$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: +tPts2QTulDnDTcBOeeFWogloMlX2MtdmuoqKsYTf/8= Subject key identifier: BC:E8:7F:BE:3F:8D:29:71:34:6E:28:55:02:F0:0E:CA:5E:76:09:36 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0C9A Signing time: Thu 16 Apr 2026 18:28:22 +0000 Manifest this update: Thu 16 Apr 2026 18:28:21 +0000 Manifest next update: Thu 23 Apr 2026 18:28:21 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: MVj8Ihqk0dZUBo2Tqd51TE5v8GNTgiySP8WWvvSYxeI=) 2: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=) 3: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Apr 16 18:28:21 2026 GMT Not After : Apr 23 18:28:21 2026 GMT Subject: CN=69e12a46-75af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:50:cd:2d:5d:91:3b:36:62:7b:95:da:22: 18:45:08:dd:9c:b2:a1:8d:ee:04:29:e5:1d:ce:fb: 4c:a4:66:ab:dd:c8:0e:7e:3f:d3:8b:1e:b9:b7:f5: 67:bc:e4:11:01:86:24:26:60:8f:47:80:6a:0a:e9: 94:d6:42:df:21:6c:49:d1:d4:29:aa:7e:69:54:1d: 9a:73:62:a3:06:41:fe:34:8d:f2:f5:f9:e9:44:04: ca:3e:cd:01:78:8d:91:53:0a:1e:b7:b5:1a:0b:19: a5:47:4c:57:bb:51:dc:24:e3:0a:13:63:5f:84:34: 52:52:07:24:04:0a:6e:f4:bc:f4:7d:44:77:73:e9: 9f:cd:8e:02:12:bf:eb:8f:af:84:dc:96:2a:ab:5c: 36:c5:01:45:b7:53:04:71:46:62:49:91:3b:59:2d: d7:11:6d:17:1d:f9:b9:ca:06:bc:cd:27:18:82:d6: ee:c4:06:cc:31:2e:62:59:a5:f0:d5:e9:f9:8f:55: 5c:70:f8:ad:43:b3:6d:ea:92:dd:94:9d:fe:d8:97: b1:6e:10:a0:ba:42:8d:8d:84:7a:5f:91:d3:4e:d0: a7:a6:ef:f5:02:ea:61:b2:cf:de:56:a1:ad:a0:3f: 40:f9:d2:e1:31:3c:f6:9f:d8:c7:6c:f2:04:9e:d3: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:7F:BE:3F:8D:29:71:34:6E:28:55:02:F0:0E:CA:5E:76:09:36 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:81:23:e3:56:3d:a8:20:12:b6:8d:82:10:66:2a:1f:a3:3b: d9:77:9e:fd:e8:4c:47:89:21:ff:fb:33:4b:80:65:c9:02:56: 4e:5f:8d:3c:fa:76:ba:e8:9a:75:6f:71:a9:33:c2:dd:5c:9e: 7c:a7:4e:97:5a:bb:c6:9a:86:4a:c8:4f:80:b4:a0:44:a2:6f: 58:fa:c3:93:07:5a:db:c6:63:91:6f:9e:ef:0f:f6:90:42:1b: c3:08:ad:ad:6d:44:05:51:19:be:61:6c:28:64:31:3e:27:f3: 61:1f:2d:9c:20:20:2d:de:08:02:c9:81:ca:a2:a1:26:e6:b9: 82:a9:e4:55:20:46:7d:7c:ca:9f:9a:2c:18:5f:29:be:14:f9: 63:41:13:d1:b1:35:62:09:02:21:19:a8:8a:9a:2f:8b:03:69: f0:7d:8b:06:c9:13:10:e6:4f:fa:82:9f:24:da:bf:f6:a0:04: 9c:c0:18:ed:ad:7a:25:fd:b8:35:45:92:bf:6a:0c:46:21:d7: ac:3e:1f:6d:32:40:99:18:95:e2:0a:15:ac:07:52:d1:fa:06: c0:94:08:22:eb:4f:b4:9e:8a:6e:b9:b6:2d:43:6b:9d:12:b0: 10:c5:47:d4:71:50:92:bf:92:1c:82:1e:84:92:79:78:82:b1: 61:8b:b7:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjYwNDE2MTgyODIxWhcNMjYwNDIzMTgyODIxWjAYMRYwFAYD VQQDEw02OWUxMmE0Ni03NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwlQzS1dkTs2YnuV2iIYRQjdnLKhje4EKeUdzvtMpGar3cgOfj/Tix65t/Vn vOQRAYYkJmCPR4BqCumU1kLfIWxJ0dQpqn5pVB2ac2KjBkH+NI3y9fnpRATKPs0B eI2RUwoet7UaCxmlR0xXu1HcJOMKE2NfhDRSUgckBApu9Lz0fUR3c+mfzY4CEr/r j6+E3JYqq1w2xQFFt1MEcUZiSZE7WS3XEW0XHfm5yga8zScYgtbuxAbMMS5iWaXw 1en5j1VccPitQ7Nt6pLdlJ3+2JexbhCgukKNjYR6X5HTTtCnpu/1Auphss/eVqGt oD9A+dLhMTz2n9jHbPIEntOQnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzof74/ jSlxNG4oVQLwDspedgk2MB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIEj41Y9qCASto2CEGYqH6M72Xee/ehMR4kh//szS4BlyQJWTl+NPPp2uuia dW9xqTPC3VyefKdOl1q7xpqGSshPgLSgRKJvWPrDkwda28ZjkW+e7w/2kEIbwwit rW1EBVEZvmFsKGQxPifzYR8tnCAgLd4IAsmByqKhJua5gqnkVSBGfXzKn5osGF8p vhT5Y0ET0bE1YgkCIRmoipoviwNp8H2LBskTEOZP+oKfJNq/9qAEnMAY7a16Jf24 NUWSv2oMRiHXrD4fbTJAmRiV4goVrAdS0foGwJQIIutPtJ6Kbrm2LUNrnRKwEMVH 1HFQkr+SHIIehJJ5eIKxYYu3MQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:06 2026 by rpki-client