$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: 3MefVJfh2A4r5T9IR4A54FqWerq+fkomn88y8nIn3EA= Subject key identifier: 1F:38:F5:BF:BF:2E:C7:7B:4D:03:E4:FB:EF:E4:5D:C9:15:90:B0:D7 Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 2574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 2561 Signing time: Thu 16 Apr 2026 15:43:01 +0000 Manifest this update: Thu 16 Apr 2026 15:43:01 +0000 Manifest next update: Thu 23 Apr 2026 15:43:01 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: VYsv4odiM0Ks96dM3EGZq69Iv/dz3XDyHI28A39i9dc=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: BM6Lva7IoWSTK1Hv52iTWPVD8QgDEeI0+e75+nUb4F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9588 (0x2574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Apr 16 15:43:01 2026 GMT Not After : Apr 23 15:43:01 2026 GMT Subject: CN=69e10385-06d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:ef:1d:66:52:38:5b:bb:90:79:32:21:f8: be:3b:eb:c9:d3:4c:ba:cf:95:b4:55:6e:07:4c:54: 7a:85:4e:6a:81:9f:31:c2:b0:f3:89:0b:85:fe:5c: 5f:4e:97:b0:c8:df:b2:7a:34:18:2f:b2:a8:0a:6d: 92:7f:05:3f:d0:56:dc:a6:2a:7a:63:14:06:4b:f7: 26:1c:6b:5e:19:c5:ac:12:0e:0b:e7:7e:88:59:01: 96:93:50:dc:33:99:0c:a0:b2:56:e4:ac:8e:56:1d: bd:54:e4:4e:34:31:34:ad:47:11:8a:96:9a:64:9f: 86:7f:7c:2f:0d:61:a2:a9:9d:43:b8:9e:ca:57:dc: c0:ce:8a:6a:be:f7:c0:ef:80:5b:21:4c:45:3d:34: 24:65:bf:2d:eb:5b:08:b8:42:a4:7c:fb:aa:30:e5: ea:52:dc:4b:e7:8c:d6:aa:8a:2c:b1:03:55:ff:99: 04:84:7b:11:7c:b7:89:51:e7:50:b9:e9:b4:07:99: 45:4c:d0:3f:00:1f:e2:bf:dd:20:32:27:b6:a5:12: 56:eb:6f:85:68:72:b6:3a:58:cf:80:45:ac:c1:f8: 1e:56:83:d3:12:5f:37:02:bd:31:fe:50:9e:fc:d3: 95:47:68:03:b9:94:42:b7:16:44:94:c2:aa:49:e2: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:F5:BF:BF:2E:C7:7B:4D:03:E4:FB:EF:E4:5D:C9:15:90:B0:D7 X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e2:b1:53:c6:1e:9e:39:1c:c3:b0:98:57:63:d6:d1:2e:c5: 8d:e0:30:e7:05:89:c8:9c:69:1f:6c:cf:90:dd:f9:0f:c1:a0: fe:b6:ab:b4:ad:77:bf:51:b0:d6:f7:fb:10:a9:3d:54:5d:e5: 2b:48:1a:1f:d5:04:77:3b:a2:81:9a:0a:25:ce:99:36:8a:96: ca:01:7b:76:2c:48:65:35:e9:23:c7:54:62:b7:2e:eb:14:8b: 62:87:f9:18:c6:04:7c:d7:f9:e6:7f:b7:73:37:bd:a7:8d:d0: ce:18:e7:25:c5:db:24:3c:21:e9:e6:5a:0a:5a:11:4f:5f:01: b7:a1:0e:1f:71:a2:bb:3a:da:1e:42:8c:d6:b7:99:9a:a5:b2: ec:a7:da:9b:cc:8c:a1:41:31:bc:be:5e:64:c9:d1:f4:24:3e: df:7c:ae:e4:f1:67:15:91:de:f7:0d:5e:0e:29:c4:b4:71:a4: 81:ca:1b:19:68:18:0c:70:a5:fa:22:91:fe:e1:52:e5:b4:90: c2:e5:77:fe:c0:15:4b:f9:93:43:5c:0e:90:e4:6b:84:6a:3b: cc:28:f0:de:26:ec:6d:5e:8d:d3:76:cb:2f:4c:e4:4a:a7:f6: f5:d2:a7:14:9b:7d:52:e6:77:5f:95:54:2e:10:ff:c9:9d:ff: 2d:4d:db:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjYwNDE2MTU0MzAxWhcNMjYwNDIzMTU0MzAxWjAYMRYwFAYD VQQDEw02OWUxMDM4NS0wNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4LvHWZSOFu7kHkyIfi+O+vJ00y6z5W0VW4HTFR6hU5qgZ8xwrDziQuF/lxf TpewyN+yejQYL7KoCm2SfwU/0Fbcpip6YxQGS/cmHGteGcWsEg4L536IWQGWk1Dc M5kMoLJW5KyOVh29VORONDE0rUcRipaaZJ+Gf3wvDWGiqZ1DuJ7KV9zAzopqvvfA 74BbIUxFPTQkZb8t61sIuEKkfPuqMOXqUtxL54zWqoossQNV/5kEhHsRfLeJUedQ uem0B5lFTNA/AB/iv90gMie2pRJW62+FaHK2OljPgEWswfgeVoPTEl83Ar0x/lCe /NOVR2gDuZRCtxZElMKqSeKG6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB849b+/ Lsd7TQPk++/kXckVkLDXMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI+KxU8Yenjkcw7CYV2PW0S7FjeAw5wWJyJxpH2zPkN35D8Gg/rartK13v1Gw 1vf7EKk9VF3lK0gaH9UEdzuigZoKJc6ZNoqWygF7dixIZTXpI8dUYrcu6xSLYof5 GMYEfNf55n+3cze9p43QzhjnJcXbJDwh6eZaCloRT18Bt6EOH3GiuzraHkKM1reZ mqWy7Kfam8yMoUExvL5eZMnR9CQ+33yu5PFnFZHe9w1eDinEtHGkgcobGWgYDHCl +iKR/uFS5bSQwuV3/sAVS/mTQ1wOkORrhGo7zCjw3ibsbV6N03bLL0zkSqf29dKn FJt9UuZ3X5VULhD/yZ3/LU3bEw== -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:17 2026 by rpki-client