$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: lx/GAK0TEsCD5qBTmAXN7UQtXbOpsnu75YHasuGA1W8= Subject key identifier: 6E:26:B0:D4:73:DC:4A:77:83:47:CA:54:84:40:C7:90:B1:33:30:A5 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: 019C Signing time: Fri 17 Apr 2026 04:01:29 +0000 Manifest this update: Fri 17 Apr 2026 04:01:28 +0000 Manifest next update: Fri 24 Apr 2026 04:01:28 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: JfLVZZ02NTCjcqUJpusj9UqXelkeq7DgIGqSFTcR0Aw=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: 26WEtM895FnGR/kXovwY20hCbFpq6hJQTsJq8LOOA8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: Apr 17 04:01:28 2026 GMT Not After : Apr 24 04:01:28 2026 GMT Subject: CN=69e1b098-b4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:e9:dd:69:94:34:ce:84:f2:f4:eb:55:da: 7e:68:a4:08:86:89:aa:e4:bc:0e:be:aa:0e:9a:d4: 08:2e:81:0a:91:30:60:f1:46:12:5e:b2:1d:9b:85: 50:ca:15:b9:29:ee:7d:2e:0a:35:48:5b:9e:7a:30: c5:dd:22:3a:80:88:2b:f9:fc:66:1e:ed:23:6d:1c: e7:4d:87:ae:18:90:da:e1:92:69:54:08:2d:d5:2e: ba:92:87:8b:f0:14:61:a2:8b:20:33:98:ad:0b:78: 14:22:ae:32:1a:5c:95:c7:f6:ca:b5:34:1d:88:0a: ee:8c:aa:b0:ad:16:f0:95:87:7e:02:8f:55:f7:1d: 45:05:9e:78:08:53:d8:f6:dd:96:79:2f:29:3b:f1: 0a:1b:da:1e:39:06:22:4e:e0:c6:db:75:48:17:52: f9:a3:44:bb:c1:a9:32:eb:07:d2:a5:b2:0b:41:55: 6e:f7:c9:8e:75:fc:d1:54:56:95:30:8e:58:e8:ab: 2e:16:b9:7a:5c:a3:5f:3a:80:32:6a:0b:39:fd:db: 29:7e:35:b5:df:19:03:e4:44:91:f9:b5:9d:b2:10: 03:02:68:2e:54:52:c9:8f:e7:ed:ad:97:71:00:91: 30:68:db:4a:13:68:61:b6:11:c0:9b:58:8f:f1:0f: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:B0:D4:73:DC:4A:77:83:47:CA:54:84:40:C7:90:B1:33:30:A5 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e8:20:4a:3e:48:07:d0:c4:ec:5a:6b:ca:4f:ef:18:fa:0f: 21:be:69:42:6f:da:cc:f1:a6:8d:62:3f:0a:38:24:da:53:59: 1f:c6:51:ea:0e:6e:82:7e:bb:7e:37:c1:90:0e:78:97:bd:de: e8:e4:54:ff:ea:f7:59:8e:c9:47:b5:79:68:51:60:f7:9a:5e: 6e:39:37:56:d3:12:b2:36:55:4b:b9:dc:7f:e5:db:70:29:19: 17:35:1c:b1:e7:ff:0d:41:08:59:23:fe:ef:90:aa:ca:92:94: 7e:91:12:72:79:98:4e:be:ab:5d:fa:e5:ec:81:fc:64:44:ac: ee:0c:f0:bc:0c:97:be:f2:cf:c8:da:86:6b:62:7a:e0:e8:eb: 85:ad:96:67:52:b9:a5:85:61:03:c2:2e:4b:45:f6:93:3a:0c: 77:56:f7:4b:7b:7c:0d:e6:97:6a:17:ff:60:b6:37:b5:c1:5d: bb:df:34:52:33:91:4d:14:74:51:3d:9c:f8:0a:5e:60:b6:6a: 88:f5:22:1e:52:48:d1:d3:48:24:f0:a7:78:21:e9:81:e7:54: 92:49:00:1a:2f:66:48:8b:60:45:3c:0b:0f:60:61:32:fc:10: 9e:a7:d8:1b:a4:a2:19:8e:d6:54:a8:d7:dd:4f:aa:0d:2d:8f: 93:5f:6a:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5 NUE3QUNDNTAwHhcNMjYwNDE3MDQwMTI4WhcNMjYwNDI0MDQwMTI4WjAYMRYwFAYD VQQDEw02OWUxYjA5OC1iNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZfp3WmUNM6E8vTrVdp+aKQIhomq5LwOvqoOmtQILoEKkTBg8UYSXrIdm4VQ yhW5Ke59Lgo1SFueejDF3SI6gIgr+fxmHu0jbRznTYeuGJDa4ZJpVAgt1S66koeL 8BRhoosgM5itC3gUIq4yGlyVx/bKtTQdiArujKqwrRbwlYd+Ao9V9x1FBZ54CFPY 9t2WeS8pO/EKG9oeOQYiTuDG23VIF1L5o0S7waky6wfSpbILQVVu98mOdfzRVFaV MI5Y6KsuFrl6XKNfOoAyags5/dspfjW13xkD5ESR+bWdshADAmguVFLJj+ftrZdx AJEwaNtKE2hhthHAm1iP8Q8mLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4msNRz 3Ep3g0fKVIRAx5CxMzClMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5 ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgOggSj5IB9DE7Fpryk/vGPoPIb5pQm/azPGmjWI/Cjgk2lNZH8ZR6g5ugn67 fjfBkA54l73e6ORU/+r3WY7JR7V5aFFg95pebjk3VtMSsjZVS7ncf+XbcCkZFzUc sef/DUEIWSP+75CqypKUfpEScnmYTr6rXfrl7IH8ZESs7gzwvAyXvvLPyNqGa2J6 4Ojrha2WZ1K5pYVhA8IuS0X2kzoMd1b3S3t8DeaXahf/YLY3tcFdu980UjORTRR0 UT2c+ApeYLZqiPUiHlJI0dNIJPCneCHpgedUkkkAGi9mSItgRTwLD2BhMvwQnqfY G6SiGY7WVKjX3U+qDS2Pk19qWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:26 2026 by rpki-client