$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: FiLejWoVuBmsv21IRc2b+vY6s4w8kQXkFGjg15kMSFY= Subject key identifier: 14:4F:18:38:34:D0:15:48:BC:D4:1B:3F:CC:84:17:F4:D4:76:62:9B Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 01D7 Signing time: Mon 11 May 2026 03:38:29 +0000 Manifest this update: Mon 11 May 2026 03:38:28 +0000 Manifest next update: Mon 18 May 2026 03:38:28 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: m1FG5Dd1zznTUsSEyvg0nP1wozLtl23+ZcRSlRjj9yw=) 2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) 3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: May 11 03:38:28 2026 GMT Not After : May 18 03:38:28 2026 GMT Subject: CN=6a014f35-b4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:3d:1c:25:8c:13:a0:36:6f:94:8f:84:1e: 5a:e8:c7:5c:3d:57:bb:f8:7c:58:34:bd:00:2a:fa: 66:21:39:7a:62:c2:f1:c7:e2:81:20:a8:c1:58:2a: 87:bf:44:54:3c:38:85:ab:80:3b:b4:25:d6:1e:b7: 85:fd:d5:2b:b4:7a:86:1f:54:8d:9b:e2:29:d5:9c: f7:ef:44:91:3b:4c:d6:eb:80:5f:e7:3e:77:27:31: d5:da:88:63:19:82:19:b3:04:71:ff:c5:fb:3a:13: f1:48:b3:77:68:86:69:10:49:c9:3a:ed:ca:28:2e: 65:3c:41:d9:3a:7d:75:56:0f:44:1b:76:5d:a2:5a: aa:9a:fa:86:b7:1d:21:94:d7:a8:c1:23:18:7e:bb: ea:4e:1c:21:f9:97:a1:fc:fb:32:ce:47:94:38:03: 13:79:4a:b0:bb:0d:35:a0:48:ca:48:58:0a:47:8b: 41:3e:db:cd:b7:84:53:a2:89:7c:8e:aa:e2:84:df: ad:29:8f:45:fa:23:67:2c:83:97:96:38:22:52:8c: b7:70:d7:0a:a9:5e:b8:fa:25:31:eb:ee:bd:43:c1: cc:72:e6:b0:66:80:a7:3f:82:9b:e2:df:77:97:d9: 1e:7e:9a:89:6c:04:b4:ea:5d:da:0e:73:0e:e9:6b: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:18:38:34:D0:15:48:BC:D4:1B:3F:CC:84:17:F4:D4:76:62:9B X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d0:78:3d:c0:b7:ea:c3:98:cc:a7:d2:18:86:60:e1:34:af: 7c:8e:c4:60:e6:b2:75:82:92:9b:ca:c9:c1:58:3d:ac:bc:3a: f4:d2:c7:df:6f:39:62:66:d5:90:43:79:c1:b4:d7:89:d9:cd: 52:90:bd:43:a5:ea:f9:d9:d0:01:f5:7d:3e:ea:b2:cd:94:75: 59:1d:2c:03:6e:88:5b:a0:fd:02:03:03:35:90:f0:ce:ff:89: d2:6c:d7:29:34:b4:a9:c5:ab:f3:7e:06:51:34:c1:c7:58:ad: 39:1c:7b:6b:9e:64:24:bd:9c:e4:80:34:a7:ed:7e:e0:53:92: 4f:1b:4c:f4:f3:a9:82:84:d5:67:54:18:e7:eb:73:95:65:98: 25:7c:8c:a0:5d:d8:0c:59:b4:bb:94:cf:72:0f:13:17:dd:96: ee:64:31:74:63:97:a2:18:95:40:12:2d:1f:0b:3b:4d:e3:a1: b1:cf:e4:d7:0f:9a:b6:bb:a7:c1:3d:2e:39:f7:5c:f2:e6:90: 5c:77:2d:4c:e8:f9:51:e4:1e:95:8a:69:3e:8e:1c:0a:a2:ad: a7:f4:01:b1:ca:b2:76:2d:79:05:c4:67:75:42:2f:2c:36:e5: 0d:a9:24:01:2b:5a:83:45:18:34:c0:6b:e1:a1:1f:6e:b4:12: 2f:eb:52:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYwNTExMDMzODI4WhcNMjYwNTE4MDMzODI4WjAYMRYwFAYD VQQDEw02YTAxNGYzNS1iNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qE9HCWME6A2b5SPhB5a6MdcPVe7+HxYNL0AKvpmITl6YsLxx+KBIKjBWCqH v0RUPDiFq4A7tCXWHreF/dUrtHqGH1SNm+Ip1Zz370SRO0zW64Bf5z53JzHV2ohj GYIZswRx/8X7OhPxSLN3aIZpEEnJOu3KKC5lPEHZOn11Vg9EG3ZdolqqmvqGtx0h lNeowSMYfrvqThwh+Zeh/PsyzkeUOAMTeUqwuw01oEjKSFgKR4tBPtvNt4RTool8 jqrihN+tKY9F+iNnLIOXljgiUoy3cNcKqV64+iUx6+69Q8HMcuawZoCnP4Kb4t93 l9kefpqJbAS06l3aDnMO6WuXyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRPGDg0 0BVIvNQbP8yEF/TUdmKbMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtB4PcC36sOYzKfSGIZg4TSvfI7EYOaydYKSm8rJwVg9rLw69NLH3285YmbV kEN5wbTXidnNUpC9Q6Xq+dnQAfV9PuqyzZR1WR0sA26IW6D9AgMDNZDwzv+J0mzX KTS0qcWr834GUTTBx1itORx7a55kJL2c5IA0p+1+4FOSTxtM9POpgoTVZ1QY5+tz lWWYJXyMoF3YDFm0u5TPcg8TF92W7mQxdGOXohiVQBItHws7TeOhsc/k1w+atrun wT0uOfdc8uaQXHctTOj5UeQelYppPo4cCqKtp/QBscqydi15BcRndUIvLDblDakk AStag0UYNMBr4aEfbrQSL+tSkw== -----END CERTIFICATE-----Generated at Tue May 12 22:09:16 2026 by rpki-client