$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft File: YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft (raw, json) Hash identifier: ZU0u65rZ3cv/kCWpZ+cd1WvKQqLnQkaA6IHdrXYiWFg= Subject key identifier: 0A:EE:63:2B:C6:FD:18:39:D3:36:6F:8F:E5:D6:06:AF:22:E3:0C:20 Authority key identifier: 60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68 Certificate issuer: /CN=A91E5A08/serialNumber=6006B9658313D864991619D6979B0F7E01E4B668 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft Manifest number: 0231 Signing time: Fri 17 Apr 2026 02:22:31 +0000 Manifest this update: Fri 17 Apr 2026 02:22:31 +0000 Manifest next update: Fri 24 Apr 2026 02:22:31 +0000 Files and hashes: 1: YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl (hash: RbWM1NQqnF2KYME93hJxBkzNugBlxCt8nK+9EOJYJBs=) 2: EC9A7C9EE26811EDBB19B85EC4F9AE02.roa (hash: kXMMTzpfUp5tzsj3ErSeWyi6kiUv6/A6nv/Z2vTJWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A08, serialNumber=6006B9658313D864991619D6979B0F7E01E4B668 Validity Not Before: Apr 17 02:22:31 2026 GMT Not After : Apr 24 02:22:31 2026 GMT Subject: CN=69e19967-7ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:75:c8:4f:1a:a0:9c:9a:75:e8:f5:f7:c9: 94:c3:8f:b7:93:c1:b5:80:3f:f0:d2:f2:27:da:fb: 30:17:64:f8:bc:fd:23:64:b3:c4:ec:7c:d1:74:22: d4:2e:26:63:7a:6a:7f:d8:dc:ec:44:62:0e:f1:02: a3:89:da:d8:99:a6:c3:51:08:73:bf:70:5f:37:c9: 1a:85:d2:a1:2f:bd:09:a6:83:aa:c3:47:bb:26:71: 18:d0:fd:07:54:6c:c9:52:b9:6e:a1:03:d8:a8:b8: f0:cb:de:4c:13:8f:a2:4a:5a:fc:7e:52:a4:78:9b: 4b:eb:d8:35:35:75:61:8a:59:04:1c:f3:da:93:7a: 0b:82:5f:32:b6:9f:a5:14:f3:c0:5f:99:cf:d2:fa: 35:50:77:51:a6:d3:1d:1d:cd:9d:96:03:b3:25:b9: a2:e9:b3:b3:c1:4a:70:f8:bc:39:04:de:1d:4c:b0: 87:c0:86:e7:9a:59:4c:fe:e8:b2:65:32:06:1b:46: 3c:9b:b4:2f:a6:2e:9d:e8:69:05:dd:5a:b1:9f:b5: 69:68:12:f7:b4:3f:26:a9:18:ea:f9:a6:8f:41:d5: c8:cc:03:da:c8:48:48:46:83:47:7d:a7:f7:fe:a2: 1d:a8:8e:89:2f:80:9e:30:28:5a:ad:cb:73:26:49: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EE:63:2B:C6:FD:18:39:D3:36:6F:8F:E5:D6:06:AF:22:E3:0C:20 X509v3 Authority Key Identifier: keyid:60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8c:e6:37:0c:cd:27:cb:08:9b:8c:e1:87:97:48:5c:f7:20: 61:78:ad:45:1b:59:63:a5:a0:cd:fd:d6:bb:fc:1e:74:38:8b: 8f:2e:4f:3d:6c:32:f6:8f:1e:82:ac:95:d0:32:a8:16:db:6b: 79:53:1e:32:a5:04:84:65:9c:17:68:33:b8:7c:88:e1:2b:b6: 05:1c:35:49:5c:07:3f:ed:a3:a1:14:a0:7f:25:aa:e5:7b:b3: b6:fe:c1:63:46:cf:e0:76:6a:d8:47:6a:a4:fe:61:12:22:30: 2f:22:21:ce:e0:c6:fa:2f:f6:6f:bc:53:23:09:a0:ab:73:e5: c1:d5:7b:a5:f8:4f:91:73:d8:0c:d5:0c:ae:dc:54:03:46:7a: f6:28:66:12:cb:f5:24:78:57:06:46:a5:3e:6d:e7:db:67:25: f3:99:59:f7:08:da:ce:e1:a7:d2:c9:3f:63:77:23:83:fa:f5: 15:eb:bd:78:e9:31:0b:ff:25:83:39:77:d5:87:1b:eb:89:27: 27:81:e4:88:c5:d2:2a:ea:ff:55:ed:11:19:3e:3d:52:ad:89: 99:83:52:81:99:54:d2:ad:d7:b8:11:d5:df:85:78:f7:b2:09: 7c:54:80:ce:c4:88:3a:db:61:ee:0c:45:bd:5f:7c:d1:d7:58: cb:f3:94:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBMDgxMTAvBgNVBAUTKDYwMDZCOTY1ODMxM0Q4NjQ5OTE2MTlENjk3OUIwRjdF MDFFNEI2NjgwHhcNMjYwNDE3MDIyMjMxWhcNMjYwNDI0MDIyMjMxWjAYMRYwFAYD VQQDEw02OWUxOTk2Ny03ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbR1yE8aoJyadej198mUw4+3k8G1gD/w0vIn2vswF2T4vP0jZLPE7HzRdCLU LiZjemp/2NzsRGIO8QKjidrYmabDUQhzv3BfN8kahdKhL70JpoOqw0e7JnEY0P0H VGzJUrluoQPYqLjwy95ME4+iSlr8flKkeJtL69g1NXVhilkEHPPak3oLgl8ytp+l FPPAX5nP0vo1UHdRptMdHc2dlgOzJbmi6bOzwUpw+Lw5BN4dTLCHwIbnmllM/uiy ZTIGG0Y8m7Qvpi6d6GkF3Vqxn7VpaBL3tD8mqRjq+aaPQdXIzAPayEhIRoNHfaf3 /qIdqI6JL4CeMCharctzJkly1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAruYyvG /Rg50zZvj+XWBq8i4wwgMB8GA1UdIwQYMBaAFGAGuWWDE9hkmRYZ1pebD34B5LZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUEwOC9CMDYwQ0M1NEUy NjUxMUVEODUwQ0RFNTRDNEY5QUUwMi9ZQWE1WllNVDJHU1pGaG5XbDVzUGZnSGt0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lBYTVaWU1UMkdTWkZobldsNXNQZmdIa3RtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUEwOC9CMDYwQ0M1NEUyNjUxMUVEODUwQ0RFNTRDNEY5QUUwMi9ZQWE1WllNVDJH U1pGaG5XbDVzUGZnSGt0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALozmNwzNJ8sIm4zhh5dIXPcgYXitRRtZY6Wgzf3Wu/wedDiLjy5PPWwy9o8e gqyV0DKoFttreVMeMqUEhGWcF2gzuHyI4Su2BRw1SVwHP+2joRSgfyWq5Xuztv7B Y0bP4HZq2EdqpP5hEiIwLyIhzuDG+i/2b7xTIwmgq3PlwdV7pfhPkXPYDNUMrtxU A0Z69ihmEsv1JHhXBkalPm3n22cl85lZ9wjazuGn0sk/Y3cjg/r1Feu9eOkxC/8l gzl31Ycb64knJ4HkiMXSKur/Ve0RGT49Uq2JmYNSgZlU0q3XuBHV34V497IJfFSA zsSIOtth7gxFvV980ddYy/OU5A== -----END CERTIFICATE-----Generated at Fri Apr 17 14:29:45 2026 by rpki-client