$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: KLq+Yun1kdQfxEdq5E9kDeh4qPNhFdP9tlm8jU8OeK8= Subject key identifier: E6:F4:CE:6B:F6:BC:18:05:1E:1F:17:FA:39:BC:8B:B6:49:6E:3C:25 Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 01FD Signing time: Fri 17 Apr 2026 02:58:09 +0000 Manifest this update: Fri 17 Apr 2026 02:58:09 +0000 Manifest next update: Fri 24 Apr 2026 02:58:09 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: DKxAaVEKHylgZd7bdleTUM3qweKZW3Zbtnn43VMqNXE=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=) 3: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=) 4: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Apr 17 02:58:09 2026 GMT Not After : Apr 24 02:58:09 2026 GMT Subject: CN=69e1a1c1-1584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:9e:1c:07:7b:f9:73:8a:ca:3d:1f:ef:ac: f2:b9:83:3b:a3:3a:e8:9a:4f:be:44:14:33:90:d7: f1:47:86:04:fc:98:44:0f:4a:23:d0:9b:e3:52:be: b7:41:07:d5:e7:0e:81:e1:fe:e2:c2:08:12:16:0c: 0c:23:52:90:61:d9:7e:40:c6:54:bb:4f:2a:35:6d: d0:d1:66:21:2e:eb:bb:02:00:4e:a3:d0:1d:bd:71: 47:5e:69:62:b6:65:14:d7:3d:c3:2e:46:07:42:32: 45:0e:11:1e:7d:c3:a3:4b:08:bf:7f:2c:91:3f:30: fc:6b:14:29:cd:80:51:b3:1b:8c:12:a2:67:7b:ff: 67:36:22:5a:d1:d0:a1:b4:4f:25:cc:c9:ab:82:61: 08:ba:d5:99:f3:39:e6:40:56:40:03:bd:b7:b1:c5: 41:47:53:50:25:34:0b:41:92:1f:ca:f9:4b:37:de: 6d:a8:47:ac:39:5d:0f:ec:44:77:b0:ee:27:e0:f5: c9:5c:15:23:e5:92:85:a5:92:28:a1:98:ea:de:86: 35:a6:f9:3c:a7:4f:cc:4e:f9:9b:90:3c:cc:de:61: 03:e4:4a:2b:d8:25:70:2f:26:1a:c9:99:ff:fd:06: a8:da:bb:fc:f4:28:77:33:c7:da:6b:57:c3:06:d4: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F4:CE:6B:F6:BC:18:05:1E:1F:17:FA:39:BC:8B:B6:49:6E:3C:25 X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:42:d8:a5:15:fa:26:67:da:dc:22:0a:49:3b:2d:ea:d5:db: e7:0b:6f:8b:6b:5f:58:46:59:6e:34:af:1d:2e:26:b7:98:fe: d2:50:51:78:c5:61:a7:02:12:11:a2:86:6d:db:e0:13:18:9e: 89:53:75:f3:24:d9:80:32:83:9b:90:6a:b7:2f:d0:08:a7:8b: 06:6e:d4:6b:99:05:2c:3f:52:bc:ae:ae:88:3d:39:2c:c7:12: 9c:c1:a4:fa:8e:93:0c:3e:4f:b8:12:65:ad:b9:90:0d:0d:e7: 04:e4:f9:64:0a:ef:f6:a2:4b:b3:b1:e4:b7:07:43:31:be:28: 43:8f:95:03:6c:5a:a0:20:d8:64:b5:64:5a:e6:fa:53:44:ad: 5a:07:a7:32:af:fb:13:f7:a6:36:52:09:09:72:bb:a9:ee:3f: d7:65:cb:b5:68:4b:50:87:92:3f:58:b1:5c:3b:c5:ae:b3:53: b7:e6:d7:0a:2d:e9:d1:a7:ad:df:49:b8:e7:95:3b:1d:c7:16: 48:df:29:da:f3:31:ff:12:b8:e4:41:5e:d0:b9:1d:15:9f:82: a8:69:8f:5d:64:de:40:99:d9:a3:97:44:e0:c6:34:33:68:55: 3a:6f:58:ef:ec:3b:4d:a0:7d:b6:79:39:2d:d3:77:dd:e8:40: d3:12:f2:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjYwNDE3MDI1ODA5WhcNMjYwNDI0MDI1ODA5WjAYMRYwFAYD VQQDEw02OWUxYTFjMS0xNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucmeHAd7+XOKyj0f76zyuYM7ozromk++RBQzkNfxR4YE/JhED0oj0JvjUr63 QQfV5w6B4f7iwggSFgwMI1KQYdl+QMZUu08qNW3Q0WYhLuu7AgBOo9AdvXFHXmli tmUU1z3DLkYHQjJFDhEefcOjSwi/fyyRPzD8axQpzYBRsxuMEqJne/9nNiJa0dCh tE8lzMmrgmEIutWZ8znmQFZAA723scVBR1NQJTQLQZIfyvlLN95tqEesOV0P7ER3 sO4n4PXJXBUj5ZKFpZIooZjq3oY1pvk8p0/MTvmbkDzM3mED5Eor2CVwLyYayZn/ /Qao2rv89Ch3M8faa1fDBtQbAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOb0zmv2 vBgFHh8X+jm8i7ZJbjwlMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArULYpRX6Jmfa3CIKSTst6tXb5wtvi2tfWEZZbjSvHS4mt5j+0lBReMVhpwIS EaKGbdvgExieiVN18yTZgDKDm5Bqty/QCKeLBm7Ua5kFLD9SvK6uiD05LMcSnMGk +o6TDD5PuBJlrbmQDQ3nBOT5ZArv9qJLs7HktwdDMb4oQ4+VA2xaoCDYZLVkWub6 U0StWgenMq/7E/emNlIJCXK7qe4/12XLtWhLUIeSP1ixXDvFrrNTt+bXCi3p0aet 30m455U7HccWSN8p2vMx/xK45EFe0LkdFZ+CqGmPXWTeQJnZo5dE4MY0M2hVOm9Y 7+w7TaB9tnk5LdN33ehA0xLy9g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:56:00 2026 by rpki-client