$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json) Hash identifier: pNxy/vAspLo4NdPFbyP5fLmMi/aAMnS9A/lYuFjeimQ= Subject key identifier: BE:AC:5D:02:A5:CB:A0:BB:50:14:85:00:03:BF:8E:58:ED:3B:9B:02 Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft Manifest number: 0830 Signing time: Thu 16 Apr 2026 20:58:45 +0000 Manifest this update: Thu 16 Apr 2026 20:58:45 +0000 Manifest next update: Thu 23 Apr 2026 20:58:45 +0000 Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: cZ/6tKa6vFzVln6F+ouCn0WCZAK7vQnaF/rwjGIF+3E=) 2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: mOiKBb1fBKJiEZ/Q4F6SgNQ8FYEX0pSib9+RjzLS4+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Validity Not Before: Apr 16 20:58:45 2026 GMT Not After : Apr 23 20:58:45 2026 GMT Subject: CN=69e14d85-a027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:f4:9d:d0:22:0b:30:04:31:2a:25:c9:8f: 73:07:d5:3b:9c:15:45:10:80:30:e2:28:80:bf:20: 8d:57:2a:72:8f:6d:b5:2b:46:3a:5e:c1:81:35:67: 9a:fb:c6:bc:61:12:d6:78:82:33:04:37:9d:a6:82: b3:17:89:cb:7e:d8:54:1f:d0:40:c6:03:81:0d:85: 7f:10:11:a4:03:d3:64:e4:2e:4d:22:cc:81:9d:f6: da:60:45:e7:9b:29:d3:8f:9a:12:a1:a9:c4:bd:de: 0e:06:09:a3:9d:39:ff:76:7c:4b:c4:43:6a:4b:3d: 18:9d:c0:e2:b3:d4:17:4c:c3:66:2a:db:59:53:10: 2b:a4:24:46:c5:15:8a:9d:c3:d5:89:17:e1:7e:25: 1f:66:8a:ff:0c:22:c8:b6:02:c1:9f:9e:54:f3:48: 7d:b0:74:17:51:4c:d7:40:01:3f:e4:b2:51:4c:b3: 82:3d:d4:91:68:59:f7:6d:80:85:b2:0d:40:25:d0: 1f:fc:5d:27:93:1c:82:5d:bc:31:12:42:7a:9c:33: fc:dd:47:e1:4b:9c:af:4f:a3:89:40:ad:9e:f2:47: ef:f8:b2:77:d6:d6:ed:fd:98:98:54:a2:60:20:19: f5:75:6b:89:fd:ff:2a:71:ac:b6:ed:ea:5c:f9:a0: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AC:5D:02:A5:CB:A0:BB:50:14:85:00:03:BF:8E:58:ED:3B:9B:02 X509v3 Authority Key Identifier: keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:b2:fb:8a:09:34:15:33:b7:bc:af:1a:21:bd:57:fe:3b: 60:27:00:6e:d3:1b:37:55:05:63:7e:7e:ba:7c:4b:12:4c:5b: 05:60:42:12:75:8e:02:5c:d7:09:5a:83:78:f4:ff:b4:de:dc: a3:7b:4b:d6:f0:f4:74:2f:0d:87:3e:88:5a:b2:08:06:55:e7: 95:41:79:62:e7:4b:95:85:a1:e5:1c:0b:b6:20:79:71:f0:52: 13:f2:f0:d5:a0:33:c6:0b:73:c7:e8:c4:d1:63:8b:69:7c:92: a8:12:ba:99:0f:9d:93:59:b2:24:80:e2:98:dd:bf:fc:3a:21: e5:80:04:3f:88:fb:08:82:61:2e:50:e3:49:b4:9e:59:98:cb: 51:e3:2e:5d:a5:3b:ec:c4:48:7a:de:6f:99:49:93:5c:2f:5d: be:89:6a:11:48:e5:3f:76:e7:6a:94:01:d7:42:dd:ce:84:e0: 79:09:cb:90:74:62:43:64:b1:d8:b6:ee:26:55:14:06:fd:ed: cd:4e:d6:0c:65:01:22:bf:9a:f8:2f:56:f7:8b:97:fc:50:09: bc:0b:81:8f:92:01:91:f5:e1:74:26:68:1f:c5:f6:59:0b:ee: 35:60:06:2b:e3:fe:e8:0a:d0:9f:87:19:0e:9c:e2:ef:37:8d: 7e:44:4e:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0 RkU1QjU2NEEwHhcNMjYwNDE2MjA1ODQ1WhcNMjYwNDIzMjA1ODQ1WjAYMRYwFAYD VQQDEw02OWUxNGQ4NS1hMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFn0ndAiCzAEMSolyY9zB9U7nBVFEIAw4iiAvyCNVypyj221K0Y6XsGBNWea +8a8YRLWeIIzBDedpoKzF4nLfthUH9BAxgOBDYV/EBGkA9Nk5C5NIsyBnfbaYEXn mynTj5oSoanEvd4OBgmjnTn/dnxLxENqSz0YncDis9QXTMNmKttZUxArpCRGxRWK ncPViRfhfiUfZor/DCLItgLBn55U80h9sHQXUUzXQAE/5LJRTLOCPdSRaFn3bYCF sg1AJdAf/F0nkxyCXbwxEkJ6nDP83UfhS5yvT6OJQK2e8kfv+LJ31tbt/ZiYVKJg IBn1dWuJ/f8qcay27epc+aALlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6sXQKl y6C7UBSFAAO/jljtO5sCMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3 N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0UyMi8xMkZBODExQTE3N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9Q bzQzYTlPLVFUN0JQNWJWa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADr6y+4oJNBUzt7yvGiG9V/47YCcAbtMbN1UFY35+unxLEkxbBWBCEnWOAlzX CVqDePT/tN7co3tL1vD0dC8Nhz6IWrIIBlXnlUF5YudLlYWh5RwLtiB5cfBSE/Lw 1aAzxgtzx+jE0WOLaXySqBK6mQ+dk1myJIDimN2//Doh5YAEP4j7CIJhLlDjSbSe WZjLUeMuXaU77MRIet5vmUmTXC9dvolqEUjlP3bnapQB10LdzoTgeQnLkHRiQ2Sx 2LbuJlUUBv3tzU7WDGUBIr+a+C9W94uX/FAJvAuBj5IBkfXhdCZoH8X2WQvuNWAG K+P+6ArQn4cZDpzi7zeNfkROeA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:36:16 2026 by rpki-client