$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: 8M/kT2Z1ljZeWQ5fwQ22RnxNFq8RykhtiQQWEr9P9DQ= Subject key identifier: CD:E0:30:C5:9A:90:EC:26:8C:A5:7B:11:52:E2:B3:5B:40:2D:47:03 Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0E14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0DF9 Signing time: Thu 16 Apr 2026 17:46:25 +0000 Manifest this update: Thu 16 Apr 2026 17:46:25 +0000 Manifest next update: Thu 23 Apr 2026 17:46:25 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: 8EbPVOeDS5OeQT92KhI6gaGpR8nj2tHhTD6QG3/XIvw=) 2: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: nT2sh7uqTi1U5cwmoFpAbizu4Ra0Y+5JbyS+sH+1hZc=) 3: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE=) 4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: YHt1SbNsyMG4Q62rnhZuMa3T8SKHY5G8WGqZLcUa22M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3604 (0xe14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Apr 16 17:46:25 2026 GMT Not After : Apr 23 17:46:25 2026 GMT Subject: CN=69e12071-79d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:ee:03:ca:a7:97:1b:3f:1e:cb:3f:19:df: 4d:04:3d:34:f4:bd:b5:46:8c:e9:0d:be:2f:0a:47: 7f:2c:4e:2a:40:a2:f2:dd:5b:14:6a:09:00:8b:b7: b7:ba:6d:c6:60:e4:42:3a:b3:c5:12:f8:0b:8b:54: b6:c6:25:09:3e:5c:32:eb:8b:66:8e:c8:b2:c2:17: da:81:c3:85:87:25:5f:65:f3:2b:4b:8e:79:94:31: 3e:fe:0c:e8:3d:9f:db:85:7a:55:a5:6b:65:63:95: d0:07:c2:0c:1d:af:ac:80:82:e6:87:8b:1d:c9:df: 86:dd:57:41:1e:7b:91:dd:e1:4e:d4:99:4a:d3:9f: 3c:3c:77:ba:94:be:a2:2e:7b:b5:7a:31:9a:9d:cf: 27:74:64:55:1f:fd:50:77:03:41:c9:00:c8:80:d2: 97:f1:01:f8:1a:c7:b0:18:3c:d9:1a:63:d5:e4:e4: 11:28:bb:3d:3b:20:ed:04:83:0b:2c:8e:0b:81:c2: fb:01:27:c4:82:10:a2:f9:10:03:21:01:11:18:bf: 17:7a:25:1b:f8:67:6f:a5:1a:32:9d:96:ad:f8:94: 01:34:cb:1f:7c:d3:72:6e:09:c8:49:cd:66:8c:cc: 8e:01:c8:40:b0:ce:f5:39:3c:38:d3:00:44:e8:a4: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:30:C5:9A:90:EC:26:8C:A5:7B:11:52:E2:B3:5B:40:2D:47:03 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:5a:24:3d:5b:ea:0a:b1:c0:8f:51:e2:87:86:e5:f3:ed:6c: bf:1a:3e:ce:7f:78:8d:ee:14:b2:de:d6:1b:58:3c:46:11:09: 33:c3:75:77:13:71:8d:a7:35:09:3d:22:07:8a:d2:9e:65:f5: c2:41:2d:ae:bb:ba:60:94:52:ff:bd:d8:29:97:c0:85:a9:50: 7a:71:f9:d6:5e:e7:ab:0d:47:4c:78:e9:07:79:9d:92:df:82: 0f:78:e2:18:88:a6:3a:9b:04:61:32:18:d3:f8:a5:8d:b9:bf: 99:78:26:07:48:0a:39:37:0e:27:b2:69:9e:3e:80:2a:c1:13: e1:6f:20:c9:81:14:2f:36:91:78:aa:ef:dd:31:a5:54:09:d8: c2:49:57:6b:e9:f0:89:01:f0:4a:32:96:06:83:47:97:71:0c: 68:3f:57:57:41:e0:8b:82:69:b6:55:de:8d:95:c5:8e:a1:b8: 31:b1:02:a8:76:09:4e:0d:18:0a:9c:85:60:f5:b8:72:7f:32: 7f:e7:f5:a1:38:14:eb:6c:b2:35:ac:11:5f:2f:6c:5e:de:64: 26:13:3f:b9:02:8a:f8:89:f7:f5:2d:84:0d:cf:10:12:6f:c2: f6:0d:81:ea:4a:24:8a:d6:a5:0f:85:8c:d7:ad:bc:bc:44:61: 14:e9:71:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjYwNDE2MTc0NjI1WhcNMjYwNDIzMTc0NjI1WjAYMRYwFAYD VQQDEw02OWUxMjA3MS03OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ/uA8qnlxs/Hss/Gd9NBD009L21RozpDb4vCkd/LE4qQKLy3VsUagkAi7e3 um3GYORCOrPFEvgLi1S2xiUJPlwy64tmjsiywhfagcOFhyVfZfMrS455lDE+/gzo PZ/bhXpVpWtlY5XQB8IMHa+sgILmh4sdyd+G3VdBHnuR3eFO1JlK0588PHe6lL6i Lnu1ejGanc8ndGRVH/1QdwNByQDIgNKX8QH4GsewGDzZGmPV5OQRKLs9OyDtBIML LI4LgcL7ASfEghCi+RADIQERGL8XeiUb+GdvpRoynZat+JQBNMsffNNybgnISc1m jMyOAchAsM71OTw40wBE6KRwwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3gMMWa kOwmjKV7EVLis1tALUcDMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARFokPVvqCrHAj1Hih4bl8+1svxo+zn94je4Ust7WG1g8RhEJM8N1dxNxjac1 CT0iB4rSnmX1wkEtrru6YJRS/73YKZfAhalQenH51l7nqw1HTHjpB3mdkt+CD3ji GIimOpsEYTIY0/iljbm/mXgmB0gKOTcOJ7Jpnj6AKsET4W8gyYEULzaReKrv3TGl VAnYwklXa+nwiQHwSjKWBoNHl3EMaD9XV0Hgi4JptlXejZXFjqG4MbECqHYJTg0Y CpyFYPW4cn8yf+f1oTgU62yyNawRXy9sXt5kJhM/uQKK+In39S2EDc8QEm/C9g2B 6kokitalD4WM1628vERhFOlxlw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:20:59 2026 by rpki-client