$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: LKS6D3TgSAXrz0fPJU9FoQm7g335AHJ6KhSye/SbkiU= Subject key identifier: 43:07:C6:28:26:B2:13:54:C7:91:9C:E5:73:45:9A:C0:6D:6A:31:4C Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 08A2 Signing time: Thu 16 Apr 2026 20:24:54 +0000 Manifest this update: Thu 16 Apr 2026 20:24:53 +0000 Manifest next update: Thu 23 Apr 2026 20:24:53 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: q5/1FqC6/lSCzlf3WfBd2oJY4YN9wVO1Z+K+hGd254c=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Apr 16 20:24:53 2026 GMT Not After : Apr 23 20:24:53 2026 GMT Subject: CN=69e14596-9c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:0e:0c:00:f2:da:75:c9:b2:a5:59:54:ce: 56:25:2f:58:bb:28:70:3c:57:c9:f2:db:8e:9b:e0: a8:17:7e:7c:e5:62:0c:17:78:3c:02:45:7a:fb:ff: 80:36:e6:57:08:a5:d1:4a:a7:28:22:66:c7:82:b4: b7:db:18:b5:1a:aa:7b:b5:2b:16:bb:e2:b5:d7:06: 74:c4:d7:34:0a:2b:36:c4:53:a0:be:32:07:a6:72: 37:2c:55:07:c0:a0:62:9d:e7:dc:bc:23:ea:41:26: 61:df:ec:c8:1b:a1:32:8e:6d:0a:00:47:db:e3:e6: 3d:d2:f3:6d:6b:63:b5:03:da:07:5c:4b:9d:1b:09: 7a:68:e1:ce:e9:8e:a8:79:c0:fc:5f:7d:cb:fa:c9: e6:3d:ca:5c:67:50:34:a5:1e:80:6f:b9:9b:f5:ad: 94:d0:b4:e6:15:eb:45:50:07:f7:3b:79:7c:0a:f4: 75:88:94:13:6f:bf:26:3b:42:cf:40:3d:d4:3d:f2: a8:64:29:fc:fe:a2:32:b1:3f:c5:a5:df:7d:61:e1: b1:cb:f5:be:43:e4:ff:a5:01:8c:30:f9:40:d3:ba: 3a:3d:1a:ce:77:ab:63:d9:a0:93:9f:5e:73:5b:c2: e9:0e:6f:06:00:cb:da:74:33:ce:0a:f8:a7:29:94: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:07:C6:28:26:B2:13:54:C7:91:9C:E5:73:45:9A:C0:6D:6A:31:4C X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:35:d4:d2:e6:b9:37:d7:74:52:39:3d:3f:3b:c3:73:f5: 68:ca:5d:74:6f:65:fc:52:37:07:b3:09:c2:3a:54:d7:c9:ce: 09:51:9f:da:a1:ac:3a:a7:6e:2a:21:6e:f5:ea:6a:00:fa:1e: 3f:62:71:8b:a3:72:83:3d:91:f8:0c:fb:6f:94:a9:a6:d6:41: 33:b4:6e:47:02:5e:82:48:28:73:f0:b2:84:13:c6:ba:7c:c9: 24:0c:c8:23:5b:37:40:0e:3e:12:2f:cb:d5:e8:d2:7e:9b:3f: e8:34:f4:d9:7f:07:12:6c:a0:a7:e1:6f:01:ef:de:83:5d:4b: 44:90:90:05:d5:98:a4:db:49:ff:a1:e1:e4:bb:18:46:6f:1b: 90:3b:99:8f:83:48:01:6f:58:6f:38:7f:6d:48:fa:cf:be:e2: ff:e5:2e:f0:1c:1f:84:ea:15:0c:de:fd:1d:11:1f:55:79:77: da:51:38:7f:68:61:d7:f2:a0:93:49:28:92:0e:cf:3e:a6:67: f2:18:86:4c:3b:5a:87:a4:bd:9c:27:ce:5c:54:f9:eb:e4:24: a1:0b:48:0f:db:63:f7:1d:72:3f:f9:9f:0a:30:1f:f6:cd:d9: 30:8c:b6:35:ca:29:4e:07:5d:8d:48:75:0a:74:57:5d:af:53: 34:2c:af:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjYwNDE2MjAyNDUzWhcNMjYwNDIzMjAyNDUzWjAYMRYwFAYD VQQDEw02OWUxNDU5Ni05YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu84ODADy2nXJsqVZVM5WJS9YuyhwPFfJ8tuOm+CoF3585WIMF3g8AkV6+/+A NuZXCKXRSqcoImbHgrS32xi1Gqp7tSsWu+K11wZ0xNc0Cis2xFOgvjIHpnI3LFUH wKBinefcvCPqQSZh3+zIG6Eyjm0KAEfb4+Y90vNta2O1A9oHXEudGwl6aOHO6Y6o ecD8X33L+snmPcpcZ1A0pR6Ab7mb9a2U0LTmFetFUAf3O3l8CvR1iJQTb78mO0LP QD3UPfKoZCn8/qIysT/Fpd99YeGxy/W+Q+T/pQGMMPlA07o6PRrOd6tj2aCTn15z W8LpDm8GAMvadDPOCvinKZSM9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMHxigm shNUx5Gc5XNFmsBtajFMMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQbw11NLmuTfXdFI5PT87w3P1aMpddG9l/FI3B7MJwjpU18nOCVGf2qGsOqdu KiFu9epqAPoeP2Jxi6Nygz2R+Az7b5SpptZBM7RuRwJegkgoc/CyhBPGunzJJAzI I1s3QA4+Ei/L1ejSfps/6DT02X8HEmygp+FvAe/eg11LRJCQBdWYpNtJ/6Hh5LsY Rm8bkDuZj4NIAW9Ybzh/bUj6z77i/+Uu8BwfhOoVDN79HREfVXl32lE4f2hh1/Kg k0kokg7PPqZn8hiGTDtah6S9nCfOXFT56+QkoQtID9tj9x1yP/mfCjAf9s3ZMIy2 NcopTgddjUh1CnRXXa9TNCyv0g== -----END CERTIFICATE-----Generated at Fri Apr 17 18:17:41 2026 by rpki-client