$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: S5QG0e//X6sj68tDJ4j3/39suQkHZYatBDI0qfDupT8= Subject key identifier: 3C:73:2D:AB:AB:71:9A:DD:20:FC:4B:52:2E:28:36:9F:86:94:03:5F Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0DAD Signing time: Tue 12 May 2026 19:12:35 +0000 Manifest this update: Tue 12 May 2026 19:12:34 +0000 Manifest next update: Tue 19 May 2026 19:12:34 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: qf1cXL5Wyy5yYZLJSW4sUCFriOflEB2oqVEGNKWPxHA=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: sDV1SEKZeGbsy9FSAAPLIsIKO+rn3pYirqFdSzqZ8rU=) 3: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: May 12 19:12:34 2026 GMT Not After : May 19 19:12:34 2026 GMT Subject: CN=6a037ba3-aa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:00:64:cc:58:1f:4f:73:b3:e2:50:e6:2f: 48:be:c7:59:b8:fa:97:4c:b2:18:bb:63:7b:ff:aa: a8:af:ef:7a:d7:ac:ed:bf:21:4a:ba:fe:83:5f:42: 9d:10:9c:0c:38:83:55:1e:38:35:ba:83:e4:34:9f: 41:2d:e5:dc:d4:96:d1:c8:a9:97:82:15:91:ae:9f: da:27:c7:45:e7:31:98:ee:ef:f6:a3:1c:b3:d3:bd: a7:4e:87:7c:e0:57:f9:38:98:b4:4c:c9:1e:a1:b7: 3d:e0:a4:5f:32:81:95:cf:95:ba:44:6e:b0:0a:20: 2e:3c:6a:a6:25:16:5f:ef:30:c3:3f:dc:5d:94:b1: 42:00:42:c8:23:75:2d:90:17:bf:68:27:6e:48:40: 18:d6:81:4f:1a:39:14:96:54:ef:c2:0f:5e:bd:08: 28:fd:40:ef:8c:a5:51:d3:78:6b:db:a6:08:ec:7f: c4:f7:72:c2:c1:01:d7:62:c2:de:78:ef:bf:f8:a8: aa:38:83:72:6d:5c:59:0a:e7:56:44:0e:38:0a:2b: 79:90:78:89:36:e9:20:a6:e2:6b:f9:cc:a7:eb:cc: a5:21:58:4c:77:0b:7e:9c:2a:2d:13:3b:56:f9:61: 15:66:48:e0:c7:ee:45:b4:11:b1:e1:49:22:13:c1: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:2D:AB:AB:71:9A:DD:20:FC:4B:52:2E:28:36:9F:86:94:03:5F X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d1:a5:68:a2:1a:46:45:02:df:07:9c:91:a6:96:86:7c:c3: c0:40:26:98:eb:31:cc:93:a8:d8:9d:2f:51:4b:4b:e1:15:39: 1f:8c:80:9f:d1:85:db:33:26:13:f9:a5:79:4c:a7:01:d6:b0: 90:f6:63:fd:44:7b:a5:50:dd:f6:72:2d:3a:ca:5f:07:4e:03: d8:bd:93:3d:90:91:f7:1b:b5:9a:59:3e:b9:56:54:35:e1:2a: c2:f8:23:31:3a:6d:66:6d:17:04:3b:a7:b6:2b:82:b9:03:33: bf:de:e4:ef:61:df:7b:d9:0b:77:b1:97:4d:44:73:24:68:39: df:30:8e:a6:6c:8e:de:ab:e9:25:54:50:ae:46:df:60:8c:fa: 92:b7:36:8e:39:f0:70:b4:ab:27:ef:05:16:8d:58:c7:97:3f: 8c:f6:72:bf:45:80:bc:fa:88:5b:0b:e2:9e:d5:b0:12:9f:bf: 48:cf:f1:98:e6:a5:93:50:ec:a9:67:85:7e:2a:09:e9:90:1d: 3b:66:f2:5f:59:08:2e:eb:d4:62:db:e1:09:a1:b8:ac:99:8a: 8b:00:9d:03:ea:f4:4a:c7:ac:66:c1:2f:be:1f:32:e8:2c:9c: ab:8e:21:25:10:01:2a:5c:46:ef:38:bd:86:f1:13:88:45:60: 1e:fd:3e:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjYwNTEyMTkxMjM0WhcNMjYwNTE5MTkxMjM0WjAYMRYwFAYD VQQDEw02YTAzN2JhMy1hYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdwAZMxYH09zs+JQ5i9IvsdZuPqXTLIYu2N7/6qor+9616ztvyFKuv6DX0Kd EJwMOINVHjg1uoPkNJ9BLeXc1JbRyKmXghWRrp/aJ8dF5zGY7u/2oxyz072nTod8 4Ff5OJi0TMkeobc94KRfMoGVz5W6RG6wCiAuPGqmJRZf7zDDP9xdlLFCAELII3Ut kBe/aCduSEAY1oFPGjkUllTvwg9evQgo/UDvjKVR03hr26YI7H/E93LCwQHXYsLe eO+/+KiqOINybVxZCudWRA44Cit5kHiJNukgpuJr+cyn68ylIVhMdwt+nCotEztW +WEVZkjgx+5FtBGx4UkiE8H6sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxzLaur cZrdIPxLUi4oNp+GlANfMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIdGlaKIaRkUC3weckaaWhnzDwEAmmOsxzJOo2J0vUUtL4RU5H4yAn9GF2zMm E/mleUynAdawkPZj/UR7pVDd9nItOspfB04D2L2TPZCR9xu1mlk+uVZUNeEqwvgj MTptZm0XBDuntiuCuQMzv97k72Hfe9kLd7GXTURzJGg53zCOpmyO3qvpJVRQrkbf YIz6krc2jjnwcLSrJ+8FFo1Yx5c/jPZyv0WAvPqIWwvintWwEp+/SM/xmOalk1Ds qWeFfioJ6ZAdO2byX1kILuvUYtvhCaG4rJmKiwCdA+r0SsesZsEvvh8y6Cycq44h JRABKlxG7zi9hvETiEVgHv0+Jg== -----END CERTIFICATE-----Generated at Wed May 13 12:49:48 2026 by rpki-client