$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json) Hash identifier: 1Rk+VGiNOPYm8bUqHhF4pLt4kUkyrjmTEJFaiyr1ZE4= Subject key identifier: 54:B6:88:1C:FA:6E:EC:9A:3F:7B:45:9C:EB:73:0A:DC:BB:1E:22:1E Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 1121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft Manifest number: 1106 Signing time: Thu 16 Apr 2026 17:12:47 +0000 Manifest this update: Thu 16 Apr 2026 17:12:46 +0000 Manifest next update: Thu 23 Apr 2026 17:12:46 +0000 Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: KX9pVWYZQtUSgtyU2l9ft2iMGA2lr4KHjv2LzrDiyCU=) 2: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: aScypq58ma32Blk4gXAn5hRCMA++RlRKUglRyBdAIIU=) 3: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: QNd+7yoJE7XGdb3l9stbVIXGPJdYrSjK5lDsTdFfmX0=) 4: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: MInSGZWk/+V+/O784VPQkOPEvkikcYw1hh5xAfaMy+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4385 (0x1121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Apr 16 17:12:46 2026 GMT Not After : Apr 23 17:12:46 2026 GMT Subject: CN=69e1188e-6fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:9d:b7:bb:5a:11:fa:c4:a8:b3:95:cb:14: f5:a5:8e:ac:fa:cb:17:7b:ae:58:33:80:68:c2:86: 85:36:5a:a4:d6:17:b5:0b:fd:a7:2e:d9:6e:d1:4b: 8d:b1:38:26:50:8a:0d:2e:81:ec:e9:fc:c5:0f:e7: f7:b8:b4:fd:02:3d:fc:99:0a:9e:c1:27:2c:78:e7: e5:3c:c9:49:68:12:07:54:29:01:38:5c:c5:58:e6: e3:7f:4a:9e:e5:94:e2:10:46:22:35:d1:8d:be:8a: c2:7d:16:4d:87:50:5e:f6:47:73:75:91:89:0d:2f: 59:58:83:8a:8c:da:c1:8c:54:51:8a:ef:98:d2:a1: ff:32:cf:9d:e8:c1:ed:1b:27:99:f1:36:3c:e7:73: 17:fb:f2:12:c9:9c:fb:1d:44:32:e7:45:ac:5d:2a: 42:29:ec:38:5a:cf:97:60:09:3e:a0:0a:37:59:4e: 36:30:31:d4:95:72:02:74:57:ae:59:0e:27:7a:60: 7e:ba:ee:43:49:88:15:80:00:46:81:e5:7a:00:3b: 5f:32:77:3a:52:db:d2:61:64:7d:9b:78:31:04:9f: 13:a1:47:ef:ca:96:fc:54:52:86:b9:61:f1:bb:83: 74:90:e8:06:91:39:f4:7a:85:05:9c:8b:c2:8e:0d: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B6:88:1C:FA:6E:EC:9A:3F:7B:45:9C:EB:73:0A:DC:BB:1E:22:1E X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:dd:5b:dc:e0:75:bb:2a:88:48:ff:c0:70:f5:85:f6:40:e3: b7:30:38:2e:0d:b8:fb:52:96:99:b6:ae:37:31:ae:76:0d:6b: 4e:22:57:e4:0b:d9:39:ad:5b:01:cf:79:c3:95:d5:40:8c:ae: 9f:c3:24:0b:4b:7b:2e:5b:79:68:43:40:62:4a:3b:3f:7d:ba: 1b:66:04:f1:60:b4:81:d7:8b:dc:47:e7:ee:d1:6d:84:71:ee: 77:4d:9a:5b:ad:01:8d:6f:63:c9:c3:88:9f:c5:28:91:a4:41: 90:e9:00:4d:5c:b3:c1:dd:74:14:bb:c0:e4:5f:aa:ff:7d:f4: 66:e4:f1:3a:2d:82:3a:49:48:fa:80:48:e0:80:83:54:55:4a: 9d:d7:7f:e8:61:b9:e2:96:f0:ca:e6:42:53:45:82:b4:a5:db: 6f:7a:39:96:4f:69:60:71:0b:a4:93:ba:99:2f:3d:0e:86:8e: fc:e8:1a:bb:9f:4e:58:74:4c:ba:b0:b1:cc:80:5f:b3:91:f7: 1d:80:de:2b:7d:7d:6d:2c:d5:f5:64:05:bb:02:34:1f:7d:b3: 0e:36:a5:47:71:7f:dd:a3:35:5c:b8:c3:d8:a0:32:20:51:b7: ad:a1:94:90:9b:24:1d:58:8c:57:a5:b8:f3:a6:51:76:27:45: a6:8f:44:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjYwNDE2MTcxMjQ2WhcNMjYwNDIzMTcxMjQ2WjAYMRYwFAYD VQQDEw02OWUxMTg4ZS02ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx92dt7taEfrEqLOVyxT1pY6s+ssXe65YM4BowoaFNlqk1he1C/2nLtlu0UuN sTgmUIoNLoHs6fzFD+f3uLT9Aj38mQqewScseOflPMlJaBIHVCkBOFzFWObjf0qe 5ZTiEEYiNdGNvorCfRZNh1Be9kdzdZGJDS9ZWIOKjNrBjFRRiu+Y0qH/Ms+d6MHt GyeZ8TY853MX+/ISyZz7HUQy50WsXSpCKew4Ws+XYAk+oAo3WU42MDHUlXICdFeu WQ4nemB+uu5DSYgVgABGgeV6ADtfMnc6UtvSYWR9m3gxBJ8ToUfvypb8VFKGuWHx u4N0kOgGkTn0eoUFnIvCjg2pWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFS2iBz6 buyaP3tFnOtzCty7HiIeMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0 V0Y0eENzMk5feXNmdWFYeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFN1b3OB1uyqISP/AcPWF9kDjtzA4Lg24+1KWmbauNzGudg1rTiJX5AvZOa1b Ac95w5XVQIyun8MkC0t7Llt5aENAYko7P326G2YE8WC0gdeL3Efn7tFthHHud02a W60BjW9jycOIn8UokaRBkOkATVyzwd10FLvA5F+q/330ZuTxOi2COklI+oBI4ICD VFVKndd/6GG54pbwyuZCU0WCtKXbb3o5lk9pYHELpJO6mS89DoaO/Ogau59OWHRM urCxzIBfs5H3HYDeK319bSzV9WQFuwI0H32zDjalR3F/3aM1XLjD2KAyIFG3raGU kJskHViMV6W486ZRdidFpo9EJQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:28 2026 by rpki-client