$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: FmK7EumiqeudNETh6B4cZFnKyejeQnoIzt33BT2ACf8= Subject key identifier: 37:F3:E0:C8:D0:F3:5D:26:8D:F1:F2:67:1B:90:E8:42:36:73:CC:FD Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 0887 Signing time: Thu 16 Apr 2026 20:34:35 +0000 Manifest this update: Thu 16 Apr 2026 20:34:35 +0000 Manifest next update: Thu 23 Apr 2026 20:34:35 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: mmtHgLCpWateU/Jw42egMcGlDy/JHU6iZ4RVdVGl6gs=) 2: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: /mxloS7ClCcaj5x0floJR4T78S/qjwGI70YG2UCZk8Q=) 3: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: dQd4m5byeKJORC74YKFJB4r+c7cujg4OEtxCIHvr0lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Apr 16 20:34:35 2026 GMT Not After : Apr 23 20:34:35 2026 GMT Subject: CN=69e147db-78e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:41:fd:09:ff:e5:9f:6f:22:8c:da:80:d4: c9:bf:c7:83:ff:b7:fd:56:32:d0:30:b4:ef:23:17: bc:19:53:55:26:6f:fe:2c:72:67:d4:f0:17:b2:d5: 6b:1c:53:3f:c4:da:c6:c8:a9:f3:da:32:72:a2:69: cb:e7:7a:26:81:c9:61:48:ca:84:48:fe:32:23:c6: 1e:f0:b3:6b:7f:67:6a:3b:85:52:87:14:b1:f1:6d: 7f:19:48:e1:47:71:30:ae:62:24:62:82:2d:a8:e8: eb:46:62:c9:8d:6e:66:0a:6a:51:d8:73:0a:74:8e: 58:2b:ec:41:df:d1:d2:de:39:1a:83:af:12:44:fa: 82:c5:73:51:1a:db:c5:97:83:03:1d:8e:8f:32:8e: a7:d8:55:8f:95:95:5d:d0:67:21:3f:3a:e2:b8:63: d0:d8:b8:e0:df:eb:89:b3:f6:d8:f2:2f:0a:b2:dc: f5:a8:29:8a:d8:f4:65:17:ba:fc:80:cc:3c:ba:49: 07:d2:63:0d:6b:b4:c2:eb:00:d4:95:2f:06:3d:95: 30:78:01:a0:bd:3c:47:4d:24:4c:92:ab:6f:cb:7b: 1d:be:6f:d1:d9:43:03:50:7f:5b:f9:98:6f:3e:63: 45:00:74:1a:2d:7c:7a:34:88:ee:52:98:b1:39:f4: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F3:E0:C8:D0:F3:5D:26:8D:F1:F2:67:1B:90:E8:42:36:73:CC:FD X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:fb:66:4b:a2:c7:df:b9:e9:7d:3a:00:77:fd:9c:57:99: 7a:13:c7:5f:40:ff:cf:6e:3e:cd:20:0f:09:48:7d:18:21:b1: 6c:3a:c3:52:48:63:07:fa:ad:4a:bf:c0:04:ca:a3:16:22:aa: 64:06:81:c7:4b:2a:83:9c:24:63:46:87:50:e8:d4:5d:6b:4b: 75:38:c6:e6:0e:fd:42:51:c1:8c:e7:84:12:51:b9:71:fe:d4: f6:c6:7d:56:80:ef:35:8c:ee:7e:8f:c9:17:1c:ed:c2:d3:46: 44:8e:54:7d:3f:f9:46:2e:02:b4:c6:a2:4e:8c:e0:77:36:a7: 8b:ad:ad:e0:5a:11:60:e4:6f:59:61:51:b7:23:bb:23:8c:a4: 42:91:79:ec:bf:f2:6f:ff:04:68:53:33:ad:92:c8:b1:cf:5f: f0:d5:c2:bd:5e:f0:ef:fd:81:cb:22:17:35:1d:73:52:07:a9: 1e:dd:0a:4e:8a:aa:56:f2:6c:dc:f6:af:f0:6c:e1:45:38:d3: db:50:55:b0:53:0c:d0:37:5b:59:75:cf:a0:4f:3e:78:0c:0c: 75:e9:1d:03:b3:9e:60:78:7c:f1:5a:3e:8f:9b:56:3f:3e:5a: b2:04:b6:24:7a:12:36:be:23:e5:f9:30:d4:86:24:d5:45:07: 6e:60:8b:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwNDE2MjAzNDM1WhcNMjYwNDIzMjAzNDM1WjAYMRYwFAYD VQQDEw02OWUxNDdkYi03OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT5B/Qn/5Z9vIozagNTJv8eD/7f9VjLQMLTvIxe8GVNVJm/+LHJn1PAXstVr HFM/xNrGyKnz2jJyomnL53omgclhSMqESP4yI8Ye8LNrf2dqO4VShxSx8W1/GUjh R3EwrmIkYoItqOjrRmLJjW5mCmpR2HMKdI5YK+xB39HS3jkag68SRPqCxXNRGtvF l4MDHY6PMo6n2FWPlZVd0GchPzriuGPQ2Ljg3+uJs/bY8i8Kstz1qCmK2PRlF7r8 gMw8ukkH0mMNa7TC6wDUlS8GPZUweAGgvTxHTSRMkqtvy3sdvm/R2UMDUH9b+Zhv PmNFAHQaLXx6NIjuUpixOfSX1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfz4MjQ 810mjfHyZxuQ6EI2c8z9MB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK9b7Zkuix9+56X06AHf9nFeZehPHX0D/z24+zSAPCUh9GCGxbDrDUkhjB/qt Sr/ABMqjFiKqZAaBx0sqg5wkY0aHUOjUXWtLdTjG5g79QlHBjOeEElG5cf7U9sZ9 VoDvNYzufo/JFxztwtNGRI5UfT/5Ri4CtMaiTozgdzani62t4FoRYORvWWFRtyO7 I4ykQpF57L/yb/8EaFMzrZLIsc9f8NXCvV7w7/2ByyIXNR1zUgepHt0KToqqVvJs 3Pav8GzhRTjT21BVsFMM0DdbWXXPoE8+eAwMdekdA7OeYHh88Vo+j5tWPz5asgS2 JHoSNr4j5fkw1IYk1UUHbmCLEg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:07:58 2026 by rpki-client