$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json) Hash identifier: nqY9U34f3eF4xz1Q83zcbwzVQh7X4zRhUZdhlAu1bn4= Subject key identifier: 8F:3A:A2:17:19:95:1C:86:A7:8B:9C:D6:95:58:29:84:07:50:2A:78 Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft Manifest number: 020F Signing time: Mon 11 May 2026 03:01:55 +0000 Manifest this update: Mon 11 May 2026 03:01:55 +0000 Manifest next update: Mon 18 May 2026 03:01:55 +0000 Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: 9yc3We9VN6eAss3dJHstr0JlhZJpdoip1KRFb3cw0NQ=) 2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: tIvp8qW6N9XhfrDT2d7umnUb5rMusihwgNBGCHbD2+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Validity Not Before: May 11 03:01:55 2026 GMT Not After : May 18 03:01:55 2026 GMT Subject: CN=6a0146a3-28ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:51:65:a2:d2:2b:9d:79:b0:9e:7f:ab:5b: 5b:67:5b:f0:0d:46:26:e5:e5:35:0b:d0:34:2f:68: d3:ad:9e:cf:ec:6b:a8:24:f3:17:25:61:2d:25:b1: 20:5d:67:23:5b:8b:39:3c:32:60:a1:d3:43:2b:22: 60:70:52:52:52:c5:55:ed:76:09:28:5c:a6:08:eb: 7d:79:9f:4c:b1:bf:dc:10:9b:e7:0c:dd:58:6a:94: 6a:25:57:c4:83:1f:07:16:51:63:98:34:e5:03:a8: ac:a9:84:e3:1e:11:9f:cc:9c:15:76:a1:ca:32:50: e1:3c:87:dd:7d:b2:ae:09:b6:be:ad:75:cf:a5:9c: 67:da:84:f4:e8:ad:87:8a:e1:df:e4:37:13:94:07: 47:3c:de:65:e5:24:d6:05:77:99:ae:c1:11:94:4d: 26:6d:7e:b2:cc:12:23:fd:12:aa:9b:2e:80:be:0d: 90:c5:12:50:bb:08:dd:82:eb:a3:16:13:c8:01:33: 55:11:de:26:00:a3:f6:d4:32:97:27:dc:e0:7a:f3: 35:b6:34:47:7b:5e:63:ac:fa:9e:5c:72:46:86:9b: d5:fe:11:07:ab:d0:e3:26:79:b5:66:67:fa:49:87: 7d:59:4f:92:28:9f:40:87:4d:85:40:7b:97:f0:0e: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3A:A2:17:19:95:1C:86:A7:8B:9C:D6:95:58:29:84:07:50:2A:78 X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:5e:bb:f0:86:eb:db:ea:0b:30:17:db:95:42:a2:7b:e6:5b: 64:8f:6e:82:04:63:bd:cc:5c:47:72:f6:90:5b:7f:05:88:b0: fb:bb:47:c3:dd:a3:a4:d2:c4:ee:54:76:62:62:4a:1b:c4:c1: c0:2e:69:06:cb:39:f0:6b:20:cd:e9:df:d7:85:31:34:13:4c: 46:91:66:1e:66:7a:5b:cf:d6:40:d8:3d:a9:b7:53:fe:b2:41: c7:0d:f5:fc:55:bc:34:17:e3:04:c1:6e:2a:61:0d:aa:8b:07: 59:28:f5:26:9f:24:a7:eb:c6:ac:70:ce:99:cc:e0:21:5d:9a: 6a:36:db:5d:f8:b9:79:97:23:3f:cf:d5:6f:8c:f5:06:37:5e: 5c:5e:71:4a:b2:41:29:18:14:36:28:ad:28:f0:6b:17:9e:de: 6a:90:59:e8:6f:b6:8b:a5:8d:78:fb:ec:80:58:cf:67:17:71: 9a:8e:f1:ff:e4:ea:59:ee:ab:fd:3f:46:b6:9f:ac:1f:8a:da: 35:6f:de:c4:e3:4c:b4:21:7c:37:7b:db:6f:62:52:f3:40:21: b7:34:17:5f:c6:86:03:05:21:35:fa:fa:ce:c9:4e:c0:69:5c: 0d:0f:0a:78:9d:50:c2:5f:95:b7:ce:43:87:8c:57:c1:7e:2c: 46:7a:8f:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3 NDJEQ0U4MTAwHhcNMjYwNTExMDMwMTU1WhcNMjYwNTE4MDMwMTU1WjAYMRYwFAYD VQQDEw02YTAxNDZhMy0yOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrtRZaLSK515sJ5/q1tbZ1vwDUYm5eU1C9A0L2jTrZ7P7GuoJPMXJWEtJbEg XWcjW4s5PDJgodNDKyJgcFJSUsVV7XYJKFymCOt9eZ9Msb/cEJvnDN1YapRqJVfE gx8HFlFjmDTlA6isqYTjHhGfzJwVdqHKMlDhPIfdfbKuCba+rXXPpZxn2oT06K2H iuHf5DcTlAdHPN5l5STWBXeZrsERlE0mbX6yzBIj/RKqmy6Avg2QxRJQuwjdguuj FhPIATNVEd4mAKP21DKXJ9zgevM1tjRHe15jrPqeXHJGhpvV/hEHq9DjJnm1Zmf6 SYd9WU+SKJ9Ah02FQHuX8A782QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI86ohcZ lRyGp4uc1pVYKYQHUCp4MB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3 MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ1678Ibr2+oLMBfblUKie+ZbZI9uggRjvcxcR3L2kFt/BYiw+7tHw92jpNLE 7lR2YmJKG8TBwC5pBss58Gsgzenf14UxNBNMRpFmHmZ6W8/WQNg9qbdT/rJBxw31 /FW8NBfjBMFuKmENqosHWSj1Jp8kp+vGrHDOmczgIV2aajbbXfi5eZcjP8/Vb4z1 BjdeXF5xSrJBKRgUNiitKPBrF57eapBZ6G+2i6WNePvsgFjPZxdxmo7x/+TqWe6r /T9Gtp+sH4raNW/exONMtCF8N3vbb2JS80AhtzQXX8aGAwUhNfr6zslOwGlcDQ8K eJ1Qwl+Vt85Dh4xXwX4sRnqPpw== -----END CERTIFICATE-----Generated at Wed May 13 01:20:51 2026 by rpki-client