$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: nmoL+m6gxja4AYnTI9e+xa7tFs54FOFDD1Nhhny8Y3w= Subject key identifier: 60:BC:97:A1:7D:BA:BE:7D:EF:33:99:06:7D:3C:8B:01:24:46:B8:78 Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 038F Signing time: Fri 17 Apr 2026 00:41:15 +0000 Manifest this update: Fri 17 Apr 2026 00:41:15 +0000 Manifest next update: Fri 24 Apr 2026 00:41:15 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: G8bi2chUL4W+7O+eB3JeZmIzycLahfackNHmlP74x6M=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: ebLn1kmFFAVk7O0jw8QI6JsXqB37NuyRPaNONVz+j0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Apr 17 00:41:15 2026 GMT Not After : Apr 24 00:41:15 2026 GMT Subject: CN=69e181ab-e3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:00:9a:17:4c:c9:2e:ec:12:c6:af:cb:7b: 11:28:5a:a4:2b:3f:a5:f8:9b:0d:73:19:9a:c0:49: c2:d9:a9:99:a2:f2:9d:ea:d3:a7:20:83:ca:0b:92: 68:94:10:28:26:08:8c:b7:3b:f2:70:a6:85:bc:c4: 86:cd:40:cc:42:07:84:a9:c9:b1:85:69:1d:9a:5d: b9:1f:7a:ca:d6:c2:22:d8:a1:3d:fd:e5:73:3f:ae: 9a:34:cd:0f:ed:e9:02:2b:ef:79:2b:ed:12:85:a6: 33:8c:af:81:b7:59:ad:66:0b:6e:02:c7:27:22:cb: 86:e2:1f:4c:b3:6e:2b:d7:65:e5:01:8f:aa:5b:f3: dd:96:81:7c:a8:f1:d7:f1:c2:1d:e8:4b:9e:39:d8: e7:a5:e8:cd:46:a4:e1:77:c1:d3:77:97:48:00:4d: 2a:f9:23:d8:80:0a:17:0e:fa:8a:7b:bc:3a:2c:d1: da:23:6f:6f:c5:21:0e:6c:83:1b:38:ce:09:18:fc: b5:88:2a:46:cc:b0:84:6b:58:ae:92:49:b1:35:e5: 51:2e:a6:06:22:d5:0e:7d:67:56:68:9b:db:db:19: 28:d3:31:da:aa:91:6f:e8:e3:83:ea:68:42:b9:26: 2a:50:e1:77:7f:ef:8e:47:03:00:db:60:c5:01:3a: 49:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:97:A1:7D:BA:BE:7D:EF:33:99:06:7D:3C:8B:01:24:46:B8:78 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:67:de:de:3d:db:74:d9:8b:50:71:57:03:ae:c6:24:7f:07: 1e:1b:71:ba:45:af:ea:2d:9f:9c:21:5a:0e:4e:05:75:5f:6d: c5:a7:73:4e:9e:3a:d9:7e:d9:f4:ec:50:39:38:e6:a6:18:c8: f0:bc:c8:e5:9c:a7:b9:dc:96:82:84:84:f3:19:b9:d6:d0:85: cc:6f:fc:7b:fb:8e:b8:0b:76:f8:86:e9:66:39:fe:90:47:5c: 2c:17:6d:6d:b6:6f:8e:23:5a:f6:45:98:40:fc:e3:b4:3e:99: a1:50:e9:bb:65:84:74:e0:4d:56:2d:0d:a1:73:5c:d5:7c:9c: e5:b4:35:68:5b:44:ff:a7:17:b0:d3:a4:f4:36:eb:e2:4f:f5: 39:b2:bb:a8:1c:ea:3b:56:94:9e:96:dc:c1:9e:f7:fb:aa:7d: 75:44:0d:df:02:9d:3c:cd:01:37:f6:d4:58:19:88:31:15:46: 92:5f:7d:9a:24:16:79:d3:2f:4e:97:bb:7e:95:ae:d4:37:b5: 10:20:ce:84:fa:7d:dc:5f:85:0b:1a:9d:f6:93:96:96:c4:f6: 94:db:93:e9:1a:97:be:3d:08:b6:6c:4a:07:e5:9f:4f:53:06: 07:99:85:bc:5d:41:b1:12:e5:4b:80:9a:ee:0f:dc:52:93:27: 10:db:f8:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjYwNDE3MDA0MTE1WhcNMjYwNDI0MDA0MTE1WjAYMRYwFAYD VQQDEw02OWUxODFhYi1lM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b0AmhdMyS7sEsavy3sRKFqkKz+l+JsNcxmawEnC2amZovKd6tOnIIPKC5Jo lBAoJgiMtzvycKaFvMSGzUDMQgeEqcmxhWkdml25H3rK1sIi2KE9/eVzP66aNM0P 7ekCK+95K+0ShaYzjK+Bt1mtZgtuAscnIsuG4h9Ms24r12XlAY+qW/PdloF8qPHX 8cId6EueOdjnpejNRqThd8HTd5dIAE0q+SPYgAoXDvqKe7w6LNHaI29vxSEObIMb OM4JGPy1iCpGzLCEa1iukkmxNeVRLqYGItUOfWdWaJvb2xko0zHaqpFv6OOD6mhC uSYqUOF3f++ORwMA22DFATpJHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC8l6F9 ur597zOZBn08iwEkRrh4MB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2fe3j3bdNmLUHFXA67GJH8HHhtxukWv6i2fnCFaDk4FdV9txadzTp462X7Z 9OxQOTjmphjI8LzI5ZynudyWgoSE8xm51tCFzG/8e/uOuAt2+IbpZjn+kEdcLBdt bbZvjiNa9kWYQPzjtD6ZoVDpu2WEdOBNVi0NoXNc1Xyc5bQ1aFtE/6cXsNOk9Dbr 4k/1ObK7qBzqO1aUnpbcwZ73+6p9dUQN3wKdPM0BN/bUWBmIMRVGkl99miQWedMv Tpe7fpWu1De1ECDOhPp93F+FCxqd9pOWlsT2lNuT6RqXvj0ItmxKB+WfT1MGB5mF vF1BsRLlS4Ca7g/cUpMnENv49g== -----END CERTIFICATE-----Generated at Sat Apr 18 03:27:51 2026 by rpki-client