$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: okySyAoTy0TpzW6Po2EJFvDx7GKk7uoWWZe9PWyzVLU= Subject key identifier: 85:FF:04:2D:42:C2:41:AD:5E:41:0C:A7:86:95:4E:93:3B:D4:79:35 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 1059 Signing time: Thu 16 Apr 2026 20:54:27 +0000 Manifest this update: Thu 16 Apr 2026 20:54:26 +0000 Manifest next update: Thu 23 Apr 2026 20:54:26 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: Grv9+X14poInzFC4RYqfYcLe9aeBJyrLRJAo8be1MiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Apr 16 20:54:26 2026 GMT Not After : Apr 23 20:54:26 2026 GMT Subject: CN=69e14c83-9fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:64:de:9e:08:3b:89:ff:f6:c6:a3:c9:94: 32:2d:56:9e:47:2a:6f:32:95:20:43:bf:2c:19:c8: 3e:42:74:a9:81:38:68:6f:d1:96:9a:9d:9b:54:21: 5f:83:4b:cd:52:fd:b0:91:32:8b:fb:42:bc:de:ae: 38:0c:a0:75:f7:4b:df:31:2b:8e:2c:5b:9c:8d:ad: e3:10:35:79:28:23:a2:b9:0e:c1:03:da:f4:e5:19: b6:b0:6d:6f:8b:9d:ea:36:c3:5b:f3:fd:df:4b:6a: b6:1c:4f:1a:17:ed:11:0e:5e:a4:97:b5:bf:02:d5: c7:5b:4a:ea:1c:31:12:20:98:9a:6a:a2:78:e9:7c: d6:39:29:5d:51:a7:9f:4f:35:3c:4f:89:ad:ef:3d: b9:23:95:71:9a:b1:7d:0a:59:ae:9d:41:d5:98:cb: 59:ad:a8:86:79:84:97:3a:41:c0:35:f0:e3:46:9d: 64:10:ca:52:e0:73:a6:b5:92:d5:b3:04:41:49:d6: 1c:66:3f:bb:53:92:19:90:04:41:ec:4a:d3:d4:19: 4b:e2:8b:d0:b5:76:7c:5a:52:e2:16:8c:fa:8d:f3: 2f:75:6b:b8:6d:65:0b:69:5a:a1:5a:ef:f2:92:d9: 42:8c:ce:c3:e4:ac:b6:aa:21:e2:3d:61:6e:e9:81: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FF:04:2D:42:C2:41:AD:5E:41:0C:A7:86:95:4E:93:3B:D4:79:35 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fd:22:0b:7d:16:21:8e:92:d5:c5:11:7d:25:2b:8f:43:0d: 05:48:2b:85:ec:03:44:79:a4:5c:b9:1c:1d:25:b7:6a:c7:e8: cc:08:73:b8:50:2f:37:64:d0:e3:af:97:5a:1b:20:a1:ca:99: 40:af:4a:ea:c5:c8:e8:c6:20:ec:2c:b0:2e:ea:7d:71:1b:2c: 7c:3d:28:58:9a:0c:fe:be:ec:39:81:48:62:3b:0d:e7:f9:29: 75:94:1e:38:79:6c:4c:86:68:70:81:78:5c:d1:24:f6:db:75: ea:a0:9c:57:f9:38:84:78:f3:65:ea:9e:33:46:7b:15:2b:cc: 7c:aa:a8:e6:d2:46:f0:8c:0f:f5:9d:ed:ed:81:ec:2e:fd:13: 75:3a:83:5c:5a:86:d0:fe:92:d2:93:c6:74:57:2b:68:67:14: b1:7e:47:20:22:aa:d5:2b:ae:fd:aa:92:63:7a:aa:8e:c7:12: f6:6b:99:42:b4:5f:67:12:a6:ce:52:49:09:20:a7:c7:cd:8e: c1:cf:b4:03:3c:52:f2:2c:13:21:9b:41:09:79:c5:aa:7a:18: f0:57:a5:e5:0e:90:6d:00:13:5e:a1:78:58:e5:c4:18:40:e7: eb:5a:7b:42:e4:af:2e:67:42:a1:7e:9e:be:9c:06:5b:27:08: 2b:df:7c:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjYwNDE2MjA1NDI2WhcNMjYwNDIzMjA1NDI2WjAYMRYwFAYD VQQDEw02OWUxNGM4My05ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLVk3p4IO4n/9sajyZQyLVaeRypvMpUgQ78sGcg+QnSpgThob9GWmp2bVCFf g0vNUv2wkTKL+0K83q44DKB190vfMSuOLFucja3jEDV5KCOiuQ7BA9r05Rm2sG1v i53qNsNb8/3fS2q2HE8aF+0RDl6kl7W/AtXHW0rqHDESIJiaaqJ46XzWOSldUaef TzU8T4mt7z25I5VxmrF9ClmunUHVmMtZraiGeYSXOkHANfDjRp1kEMpS4HOmtZLV swRBSdYcZj+7U5IZkARB7ErT1BlL4ovQtXZ8WlLiFoz6jfMvdWu4bWULaVqhWu/y ktlCjM7D5Ky2qiHiPWFu6YE0aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIX/BC1C wkGtXkEMp4aVTpM71Hk1MB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKf0iC30WIY6S1cURfSUrj0MNBUgrhewDRHmkXLkcHSW3asfozAhzuFAvN2TQ 46+XWhsgocqZQK9K6sXI6MYg7CywLup9cRssfD0oWJoM/r7sOYFIYjsN5/kpdZQe OHlsTIZocIF4XNEk9tt16qCcV/k4hHjzZeqeM0Z7FSvMfKqo5tJG8IwP9Z3t7YHs Lv0TdTqDXFqG0P6S0pPGdFcraGcUsX5HICKq1Suu/aqSY3qqjscS9muZQrRfZxKm zlJJCSCnx82Owc+0AzxS8iwTIZtBCXnFqnoY8Fel5Q6QbQATXqF4WOXEGEDn61p7 QuSvLmdCoX6evpwGWycIK998fw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:55 2026 by rpki-client