:dc:f7:1e:8a:6c:ce:bb: d4:5b:c5:72:48:80:4c:5e:d8:be:8f:f0:fa:13:c4:11:df:f7: dd:ef:17:8f:fe:f6:d2:97:77:0b:a5:95:08:36:29:d0:1b:da: 02:0f:41:84:55:8b:f7:e7:e5:ba:a1:fd:c0:99:fa:e2:e7:70: ea:f2:74:44:e8:8a:a5:c6:65:9c:21:f3:b0:67:6d:8b:91:35: fb:4a:b1:87:36:bb:04:ba:1f:82:0b:67:8a:5c:06:38:77:e8: bd:ef:3f:6e:72:b8:13:a5:8c:4c:99:79:39:42:93:18:e8:da: 55:69:3f:dc:0f:bf:5e:d6:14:93:b3:8d:78:bd:32:c7:3e:65: 53:07:f8:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExOUYxMTAvBgNVBAUTKDYyQzcxRjZBRTkxNjI5Rjg1NENBOTQ2NDE3NjFCNjUy MkNENDgwQzMwHhcNMjYwNDE3MDYzMjA2WhcNMjYwNDI0MDYzMjA2WjAYMRYwFAYD VQQDEw02OWUxZDNlNi1hNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljsll2/0SrpxD/J4HqnWRci5WNW5QqWRA2qCwrzWBS18k/OBPX1eIfo+MvVl 2xZyMflD3cAo3TU6a2lw49YCJMfmqosqD3H259hxl2Mjr9H6ond1Z8D/wit7NaHk S1+80Uox84zZvYMk9xpINxfdk5RyLpYNKkyZj+pJ4ZUgZ5v5S3TXg147WRjTxPn8 xstwbiq7Ij6kTm0ej1aboe5bARLeyG7lk+xiR92QdE6cx+g1SBwc7doqdWSjWXyM Q0lQ7zFwrK09wroaBJ0JYXR1fMzx7KZ7CyWANH0DVXfiCkth6ocspKqEGR9RKUr8 U7n8yYDjOqzlueludQHioMnDlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDS8XS1X s07aFvhNem92nGgt+eZjMB8GA1UdIwQYMBaAFGLHH2rpFin4VMqUZBdhtlIs1IDD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE5Ri9COUVBMDRDNjA1 OTQxMUYwQTJFMEUxNUNDNEY5QUUwMi9Zc2NmYXVrV0tmaFV5cFJrRjJHMlVpelVn TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdNTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE5Ri9COUVBMDRDNjA1OTQxMUYwQTJFMEUxNUNDNEY5QUUwMi9Zc2NmYXVrV0tm aFV5cFJrRjJHMlVpelVnTU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE62E9NvQJ/2ngwAMK18honX/nXSEqJ5icN6HlRqmbsvkEHdRy1klIW8il6ED BtTUXnQhOP2vznpKsC+rGjSBJIQAzRgPzDOZ2juvWp03MzrzWAb+U6wabF90z5IV rWf2+TpMyqt9+VUXTR6Dk4xYTkQBAiHyz9Tc9x6KbM671FvFckiATF7Yvo/w+hPE Ed/33e8Xj/720pd3C6WVCDYp0BvaAg9BhFWL9+fluqH9wJn64udw6vJ0ROiKpcZl nCHzsGdti5E1+0qxhza7BLofggtnilwGOHfove8/bnK4E6WMTJl5OUKTGOjaVWk/ 3A+/XtYUk7ONeL0yxz5lUwf47w== -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:29 2026 by rpki-client