$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json) Hash identifier: FisZrn7+pzaUQCAVbZ4KaTQi7oH9g4tM4PbyH0JExnY= Subject key identifier: B1:81:41:96:02:F2:6E:B6:18:E5:8D:F2:94:B1:13:97:CB:75:EE:8B Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft Manifest number: 03BA Signing time: Fri 17 Apr 2026 00:35:04 +0000 Manifest this update: Fri 17 Apr 2026 00:35:04 +0000 Manifest next update: Fri 24 Apr 2026 00:35:04 +0000 Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: 13Zv38TyKDR9MhXklLCGP9/Sj8+cMpCrl60brnKRlOk=) 2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: Cjy/SWLQH86e7gQzB7H8gnQKLtLg5bLdlkR56jFW4Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Apr 17 00:35:04 2026 GMT Not After : Apr 24 00:35:04 2026 GMT Subject: CN=69e18038-2d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:2d:9e:98:d6:4f:19:67:82:d4:a3:ef:c3: ae:69:98:32:fd:e1:e0:78:eb:5d:8f:b6:ca:8b:63: c4:33:5f:d4:db:00:d3:0e:26:12:78:69:e3:7f:78: 97:22:e5:61:d1:4e:3a:68:2c:c6:7f:81:af:c3:75: 20:e2:3c:c5:a2:ed:66:5b:14:f1:16:95:06:57:53: a3:7c:1d:b5:a4:fd:00:c7:23:28:b5:58:6c:46:72: fa:92:9b:3e:aa:54:7f:1a:09:ef:6b:f5:af:51:66: 6f:02:ba:fe:9f:81:29:b3:47:4d:23:e9:7e:47:98: d3:67:d4:5f:fb:f1:58:b6:bf:01:76:e3:33:4b:82: d4:7b:1c:0e:69:d2:3c:71:a7:83:d7:e1:7f:db:3b: fa:df:9c:cd:26:92:3a:dd:66:0e:d4:32:01:b9:df: 40:ae:c9:fe:ca:91:ec:43:62:3f:93:66:0f:dd:4a: fe:dd:96:16:20:5b:ad:a5:f1:4a:87:4c:21:4c:f4: d7:81:37:4c:85:04:76:4e:25:e4:93:b1:42:33:e0: 38:71:a2:4a:e6:2e:47:bc:8e:04:c1:9f:56:fd:28: c1:a0:f9:59:fc:1d:9e:76:c9:41:bb:70:77:f4:f1: 5c:a4:c3:35:dd:74:d4:fe:db:24:db:3c:ba:e6:0b: ac:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:41:96:02:F2:6E:B6:18:E5:8D:F2:94:B1:13:97:CB:75:EE:8B X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:7f:66:32:22:ec:1c:78:6e:d0:2d:5f:d6:09:b7:58:99: 46:66:95:ee:f9:1f:56:f7:d8:be:26:9a:3f:3e:82:82:fd:e8: e5:4f:18:28:e1:b1:a0:7c:8a:6c:d6:7a:6f:87:04:32:c1:fb: 79:08:af:01:b9:f9:6c:89:5e:88:a8:ba:5a:d9:5f:a5:fb:fe: 98:3d:67:61:29:ab:d0:19:dc:b0:22:7a:1f:b5:75:37:bc:2d: b2:8f:09:47:ed:24:d1:a2:62:d4:f3:7b:ff:b4:4e:88:9d:1c: 5e:77:7f:98:cd:db:c2:ec:02:93:11:b2:5e:eb:bf:b3:82:7c: f3:95:58:4f:85:89:39:d5:e5:50:f1:69:14:9c:33:af:08:77: 96:46:72:73:22:86:4a:89:45:75:12:76:9e:a8:3c:8d:f8:83: c6:b0:f2:84:49:49:03:3e:02:03:f7:2e:e6:a3:e7:93:dd:85: 30:71:07:32:03:b9:9e:0c:a4:9d:dc:8d:e7:6e:82:81:5b:f7: 7a:5d:ff:4b:79:3f:ff:2e:81:d8:93:49:80:79:41:9d:8f:7d: 35:dd:34:3e:a7:63:68:f2:e0:d4:bc:b1:c6:dd:a0:17:4f:27: 06:01:75:cf:22:70:14:64:0f:65:f3:16:6f:d9:85:fa:78:f2: 8a:59:1f:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjYwNDE3MDAzNTA0WhcNMjYwNDI0MDAzNTA0WjAYMRYwFAYD VQQDEw02OWUxODAzOC0yZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5ktnpjWTxlngtSj78OuaZgy/eHgeOtdj7bKi2PEM1/U2wDTDiYSeGnjf3iX IuVh0U46aCzGf4Gvw3Ug4jzFou1mWxTxFpUGV1OjfB21pP0AxyMotVhsRnL6kps+ qlR/Ggnva/WvUWZvArr+n4Eps0dNI+l+R5jTZ9Rf+/FYtr8BduMzS4LUexwOadI8 caeD1+F/2zv635zNJpI63WYO1DIBud9Arsn+ypHsQ2I/k2YP3Ur+3ZYWIFutpfFK h0whTPTXgTdMhQR2TiXkk7FCM+A4caJK5i5HvI4EwZ9W/SjBoPlZ/B2edslBu3B3 9PFcpMM13XTU/tsk2zy65gus/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGBQZYC 8m62GOWN8pSxE5fLde6LMB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzAxQS8wRjg1MDE0Q0QxMUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dD MnNjNGF1T1JSNlpHV1RxSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUjt/ZjIi7Bx4btAtX9YJt1iZRmaV7vkfVvfYviaaPz6Cgv3o5U8YKOGxoHyK bNZ6b4cEMsH7eQivAbn5bIleiKi6Wtlfpfv+mD1nYSmr0BncsCJ6H7V1N7wtso8J R+0k0aJi1PN7/7ROiJ0cXnd/mM3bwuwCkxGyXuu/s4J885VYT4WJOdXlUPFpFJwz rwh3lkZycyKGSolFdRJ2nqg8jfiDxrDyhElJAz4CA/cu5qPnk92FMHEHMgO5ngyk ndyN526CgVv3el3/S3k//y6B2JNJgHlBnY99Nd00PqdjaPLg1Lyxxt2gF08nBgF1 zyJwFGQPZfMWb9mF+njyilkftQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:26:19 2026 by rpki-client