$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json) Hash identifier: a+5KobLwWB8dQi6z86A3zFDywwVf+gJGOAMszlsp4a0= Subject key identifier: 69:C2:22:B5:73:DA:6E:AE:69:4A:16:55:EC:BD:44:EC:AD:1B:A2:F6 Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59 Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959 Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft Manifest number: 0BD4 Signing time: Tue 12 May 2026 18:58:01 +0000 Manifest this update: Tue 12 May 2026 18:58:01 +0000 Manifest next update: Tue 19 May 2026 18:58:01 +0000 Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: FK/x7bpwS8QudO8RJGORW7A///b5MN9S4luMa3NQIb4=) 2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: nsk1UqBSMxXhAmerfIUuT9a9NoDkCJE2EAsvPLMgex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959 Validity Not Before: May 12 18:58:01 2026 GMT Not After : May 19 18:58:01 2026 GMT Subject: CN=6a037839-9295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f6:4d:5b:02:e4:87:41:f6:4f:c3:69:2e:ba: d8:bd:eb:90:81:a3:63:ba:73:68:6f:06:d3:8d:45: e1:63:51:35:7b:b5:f7:00:97:60:ad:78:96:4e:48: 7f:c1:9c:91:43:96:c7:da:4a:51:5c:92:1f:7a:27: 7b:cd:0b:b5:b4:e0:fb:5a:72:01:53:9a:13:db:7f: e5:cd:71:f3:5c:68:97:35:51:20:52:56:69:d9:69: de:cd:1a:3c:1b:01:a2:fa:8f:b0:15:7e:c0:46:22: 5b:c7:9e:8c:6d:f1:75:c2:d8:fc:c2:39:f4:bc:4f: 62:fd:66:05:98:5c:74:64:c9:ee:26:52:e3:55:92: c8:ed:01:80:86:8e:03:84:41:f9:f5:54:48:51:73: 2d:50:00:e5:77:a8:ba:b2:0f:f0:e4:98:c5:c9:60: 8d:06:aa:23:d9:43:24:ec:35:21:d9:f9:04:7d:3f: 34:8d:bf:7a:31:b0:46:7f:7c:1b:76:3f:d5:1f:a7: c1:a5:17:c9:a2:4b:9b:9e:86:48:a0:82:94:03:24: d7:2b:6f:b9:82:e6:7f:0f:69:92:3b:9e:25:ad:1d: 11:62:c6:78:1b:6f:08:74:c2:da:8e:a2:41:49:c8: 5d:98:1c:b2:7d:84:71:cd:94:b8:a6:c8:80:3d:0e: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:22:B5:73:DA:6E:AE:69:4A:16:55:EC:BD:44:EC:AD:1B:A2:F6 X509v3 Authority Key Identifier: keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:31:17:c5:31:72:60:1c:42:f1:7b:ac:19:b9:8b:b0:6f:ba: 14:46:16:fb:11:ed:c2:86:d1:70:67:3a:22:70:8c:e7:a3:76: e4:17:75:d3:8c:6d:a1:9e:aa:3c:90:5f:1a:fe:e6:75:29:21: 03:ee:4d:44:40:be:6c:c1:0a:df:e9:26:2f:6b:f8:bb:f3:d2: 70:52:11:91:29:19:88:70:b5:5e:da:bd:a1:7a:f4:72:48:a0: 09:be:6e:97:96:37:72:92:82:c6:93:3b:71:ff:2e:e4:7a:d5: 92:77:b2:17:6f:5d:ff:76:64:29:2f:65:bc:95:24:8e:0b:35: 40:ae:86:61:ad:92:74:7c:33:a3:26:40:6f:16:df:1c:7a:33: 35:19:25:2e:0d:86:6d:74:c0:c7:18:93:61:b9:67:0c:2a:be: 58:22:c4:b5:83:f9:60:4d:61:3a:3e:29:e8:00:5a:b4:ac:c4: b0:ea:8a:9e:1e:0d:5f:7f:35:bc:b0:a5:95:c2:05:aa:e1:ce: 9b:55:a2:91:8c:82:c2:9e:7b:67:84:ed:08:6a:fc:0c:3d:aa: d8:5b:40:dd:1b:58:99:a9:9d:bb:d3:1d:d7:54:ec:01:c0:76: c4:19:76:5c:75:89:11:41:4e:47:b3:d2:19:a5:89:75:ec:02: 71:c0:3a:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QkExMTAvBgNVBAUTKENBOENFRjVFMUQ4QzNEQTVBQzlCQUVFNUIxOTZFRjA2 NjA5QTM5NTkwHhcNMjYwNTEyMTg1ODAxWhcNMjYwNTE5MTg1ODAxWjAYMRYwFAYD VQQDEw02YTAzNzgzOS05Mjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/ZNWwLkh0H2T8NpLrrYveuQgaNjunNobwbTjUXhY1E1e7X3AJdgrXiWTkh/ wZyRQ5bH2kpRXJIfeid7zQu1tOD7WnIBU5oT23/lzXHzXGiXNVEgUlZp2WnezRo8 GwGi+o+wFX7ARiJbx56MbfF1wtj8wjn0vE9i/WYFmFx0ZMnuJlLjVZLI7QGAho4D hEH59VRIUXMtUADld6i6sg/w5JjFyWCNBqoj2UMk7DUh2fkEfT80jb96MbBGf3wb dj/VH6fBpRfJokubnoZIoIKUAyTXK2+5guZ/D2mSO54lrR0RYsZ4G28IdMLajqJB SchdmByyfYRxzZS4psiAPQ7M2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnCIrVz 2m6uaUoWVey9ROytG6L2MB8GA1UdIwQYMBaAFMqM714djD2lrJuu5bGW7wZgmjlZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCQS85M0UyRkIwQzNE QTMxMUVBQTREQzNBNTlDNEY5QUUwMi95b3p2WGgyTVBhV3NtNjdsc1pidkJtQ2FP VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvenZYaDJNUGFXc202N2xzWmJ2Qm1DYU9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCQS85M0UyRkIwQzNEQTMxMUVBQTREQzNBNTlDNEY5QUUwMi95b3p2WGgyTVBh V3NtNjdsc1pidkJtQ2FPVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjEXxTFyYBxC8XusGbmLsG+6FEYW+xHtwobRcGc6InCM56N25Bd104xtoZ6q PJBfGv7mdSkhA+5NREC+bMEK3+kmL2v4u/PScFIRkSkZiHC1Xtq9oXr0ckigCb5u l5Y3cpKCxpM7cf8u5HrVkneyF29d/3ZkKS9lvJUkjgs1QK6GYa2SdHwzoyZAbxbf HHozNRklLg2GbXTAxxiTYblnDCq+WCLEtYP5YE1hOj4p6ABatKzEsOqKnh4NX381 vLCllcIFquHOm1WikYyCwp57Z4TtCGr8DD2q2FtA3RtYmamdu9Md11TsAcB2xBl2 XHWJEUFOR7PSGaWJdewCccA6qA== -----END CERTIFICATE-----Generated at Wed May 13 00:16:19 2026 by rpki-client