$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: MEd8zbtCLakXOSds5u65OzmFHFn1K/LNU58DfTTYa/Q= Subject key identifier: 41:5D:7D:6B:67:63:6D:4B:DA:08:2B:8B:73:9E:B6:11:85:A8:E3:1A Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0217 Signing time: Wed 13 May 2026 03:00:26 +0000 Manifest this update: Wed 13 May 2026 03:00:25 +0000 Manifest next update: Wed 20 May 2026 03:00:25 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: kzZMB+7E3l/0NB0slRqushXsqDJYM2U5MJKNPqzWI00=) 2: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k=) 3: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: May 13 03:00:25 2026 GMT Not After : May 20 03:00:25 2026 GMT Subject: CN=6a03e94a-0764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:b8:1e:3d:15:3f:24:d2:ec:93:d4:b5:d2: 1b:27:0f:44:7c:b6:5c:b7:e5:3e:e3:c6:58:e0:60: 5d:35:34:79:c2:22:d3:9b:c2:cc:b0:83:59:32:5c: 48:87:ca:25:83:bb:86:38:98:a2:2b:1a:b9:70:5a: c0:d5:96:d7:c8:90:a9:aa:8c:63:ba:fa:fa:eb:da: f4:33:bd:1a:a0:5c:91:c7:37:80:94:c3:21:01:7a: 2f:e0:fb:4a:6e:ea:d5:89:0c:81:82:4d:c3:f2:54: 89:60:8c:a4:ec:bd:7d:62:04:0e:1f:f3:38:b0:1a: 60:24:61:36:95:14:dc:48:ef:84:7e:0a:1d:08:fc: aa:7e:d2:77:42:e4:9c:86:f9:d2:e0:aa:b7:86:ec: ef:53:eb:f6:58:ce:0a:0e:eb:7f:ff:17:05:2f:4c: 95:e6:82:44:48:b1:c5:80:e3:21:ec:fc:3b:b5:d7: 7e:07:4f:5c:25:0c:7b:eb:02:9a:e0:34:10:aa:73: 74:c7:22:94:07:72:10:5a:f6:df:0e:2b:12:0a:dc: 66:f2:c8:15:de:85:7e:3d:95:40:ac:7f:71:21:f0: ed:fc:dd:da:f8:81:02:ed:fa:25:6d:da:3d:62:e4: 1d:fc:1e:01:81:81:8a:0c:e9:46:4c:3e:b1:53:83: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5D:7D:6B:67:63:6D:4B:DA:08:2B:8B:73:9E:B6:11:85:A8:E3:1A X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ef:64:ae:33:eb:67:7f:21:96:4d:46:cf:4d:2e:c2:42:ac: d5:13:8a:4f:dc:f9:07:59:95:86:00:cd:42:56:8a:ca:00:7f: a7:0d:90:29:38:ca:e7:a3:5c:14:c5:08:4d:51:6f:3f:64:ab: f5:70:cd:a7:6c:ba:43:5a:95:4a:b5:06:91:c7:a6:dd:80:60: c8:39:b2:d2:ce:60:1a:75:87:94:0e:4f:f7:18:7e:b9:a4:5a: e6:76:41:04:af:45:c6:d8:e9:1f:a4:48:20:4b:7a:a3:98:2d: e7:c7:b6:6c:27:0a:53:2c:2a:2f:65:73:32:eb:ab:d0:73:04: d5:f4:5f:16:46:0a:54:1a:d9:f5:ee:7b:1d:47:56:ae:7a:ef: 27:3f:09:fc:da:27:5a:4d:32:3e:88:da:32:72:d7:0e:1f:6c: 7d:c9:49:fc:37:5b:08:11:f3:d6:46:e9:b6:ab:2c:37:b6:df: 07:34:f9:50:14:76:bd:21:12:72:f4:16:97:a7:18:d8:fb:30: 4f:91:4d:3c:db:51:1e:5e:84:2b:91:d4:38:6b:e6:41:41:85: 99:0f:af:68:7a:ad:9e:bf:da:f4:6f:6d:b2:65:b7:7f:b0:57: ba:72:73:da:46:eb:8a:dd:1d:f1:4e:08:df:29:90:8a:38:a1: 66:ac:ca:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwNTEzMDMwMDI1WhcNMjYwNTIwMDMwMDI1WjAYMRYwFAYD VQQDEw02YTAzZTk0YS0wNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2m4Hj0VPyTS7JPUtdIbJw9EfLZct+U+48ZY4GBdNTR5wiLTm8LMsINZMlxI h8olg7uGOJiiKxq5cFrA1ZbXyJCpqoxjuvr669r0M70aoFyRxzeAlMMhAXov4PtK burViQyBgk3D8lSJYIyk7L19YgQOH/M4sBpgJGE2lRTcSO+EfgodCPyqftJ3QuSc hvnS4Kq3huzvU+v2WM4KDut//xcFL0yV5oJESLHFgOMh7Pw7tdd+B09cJQx76wKa 4DQQqnN0xyKUB3IQWvbfDisSCtxm8sgV3oV+PZVArH9xIfDt/N3a+IEC7folbdo9 YuQd/B4BgYGKDOlGTD6xU4NSaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFdfWtn Y21L2ggri3OethGFqOMaMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAku9krjPrZ38hlk1Gz00uwkKs1ROKT9z5B1mVhgDNQlaKygB/pw2QKTjK56Nc FMUITVFvP2Sr9XDNp2y6Q1qVSrUGkcem3YBgyDmy0s5gGnWHlA5P9xh+uaRa5nZB BK9FxtjpH6RIIEt6o5gt58e2bCcKUywqL2VzMuur0HME1fRfFkYKVBrZ9e57HUdW rnrvJz8J/NonWk0yPojaMnLXDh9sfclJ/DdbCBHz1kbptqssN7bfBzT5UBR2vSES cvQWl6cY2PswT5FNPNtRHl6EK5HUOGvmQUGFmQ+vaHqtnr/a9G9tsmW3f7BXunJz 2kbrit0d8U4I3ymQijihZqzKeA== -----END CERTIFICATE-----Generated at Wed May 13 10:05:28 2026 by rpki-client