$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: A9XRoorsMyzJSgtx2cY9Ghaf1OqG8jBi+6axbfRHOj0= Subject key identifier: 4A:B5:23:E1:8E:30:17:D4:29:15:E2:8C:68:BD:48:F4:5C:DA:DC:32 Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: 0124 Signing time: Fri 17 Apr 2026 05:22:17 +0000 Manifest this update: Fri 17 Apr 2026 05:22:17 +0000 Manifest next update: Fri 24 Apr 2026 05:22:17 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: aAOVu8ig9y96lF+AC6KbU72vMbhd744VU1e2faSCJAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Apr 17 05:22:17 2026 GMT Not After : Apr 24 05:22:17 2026 GMT Subject: CN=69e1c389-111a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e8:42:05:0c:86:9a:e6:a8:ee:55:da:21:1b: 6a:c4:77:72:d1:62:e0:8e:6e:c6:65:49:f3:d8:15: 4a:ff:a5:18:0a:6e:f4:57:77:2e:7c:1d:1b:b4:48: 64:ea:85:9a:7e:9f:90:10:54:32:e8:79:6c:51:6d: 02:99:14:5d:65:d4:aa:f8:07:81:1d:6f:b4:7b:0c: ec:0c:4a:b5:47:bb:88:30:e5:42:bf:6f:6e:33:a8: ee:74:83:82:d3:35:22:4f:0d:31:d2:07:98:66:b0: 72:16:46:3f:28:57:b7:e6:fe:12:a2:4f:bf:d7:87: b9:d8:5b:88:cc:5c:a2:82:9c:0a:c2:28:1f:42:a6: c8:81:53:50:44:31:63:6b:71:3c:e7:54:d7:5b:f0: 3b:7e:b8:11:7b:e6:b2:a8:cb:89:8c:c8:e6:02:9f: d5:4f:49:50:b0:5e:98:97:92:6b:5c:d7:c9:a5:01: 32:a4:87:e5:ce:1e:0b:9e:87:be:5a:e0:94:ea:40: c2:d9:f4:a1:9e:ae:38:13:60:a2:39:09:68:3b:9d: 59:b7:5f:82:8f:0b:d6:bd:cd:65:2a:c0:55:6e:fb: d8:d7:5f:94:e8:54:55:e3:06:0a:8f:95:42:80:53: 78:62:2b:5e:75:e9:c5:87:01:02:bf:2d:f8:f8:02: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:23:E1:8E:30:17:D4:29:15:E2:8C:68:BD:48:F4:5C:DA:DC:32 X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:cc:31:dc:aa:09:e3:a2:7b:7d:aa:ee:33:96:be:4f:cd:ce: c4:3c:90:2e:ff:7c:10:30:fd:a2:11:97:a0:ca:77:17:84:d3: 7f:71:9f:ba:ca:73:6b:de:12:42:19:29:4f:a2:15:f2:d4:a6: c7:bc:04:33:a9:80:68:2f:b5:7e:78:b4:57:fa:dc:ba:ed:cd: 7a:0b:20:f2:ba:72:3b:6e:47:45:f2:e6:30:e4:b8:8b:ec:41: 40:d9:9e:58:e3:7c:e7:be:8a:72:2a:b8:2b:b1:92:43:77:9d: e1:ae:ed:1d:20:fb:78:9b:9f:40:19:7d:c0:c3:f3:3a:91:7d: 7e:1c:d7:a7:c2:b4:5c:ea:64:8d:ac:2a:60:86:02:82:66:52: cb:f5:aa:dc:c1:96:4e:91:64:88:7b:85:a0:94:3d:9c:b8:32: 38:cc:16:1d:06:d3:e3:85:7d:ab:7d:6c:be:bb:c8:27:66:86: 1b:db:c6:b7:e4:97:20:39:3b:66:69:24:aa:39:c6:66:0d:ee: 5f:4e:7a:8b:5b:9a:00:52:dc:90:82:f6:a8:36:a6:2c:b9:14: 04:61:4b:ac:07:cf:99:87:ba:0f:63:1b:89:e3:d5:7a:86:b5: ed:6e:31:e3:c2:9b:cb:3b:50:c1:97:22:85:c9:3f:18:4c:d4: 45:d0:fc:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjYwNDE3MDUyMjE3WhcNMjYwNDI0MDUyMjE3WjAYMRYwFAYD VQQDEw02OWUxYzM4OS0xMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OhCBQyGmuao7lXaIRtqxHdy0WLgjm7GZUnz2BVK/6UYCm70V3cufB0btEhk 6oWafp+QEFQy6HlsUW0CmRRdZdSq+AeBHW+0ewzsDEq1R7uIMOVCv29uM6judIOC 0zUiTw0x0geYZrByFkY/KFe35v4Sok+/14e52FuIzFyigpwKwigfQqbIgVNQRDFj a3E851TXW/A7frgRe+ayqMuJjMjmAp/VT0lQsF6Yl5JrXNfJpQEypIflzh4Lnoe+ WuCU6kDC2fShnq44E2CiOQloO51Zt1+CjwvWvc1lKsBVbvvY11+U6FRV4wYKj5VC gFN4YitedenFhwECvy34+AL4RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEq1I+GO MBfUKRXijGi9SPRc2twyMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGcwx3KoJ46J7faruM5a+T83OxDyQLv98EDD9ohGXoMp3F4TTf3Gfuspza94S QhkpT6IV8tSmx7wEM6mAaC+1fni0V/rcuu3Negsg8rpyO25HRfLmMOS4i+xBQNme WON8576Kciq4K7GSQ3ed4a7tHSD7eJufQBl9wMPzOpF9fhzXp8K0XOpkjawqYIYC gmZSy/Wq3MGWTpFkiHuFoJQ9nLgyOMwWHQbT44V9q31svrvIJ2aGG9vGt+SXIDk7 ZmkkqjnGZg3uX056i1uaAFLckIL2qDamLLkUBGFLrAfPmYe6D2MbiePVeoa17W4x 48KbyztQwZcihck/GEzURdD8vg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:58:44 2026 by rpki-client