$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: umRoaVgjBBxvVZmd4XoKxG6lRkmtcmNL3ezUHgfd6E4= Subject key identifier: 1E:73:90:0A:2D:DF:5A:B4:B9:D0:67:0E:8E:65:73:02:E4:F6:C5:F3 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 0128 Signing time: Fri 17 Apr 2026 05:17:25 +0000 Manifest this update: Fri 17 Apr 2026 05:17:25 +0000 Manifest next update: Fri 24 Apr 2026 05:17:25 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: Uk0sd1c9c/CFhQDdvRhuXKJIl1ooT4qZWAqZpz4pxj0=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: 9n+XwMxzkkMMvREjsse3a1ZuBorrEMJnsZ5Bb57THws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Apr 17 05:17:25 2026 GMT Not After : Apr 24 05:17:25 2026 GMT Subject: CN=69e1c265-8344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:18:ed:5f:da:e2:46:51:43:48:50:09:60: 93:64:cc:e9:33:a6:bb:3c:e7:a4:35:5e:02:6c:67: 62:23:b3:5b:5b:62:1d:45:00:3d:d8:01:36:07:63: ff:5b:1f:28:66:1e:5b:42:d2:24:00:59:53:a4:07: 2c:94:73:98:9c:5f:64:e6:b2:d9:a7:66:75:db:19: f7:e2:87:d3:3f:a7:3c:6e:c9:52:6e:13:aa:09:b4: 4d:e2:a2:ac:77:55:b7:15:3c:e4:94:a9:a2:4f:fe: b4:07:62:42:03:95:ef:d2:7d:bc:fd:62:57:80:6b: 34:08:4f:04:db:c5:60:10:71:22:ae:e4:2e:1e:fb: a3:72:37:33:20:42:94:04:46:45:c7:b8:4e:cb:cb: e6:e5:07:66:6a:04:33:b7:c2:4f:5c:d3:90:c3:e9: dd:39:21:35:4e:ec:a7:6a:76:03:63:4e:a2:ff:c5: d8:89:1a:5e:99:aa:5b:f4:f5:63:06:33:4d:d6:54: 79:58:93:ed:bd:59:57:3e:77:91:d3:f6:86:1a:fd: bf:3c:bd:d3:84:cb:a8:87:74:a8:1e:00:ab:27:8e: 31:35:59:38:87:2e:04:d8:8f:58:f1:a3:89:c0:a6: a8:b6:a5:f4:76:5c:23:47:76:76:c3:52:e6:b7:f5: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:90:0A:2D:DF:5A:B4:B9:D0:67:0E:8E:65:73:02:E4:F6:C5:F3 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:07:1c:75:ad:d0:c0:e6:03:cd:3c:bf:b9:bc:3f:bf:4c:0b: 79:23:78:ee:66:d5:88:ff:bc:04:e5:e4:ce:23:16:c5:8b:83: 5d:34:46:02:a7:e9:da:cc:52:49:a2:c6:4d:1f:05:c9:17:42: b7:a9:b6:e9:44:85:1c:e6:0c:23:a7:46:03:67:b4:42:86:11: d2:38:2e:df:b0:ec:67:18:96:aa:ee:14:27:7e:4f:f3:14:e4: c2:fd:b1:00:21:f7:b9:e3:a1:3a:d6:4d:96:fd:01:5f:a0:15: 11:31:58:ea:04:47:f0:34:8c:92:21:f3:75:cd:30:a5:6e:9f: dd:84:7c:c9:96:2b:df:e7:9c:8f:a8:f3:a9:c6:02:69:cf:99: 3b:50:bb:5a:bb:d8:f2:0c:6e:ca:cf:b8:64:00:c4:bf:c3:9a: fd:05:f3:f6:29:10:f5:4a:3d:e2:f7:17:8b:75:25:c8:d9:8e: 14:c0:7a:2c:ab:a9:3e:96:d3:1c:8b:f9:07:71:7c:65:c0:7e: 69:51:e7:d1:af:a6:1d:8f:1c:3c:5c:2f:d2:30:af:4b:a6:27: d7:c2:80:5c:ad:21:f2:5b:f2:77:c3:4e:4a:3c:37:9d:a6:9c: 3e:28:ff:db:6b:32:4f:5d:bd:10:29:d3:d4:42:de:f4:5c:b2: 23:b5:b3:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjYwNDE3MDUxNzI1WhcNMjYwNDI0MDUxNzI1WjAYMRYwFAYD VQQDEw02OWUxYzI2NS04MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7cY7V/a4kZRQ0hQCWCTZMzpM6a7POekNV4CbGdiI7NbW2IdRQA92AE2B2P/ Wx8oZh5bQtIkAFlTpAcslHOYnF9k5rLZp2Z12xn34ofTP6c8bslSbhOqCbRN4qKs d1W3FTzklKmiT/60B2JCA5Xv0n28/WJXgGs0CE8E28VgEHEiruQuHvujcjczIEKU BEZFx7hOy8vm5QdmagQzt8JPXNOQw+ndOSE1TuynanYDY06i/8XYiRpemapb9PVj BjNN1lR5WJPtvVlXPneR0/aGGv2/PL3ThMuoh3SoHgCrJ44xNVk4hy4E2I9Y8aOJ wKaotqX0dlwjR3Z2w1Lmt/WGuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5zkAot 31q0udBnDo5lcwLk9sXzMB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAccda3QwOYDzTy/ubw/v0wLeSN47mbViP+8BOXkziMWxYuDXTRGAqfp2sxS SaLGTR8FyRdCt6m26USFHOYMI6dGA2e0QoYR0jgu37DsZxiWqu4UJ35P8xTkwv2x ACH3ueOhOtZNlv0BX6AVETFY6gRH8DSMkiHzdc0wpW6f3YR8yZYr3+ecj6jzqcYC ac+ZO1C7WrvY8gxuys+4ZADEv8Oa/QXz9ikQ9Uo94vcXi3UlyNmOFMB6LKupPpbT HIv5B3F8ZcB+aVHn0a+mHY8cPFwv0jCvS6Yn18KAXK0h8lvyd8NOSjw3naacPij/ 22syT129ECnT1ELe9FyyI7WzaQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:15 2026 by rpki-client