$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json) Hash identifier: q3M6ed3FbbllkUZl3QPiMmK75byA/oCPIne6y5TqEzw= Subject key identifier: 3A:9E:82:1C:12:7B:A8:62:38:F1:AC:98:FB:F9:BE:18:1E:71:23:3B Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Certificate serial: 0A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft Manifest number: 0A42 Signing time: Thu 16 Apr 2026 19:36:42 +0000 Manifest this update: Thu 16 Apr 2026 19:36:41 +0000 Manifest next update: Thu 23 Apr 2026 19:36:41 +0000 Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: pys6SB3L+4Zyjk0vu2aSK1IGB+wfNUZyjxlOvRzlXJQ=) 2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Validity Not Before: Apr 16 19:36:41 2026 GMT Not After : Apr 23 19:36:41 2026 GMT Subject: CN=69e13a49-5d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:ef:6f:de:71:df:a7:7e:b0:30:28:8b:7c: 60:1a:b3:1f:f4:53:55:7e:87:30:cc:3e:66:68:e7: a6:81:2c:95:66:d9:15:f4:85:a0:d9:20:71:88:05: dc:09:dc:fb:1b:50:d4:0c:a8:55:20:dc:2c:02:14: 83:a0:ec:04:5c:55:e6:81:da:df:3c:f8:1f:ad:ec: cb:a6:8f:73:3e:48:e7:a9:ab:86:bd:c4:81:c5:8c: e6:04:16:3d:ed:3d:9f:ce:c3:56:c9:28:14:35:da: a2:8e:97:54:a5:ac:29:ca:54:44:49:13:07:75:fd: 5c:ca:34:57:25:28:17:67:5d:c8:45:26:d3:38:dd: 7e:6c:c9:59:ed:99:bb:4e:21:4c:dc:bc:f4:81:c7: 7e:1c:3c:ee:02:3e:a5:9d:4f:27:56:a8:ae:f5:80: 82:ea:94:bb:0d:fb:21:f0:92:c4:75:9f:7c:b8:0b: 31:57:8b:96:07:92:20:b6:67:bf:51:1e:4a:78:60: bd:f7:80:81:d9:e7:69:e6:7d:98:b6:ba:6b:71:fc: 0b:c0:57:a4:2e:05:2f:cd:0e:cb:1f:63:fe:fa:4e: 85:16:bb:5e:2b:e9:1e:71:41:b0:d1:9d:05:b8:b4: bd:19:7b:48:36:1f:54:00:6f:47:f4:ed:05:ec:16: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9E:82:1C:12:7B:A8:62:38:F1:AC:98:FB:F9:BE:18:1E:71:23:3B X509v3 Authority Key Identifier: keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:95:fc:ab:c8:e8:2c:ae:4a:d0:57:59:f3:31:a2:b1:28:09: 8a:e1:28:11:a0:64:10:9d:7f:db:09:16:24:63:58:c2:29:76: 18:07:4e:bb:65:9b:1a:0f:8d:c2:fb:b6:66:23:12:ee:5d:15: 80:17:65:0e:d3:4f:e2:65:88:ad:c5:5a:93:ef:28:ca:d2:fc: 59:a6:f3:6a:4f:0e:bc:82:f1:09:79:aa:cf:fb:ea:26:45:ad: 10:eb:a9:74:d6:a1:49:65:56:2a:7a:80:0d:21:84:33:31:95: 84:6f:1d:42:d6:71:be:47:8f:63:09:77:c4:7c:43:99:84:a2: 3f:8d:68:fd:e0:e3:03:01:2e:9b:f7:96:86:2d:2b:ee:7e:d5: 97:20:b5:b9:1e:df:f0:f3:6d:a9:80:c1:7f:d5:d4:d0:35:65: 88:df:53:5a:98:ba:e4:53:7c:c2:53:22:fb:32:06:0e:a4:f6: 29:05:f8:fa:61:71:36:b9:95:81:7b:b6:26:5c:05:c5:b7:bb: f1:d2:4e:12:8b:40:13:ec:24:66:09:36:b8:91:aa:b4:4c:3a: 51:cc:ce:d0:9d:9c:f3:fa:4c:8a:1e:bc:09:09:9b:ed:43:e6: eb:b9:87:e2:26:66:f8:e4:fa:80:49:aa:a0:f5:1b:ca:1d:2c: 96:5f:7d:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz NEQwMTAyNzcwHhcNMjYwNDE2MTkzNjQxWhcNMjYwNDIzMTkzNjQxWjAYMRYwFAYD VQQDEw02OWUxM2E0OS01ZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kPvb95x36d+sDAoi3xgGrMf9FNVfocwzD5maOemgSyVZtkV9IWg2SBxiAXc Cdz7G1DUDKhVINwsAhSDoOwEXFXmgdrfPPgfrezLpo9zPkjnqauGvcSBxYzmBBY9 7T2fzsNWySgUNdqijpdUpawpylRESRMHdf1cyjRXJSgXZ13IRSbTON1+bMlZ7Zm7 TiFM3Lz0gcd+HDzuAj6lnU8nVqiu9YCC6pS7Dfsh8JLEdZ98uAsxV4uWB5Igtme/ UR5KeGC994CB2edp5n2YtrprcfwLwFekLgUvzQ7LH2P++k6FFrteK+kecUGw0Z0F uLS9GXtINh9UAG9H9O0F7Bbr4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqeghwS e6hiOPGsmPv5vhgecSM7MB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5 NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr WlMzWE1IVHlnc00wMEJBbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjZX8q8joLK5K0FdZ8zGisSgJiuEoEaBkEJ1/2wkWJGNYwil2GAdOu2WbGg+N wvu2ZiMS7l0VgBdlDtNP4mWIrcVak+8oytL8Wabzak8OvILxCXmqz/vqJkWtEOup dNahSWVWKnqADSGEMzGVhG8dQtZxvkePYwl3xHxDmYSiP41o/eDjAwEum/eWhi0r 7n7VlyC1uR7f8PNtqYDBf9XU0DVliN9TWpi65FN8wlMi+zIGDqT2KQX4+mFxNrmV gXu2JlwFxbe78dJOEotAE+wkZgk2uJGqtEw6UczO0J2c8/pMih68CQmb7UPm67mH 4iZm+OT6gEmqoPUbyh0sll99pw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:06 2026 by rpki-client