$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: BPOebsE+VOGrIfOsrvlsrODpfNveVplmPfliv/0a2os= Subject key identifier: FE:CD:67:55:42:32:6C:07:D1:EE:A0:B1:37:74:82:A8:26:7E:46:9B Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 3537 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 3530 Signing time: Thu 16 Apr 2026 15:02:11 +0000 Manifest this update: Thu 16 Apr 2026 15:02:11 +0000 Manifest next update: Thu 23 Apr 2026 15:02:11 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: QotCrAiFuaYOmVgGiSEaWJZXMPO1w6AGP43qD7X/H+k=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: oxiDTJi92uEmvEoDjgv/y1DqmarljGA90TImE98cgWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13623 (0x3537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Apr 16 15:02:11 2026 GMT Not After : Apr 23 15:02:11 2026 GMT Subject: CN=69e0f9f3-8f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:c9:36:8a:0b:1d:b8:32:76:d6:3c:01:99: fa:ec:ab:ee:ab:e1:05:08:9c:db:e0:8f:78:46:23: 98:fe:c9:82:da:7d:d9:2d:21:47:7b:9a:fc:a7:d4: 9c:35:c5:2d:01:26:a5:35:78:d2:f9:eb:0b:ba:d9: 5d:01:16:c1:1a:70:76:53:b6:03:0c:d5:07:be:65: 4b:50:bb:a2:51:11:cc:af:73:ac:ad:fb:2e:7a:b7: 71:55:62:f9:17:f3:5b:61:61:51:59:ff:73:f4:d9: bf:b4:1c:c8:45:12:55:fe:c8:d8:ba:0c:41:ff:94: 6c:19:ac:4a:c5:fc:16:1c:18:a9:7d:97:56:11:8d: 2d:e2:72:af:0f:6b:81:17:4f:d4:d5:e0:6f:04:c5: 62:07:71:d0:2c:2c:01:38:a2:cf:df:b9:ad:04:db: 4a:fa:b6:de:b3:27:95:18:69:c4:e4:25:ee:82:24: 6f:bd:b8:8d:69:0e:60:c2:b8:f8:20:d4:0e:e0:3e: e0:95:fc:61:ca:7e:64:f1:69:5e:d7:85:0f:a2:29: 81:e4:0e:68:8b:48:9b:bb:b9:80:0f:eb:5e:69:6b: 80:f2:37:97:93:c5:c1:bc:fa:1b:86:05:05:07:89: 9d:35:ae:35:86:65:f2:dc:49:34:47:0a:19:88:06: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:67:55:42:32:6C:07:D1:EE:A0:B1:37:74:82:A8:26:7E:46:9B X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:06:c1:82:eb:68:31:c3:ef:47:57:ef:11:33:8a:3e:a9:97: 9c:d0:a4:3e:29:c6:c0:ab:25:34:de:f2:12:93:4e:65:09:66: b9:f7:67:b5:ae:a7:d7:6b:84:f6:d7:9b:f8:7d:7f:2a:15:20: 79:e6:a5:f4:f9:1b:a5:93:7b:15:95:ce:8a:53:e4:a2:b6:92: e9:33:68:f2:dd:c4:85:1e:c1:74:98:6b:49:b8:6b:3f:33:9d: 6f:8d:c4:17:01:91:9c:fb:3f:78:3b:7e:2f:b8:69:91:64:33: 81:aa:5f:45:46:27:59:75:aa:83:48:98:30:12:5c:a8:a0:b4: 03:4e:c1:1f:a4:24:0c:17:80:de:bb:1a:70:7f:14:93:ca:49: a3:2b:5d:77:7e:e0:06:ba:76:e5:06:72:ac:7b:0a:58:22:8b: a0:fc:44:9b:90:a6:e1:b2:3a:b8:12:62:c6:c1:71:39:cf:ba: 01:9c:a5:74:89:cc:88:77:84:75:5c:cf:a2:67:29:34:be:5e: 54:94:09:96:a5:9f:66:7f:1e:36:15:96:06:05:2b:35:c5:13: f8:f0:a4:71:c3:97:d3:0f:bf:6b:a3:91:2f:d2:b5:d0:b7:5a: 26:56:69:a5:a1:bc:ef:86:9e:89:f5:84:b1:91:70:77:c6:12: b7:02:f2:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjYwNDE2MTUwMjExWhcNMjYwNDIzMTUwMjExWjAYMRYwFAYD VQQDEw02OWUwZjlmMy04ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqzJNooLHbgydtY8AZn67Kvuq+EFCJzb4I94RiOY/smC2n3ZLSFHe5r8p9Sc NcUtASalNXjS+esLutldARbBGnB2U7YDDNUHvmVLULuiURHMr3OsrfsuerdxVWL5 F/NbYWFRWf9z9Nm/tBzIRRJV/sjYugxB/5RsGaxKxfwWHBipfZdWEY0t4nKvD2uB F0/U1eBvBMViB3HQLCwBOKLP37mtBNtK+rbesyeVGGnE5CXugiRvvbiNaQ5gwrj4 INQO4D7glfxhyn5k8Wle14UPoimB5A5oi0ibu7mAD+teaWuA8jeXk8XBvPobhgUF B4mdNa41hmXy3Ek0RwoZiAZyRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7NZ1VC MmwH0e6gsTd0gqgmfkabMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlgbBgutoMcPvR1fvETOKPqmXnNCkPinGwKslNN7yEpNOZQlmufdnta6n12uE 9teb+H1/KhUgeeal9PkbpZN7FZXOilPkoraS6TNo8t3EhR7BdJhrSbhrPzOdb43E FwGRnPs/eDt+L7hpkWQzgapfRUYnWXWqg0iYMBJcqKC0A07BH6QkDBeA3rsacH8U k8pJoytdd37gBrp25QZyrHsKWCKLoPxEm5Cm4bI6uBJixsFxOc+6AZyldInMiHeE dVzPomcpNL5eVJQJlqWfZn8eNhWWBgUrNcUT+PCkccOX0w+/a6ORL9K10LdaJlZp paG874aeifWEsZFwd8YStwLy0A== -----END CERTIFICATE-----Generated at Fri Apr 17 10:12:21 2026 by rpki-client