$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: KdmNUvdlz/0yyecEnTqsqlqinobHPnRWcUJvFh50W6E= Subject key identifier: 80:97:A2:A8:BD:42:AD:18:E7:ED:77:D1:82:34:E0:73:2F:5B:99:FA Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0980 Signing time: Thu 16 Apr 2026 19:56:40 +0000 Manifest this update: Thu 16 Apr 2026 19:56:40 +0000 Manifest next update: Thu 23 Apr 2026 19:56:40 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: 8jZJM52o1a2T6lw5kEoB6UhMoeJQeGh+vUfBjHyGM4E=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ejDpkAx5M2yCpAT9/wej1RqvA3FAVvmv79SZ5ZjmZWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Apr 16 19:56:40 2026 GMT Not After : Apr 23 19:56:40 2026 GMT Subject: CN=69e13ef8-0f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:0c:b4:83:35:9b:68:60:38:e5:7c:ca:77: 3f:46:18:42:f2:08:16:57:bc:c9:4f:7f:7c:b7:fa: 5f:55:3f:c6:d0:3b:0a:74:a2:4f:58:0f:8a:b5:f3: 20:2a:75:50:09:fc:24:a3:77:3e:51:71:0f:66:93: c0:7e:c3:ab:07:7d:91:ba:4b:72:f9:25:b0:9a:d3: 9c:8b:ce:a1:60:a3:63:65:55:55:fe:4c:64:d5:e1: a3:98:81:f6:ef:65:0f:cb:74:e0:b6:0d:62:52:d3: 05:3c:fd:ad:a2:24:2e:e2:59:1b:30:67:0b:25:e2: 2f:f9:5c:d0:67:8f:59:2d:85:be:be:b5:a6:3d:cc: 03:cc:6a:c3:01:a5:e0:26:67:ec:ff:a1:2e:8c:79: f9:75:9e:6a:cc:1b:f6:15:f9:e3:ad:c9:5e:3a:c6: c0:cf:fb:e2:c5:40:26:84:25:fc:e6:0b:97:0c:0f: 28:c6:9a:ee:b6:9a:9d:89:b0:57:1c:ac:36:22:f1: f0:5e:2e:f9:58:ef:bc:aa:c6:d3:d3:9b:64:80:b3: 35:75:7d:0b:5a:85:fb:8e:bc:86:c1:7d:88:8e:c6: 64:dc:76:ff:83:a8:a5:35:32:db:f4:e9:8c:6b:18: 69:f2:8c:11:ee:71:2d:e5:fd:81:27:59:39:64:31: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:97:A2:A8:BD:42:AD:18:E7:ED:77:D1:82:34:E0:73:2F:5B:99:FA X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:eb:e2:fd:37:0c:f1:9b:c1:01:c4:c6:64:33:40:24:96:b3: 05:a9:71:b4:a7:32:27:7e:9e:10:58:b8:39:ac:21:b2:ad:50: 47:ab:d5:b4:c1:0a:36:ed:d6:52:c4:87:13:c1:44:79:0d:4a: b3:5f:4b:61:85:7b:04:3f:e7:f2:db:19:75:3f:59:12:66:ea: 4a:62:69:0b:65:89:2b:f5:d5:8b:85:50:d6:26:43:3e:c9:d8: 26:f7:2d:ba:33:fa:1f:bb:24:66:b2:f0:fb:62:9b:1e:4e:ce: 98:f9:8b:c8:59:e0:69:e4:d9:61:ff:b6:b7:5b:43:ef:fc:d2: 1d:b9:56:24:3a:a1:e8:4e:d2:38:16:e5:26:53:eb:37:af:e6: fd:34:82:59:f0:73:15:f4:73:1b:97:57:66:86:cc:45:59:f7: f2:03:ac:0c:5a:54:36:c9:6d:76:06:3d:ad:96:e2:51:e3:4c: 75:34:bd:1b:06:5f:4f:11:c9:1f:20:f3:28:9b:ed:af:d4:bc: 19:d7:cb:5f:67:b0:66:b2:c5:ed:a9:c7:ef:33:38:4c:2c:46: 42:67:9d:5c:80:ad:bd:da:84:7b:42:05:75:49:31:8e:1b:87: f9:05:f1:89:0e:96:66:f6:b2:e3:1c:6c:fa:2e:15:ea:ee:55: ac:80:6b:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjYwNDE2MTk1NjQwWhcNMjYwNDIzMTk1NjQwWjAYMRYwFAYD VQQDEw02OWUxM2VmOC0wZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBMMtIM1m2hgOOV8ync/RhhC8ggWV7zJT398t/pfVT/G0DsKdKJPWA+KtfMg KnVQCfwko3c+UXEPZpPAfsOrB32Rukty+SWwmtOci86hYKNjZVVV/kxk1eGjmIH2 72UPy3Tgtg1iUtMFPP2toiQu4lkbMGcLJeIv+VzQZ49ZLYW+vrWmPcwDzGrDAaXg Jmfs/6EujHn5dZ5qzBv2FfnjrcleOsbAz/vixUAmhCX85guXDA8oxprutpqdibBX HKw2IvHwXi75WO+8qsbT05tkgLM1dX0LWoX7jryGwX2IjsZk3Hb/g6ilNTLb9OmM axhp8owR7nEt5f2BJ1k5ZDEkkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICXoqi9 Qq0Y5+130YI04HMvW5n6MB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC+vi/TcM8ZvBAcTGZDNAJJazBalxtKcyJ36eEFi4Oawhsq1QR6vVtMEKNu3W UsSHE8FEeQ1Ks19LYYV7BD/n8tsZdT9ZEmbqSmJpC2WJK/XVi4VQ1iZDPsnYJvct ujP6H7skZrLw+2KbHk7OmPmLyFngaeTZYf+2t1tD7/zSHblWJDqh6E7SOBblJlPr N6/m/TSCWfBzFfRzG5dXZobMRVn38gOsDFpUNsltdgY9rZbiUeNMdTS9GwZfTxHJ HyDzKJvtr9S8GdfLX2ewZrLF7anH7zM4TCxGQmedXICtvdqEe0IFdUkxjhuH+QXx iQ6WZvay4xxs+i4V6u5VrIBrWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:36:58 2026 by rpki-client