$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: Kj7PFUw3MO4CKQ4BEcs2oIZZxXGOV6bX45c3oTFWwcw= Subject key identifier: 0E:15:99:3B:C3:DC:E9:2D:EC:07:48:17:D6:00:2D:EE:3F:90:EF:60 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 087F Signing time: Thu 16 Apr 2026 20:34:14 +0000 Manifest this update: Thu 16 Apr 2026 20:34:13 +0000 Manifest next update: Thu 23 Apr 2026 20:34:13 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: bSin/N3Tp6Hff+TZdyHWaRLBYlGc3qYvvOIq8uRJrUM=) 2: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: jZ81Tdfx/+nsLOQTxl8GU75vMdax+UmYLl8rBqC2vqY=) 3: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: cGT1GtukriCvrd1Pi2qRMUlR6UU6oh7XqqypKNl1qDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Apr 16 20:34:13 2026 GMT Not After : Apr 23 20:34:13 2026 GMT Subject: CN=69e147c6-d0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:89:16:e5:22:c2:d1:41:a5:b4:31:b0:07: ff:e8:e1:94:9e:0a:0c:e4:4c:62:83:77:3b:0d:8a: 78:7b:ed:b4:01:7e:51:99:8e:f3:83:02:cf:4a:00: ea:ff:f7:5b:6f:92:b6:fd:03:a6:ae:05:eb:ec:74: ed:9c:cc:9d:3e:4b:cb:4b:d9:94:7b:ec:cd:52:97: 6e:61:9a:ec:3f:ac:5a:fa:4c:b5:00:27:a4:1a:cc: 7b:c6:0b:1f:4d:25:74:f4:d5:f9:9a:61:22:da:36: 8b:d4:8a:13:ef:0b:57:f3:41:f0:bc:14:37:43:94: 51:97:d5:ab:3a:d6:d1:95:a1:05:79:03:be:fd:a1: ce:8c:cc:e1:8b:d8:f8:ae:39:30:01:05:6c:84:bd: 83:a3:43:be:26:a4:e0:03:9c:56:51:7f:ea:f4:f5: fa:c0:79:cc:a7:aa:e3:d6:17:1f:fc:6b:bb:fe:17: 81:07:fa:46:16:3c:eb:f1:94:0a:60:0f:f5:55:a0: 68:f2:ba:e4:c3:0c:8a:80:b1:f4:94:cb:9b:62:2d: 93:51:78:99:d1:bb:18:bc:67:be:92:5b:90:d9:cd: 0f:1c:73:b7:27:32:24:9e:13:51:8b:d4:8d:1a:fb: 6a:89:9f:9d:92:2d:87:25:b2:1e:e6:df:09:16:37: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:99:3B:C3:DC:E9:2D:EC:07:48:17:D6:00:2D:EE:3F:90:EF:60 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:29:0b:39:5e:85:ac:f2:e5:6e:d4:7f:8c:10:f0:4b:14:00: f3:b6:a4:53:50:91:61:08:0f:c4:76:45:98:56:13:47:bb:e7: 8d:5c:1e:ed:7f:a0:57:0e:a8:71:e2:8d:5c:2b:de:16:60:67: a7:59:64:8c:db:03:e4:56:29:14:1a:da:f7:95:2a:69:21:ac: ad:97:a7:d4:50:3a:da:3b:36:a7:72:d4:0c:39:75:b4:c7:f9: a4:ae:c7:73:77:ef:5c:a1:ff:04:b7:9e:a3:51:bc:2c:ef:04: 43:85:35:37:a5:dc:82:c9:ae:a2:a3:8c:10:7e:a9:ff:19:79: 51:71:f5:46:cf:e1:7c:28:54:66:f6:ad:40:09:39:87:67:e0: e6:7c:70:fb:02:58:a6:81:6f:92:8e:0a:fc:0a:fb:81:e1:aa: a4:22:94:2b:aa:50:39:1a:ac:df:0d:97:ab:cf:bf:72:00:71: e3:49:cc:95:6c:c2:ef:36:72:a7:37:36:5a:b4:40:4b:ff:91: 7f:e0:25:41:6f:00:d6:65:a0:1d:22:b9:43:d2:0a:26:1e:01: 0b:0a:c8:55:dc:48:d4:25:b6:30:89:f9:0e:8b:24:f9:ef:da: e8:b6:72:72:b7:18:a9:73:78:f4:d9:55:c3:62:a4:63:c0:b2: e6:61:3e:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjYwNDE2MjAzNDEzWhcNMjYwNDIzMjAzNDEzWjAYMRYwFAYD VQQDEw02OWUxNDdjNi1kMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UiJFuUiwtFBpbQxsAf/6OGUngoM5Exig3c7DYp4e+20AX5RmY7zgwLPSgDq //dbb5K2/QOmrgXr7HTtnMydPkvLS9mUe+zNUpduYZrsP6xa+ky1ACekGsx7xgsf TSV09NX5mmEi2jaL1IoT7wtX80HwvBQ3Q5RRl9WrOtbRlaEFeQO+/aHOjMzhi9j4 rjkwAQVshL2Do0O+JqTgA5xWUX/q9PX6wHnMp6rj1hcf/Gu7/heBB/pGFjzr8ZQK YA/1VaBo8rrkwwyKgLH0lMubYi2TUXiZ0bsYvGe+kluQ2c0PHHO3JzIknhNRi9SN GvtqiZ+dki2HJbIe5t8JFjfH3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4VmTvD 3Okt7AdIF9YALe4/kO9gMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCkLOV6FrPLlbtR/jBDwSxQA87akU1CRYQgPxHZFmFYTR7vnjVwe7X+gVw6o ceKNXCveFmBnp1lkjNsD5FYpFBra95UqaSGsrZen1FA62js2p3LUDDl1tMf5pK7H c3fvXKH/BLeeo1G8LO8EQ4U1N6XcgsmuoqOMEH6p/xl5UXH1Rs/hfChUZvatQAk5 h2fg5nxw+wJYpoFvko4K/Ar7geGqpCKUK6pQORqs3w2Xq8+/cgBx40nMlWzC7zZy pzc2WrRAS/+Rf+AlQW8A1mWgHSK5Q9IKJh4BCwrIVdxI1CW2MIn5Dosk+e/a6LZy crcYqXN49NlVw2KkY8Cy5mE+lA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:15:14 2026 by rpki-client