$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: 4j72xbGrSX/V8nTY4sdh1jukW9StKk2RexqGt2H7V2Q= Subject key identifier: EE:8D:76:00:5F:C1:7A:7A:1A:5A:ED:5A:09:50:50:87:92:E7:4F:62 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 04D1 Signing time: Thu 16 Apr 2026 23:48:55 +0000 Manifest this update: Thu 16 Apr 2026 23:48:54 +0000 Manifest next update: Thu 23 Apr 2026 23:48:54 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: FW3s5mX9aRtm4Me+bLVh7LC3T9SoMx9foPGtQFn1OTk=) 2: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: e8gT8HqV1esire/8xcI7iv1N+KlJ6UFqhxx1NHbDo3o=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: cfcf5ZIlJUYMjr0+qHEumL0rToA0BJQdmmF24Iwecxg=) 4: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 39C+hq9yHLOlvpEI0BBXna/9+vYl0n36FnAzYDNDqZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Apr 16 23:48:54 2026 GMT Not After : Apr 23 23:48:54 2026 GMT Subject: CN=69e17567-e7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:a1:d0:66:65:d4:de:0b:a0:09:43:75:28: 4b:aa:ba:bf:a3:ee:fb:a4:a3:65:fd:37:dd:43:c9: 9d:aa:6c:62:ec:ac:6d:a8:95:65:6b:d4:4e:b4:fd: 04:2d:66:7c:3e:74:29:01:d5:80:45:56:57:9d:2e: 01:a1:9e:9a:43:50:df:26:db:9d:5c:69:61:aa:f2: 8c:5e:2a:f5:71:a7:ce:1f:cd:f0:36:86:69:e8:44: 6c:6a:43:04:e5:91:a2:03:af:0e:06:49:1c:94:f8: e8:77:2e:06:eb:7e:56:07:26:12:83:9f:aa:14:12: aa:1f:b9:03:34:26:ef:b7:96:c7:29:70:5b:bd:23: 01:a7:24:30:c0:da:52:0b:72:45:a8:0b:3f:05:5a: f8:21:f2:a2:ac:d9:cc:b4:5b:ee:64:2a:b3:1d:d6: 2c:72:40:ff:f1:79:ce:23:a5:6a:6d:fd:82:37:25: 5b:a0:1d:d9:ae:2b:48:f4:24:fe:c4:7f:ad:e5:07: fa:b1:a1:52:f8:d5:d6:b0:4e:50:3e:ff:8a:86:ba: b2:43:d1:2e:fe:ac:ea:9b:7a:59:fe:45:2d:91:b5: 95:a0:48:3d:41:86:a5:d1:5f:3c:a0:50:93:ce:89: 8b:fd:54:0f:c5:d4:f8:d7:43:a9:2c:38:60:44:29: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:76:00:5F:C1:7A:7A:1A:5A:ED:5A:09:50:50:87:92:E7:4F:62 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:5c:af:54:51:9d:24:48:90:f4:5e:e9:63:ae:b9:76:ba:aa: 93:f8:18:f4:cd:28:71:51:7f:56:6b:a1:47:9d:1a:ca:19:e8: f7:64:ba:6e:31:3e:ff:79:e1:75:c2:d1:d7:db:ac:8a:31:15: 3c:d5:45:1b:6d:02:3a:4c:6d:c4:c8:57:67:d2:93:f3:3d:e8: f0:b3:62:e8:4f:1a:a1:f5:d7:d1:24:62:ba:c4:36:0e:ff:1a: 79:dd:bd:c2:8d:94:5f:e1:7d:09:b7:5c:61:e0:62:42:b2:2e: ce:d5:98:86:98:a7:ac:f0:d5:7f:e4:65:dc:0f:a6:12:dc:aa: 49:43:56:bd:1d:9e:4c:30:80:75:b6:97:5a:85:44:e7:67:f0: 11:99:78:16:3a:d9:dd:33:97:df:94:67:b1:19:65:55:1a:ce: 80:80:76:1b:1a:7a:bc:e6:1e:56:2f:6c:6f:0b:c0:2f:b1:7f: bc:b1:35:e6:57:ec:fd:8e:16:42:5e:49:7f:c3:3c:4a:09:49: 5b:3e:9e:3f:84:0e:36:aa:f8:f5:f2:1a:13:8f:b4:0f:4b:37: 3e:02:d9:69:a3:ee:fc:56:46:24:78:8a:07:19:d3:03:2b:2e: 18:52:8a:e0:69:f3:48:b6:03:a6:74:7f:1b:2e:62:c4:55:bd: dc:a9:fd:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjYwNDE2MjM0ODU0WhcNMjYwNDIzMjM0ODU0WjAYMRYwFAYD VQQDEw02OWUxNzU2Ny1lN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso2h0GZl1N4LoAlDdShLqrq/o+77pKNl/TfdQ8mdqmxi7KxtqJVla9ROtP0E LWZ8PnQpAdWARVZXnS4BoZ6aQ1DfJtudXGlhqvKMXir1cafOH83wNoZp6ERsakME 5ZGiA68OBkkclPjody4G635WByYSg5+qFBKqH7kDNCbvt5bHKXBbvSMBpyQwwNpS C3JFqAs/BVr4IfKirNnMtFvuZCqzHdYsckD/8XnOI6Vqbf2CNyVboB3ZritI9CT+ xH+t5Qf6saFS+NXWsE5QPv+KhrqyQ9Eu/qzqm3pZ/kUtkbWVoEg9QYal0V88oFCT zomL/VQPxdT410OpLDhgRCkQewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6NdgBf wXp6GlrtWglQUIeS509iMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv1yvVFGdJEiQ9F7pY665drqqk/gY9M0ocVF/VmuhR50ayhno92S6bjE+/3nh dcLR19usijEVPNVFG20COkxtxMhXZ9KT8z3o8LNi6E8aofXX0SRiusQ2Dv8aed29 wo2UX+F9CbdcYeBiQrIuztWYhpinrPDVf+Rl3A+mEtyqSUNWvR2eTDCAdbaXWoVE 52fwEZl4FjrZ3TOX35RnsRllVRrOgIB2Gxp6vOYeVi9sbwvAL7F/vLE15lfs/Y4W Ql5Jf8M8SglJWz6eP4QONqr49fIaE4+0D0s3PgLZaaPu/FZGJHiKBxnTAysuGFKK 4GnzSLYDpnR/Gy5ixFW93Kn9PA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:34:55 2026 by rpki-client