$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft File: YpYWXDbflgVmse01DqfefzOLOpk.mft (raw, json) Hash identifier: CjkD6/x6/yPokRxlMorri8SwB/EZZrRYuGeom0y5hk0= Subject key identifier: C3:7C:A8:73:7B:E0:B5:E8:7D:05:38:42:9D:5E:B0:63:B0:F2:35:E9 Authority key identifier: 62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99 Certificate issuer: /CN=A91456CD/serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft Manifest number: 0E Signing time: Wed 13 May 2026 09:14:34 +0000 Manifest this update: Wed 13 May 2026 09:14:33 +0000 Manifest next update: Wed 20 May 2026 09:14:33 +0000 Files and hashes: 1: YpYWXDbflgVmse01DqfefzOLOpk.crl (hash: MB7yS3JNI7ghWIpVI79mxYjCanY9YBmB2O28lTfdAHU=) 2: E70D393E3E1211F1B8544D87AE833773.roa (hash: QKtJAkqUtPB3mTAjjBY4LLg9Wgtws5WpGtADkwoN/hg=) 3: BBFF83183E1311F1A75FAD3AAF833773.roa (hash: tVkmnNetZiuk3U9n5t1OgMJioxU81CU8IuCEcNguLvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CD, serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99 Validity Not Before: May 13 09:14:33 2026 GMT Not After : May 20 09:14:33 2026 GMT Subject: CN=6a0440fa-e014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f2:f3:6a:89:b2:13:22:93:cb:ac:0d:02:7f: c0:b6:5d:8a:3b:b4:3e:8b:27:3e:2d:67:ad:3f:7c: f6:2a:4b:d3:c1:3d:95:9d:98:5d:c0:f6:be:02:88: 02:f8:cb:bd:37:1d:8a:b7:e9:c7:f5:ee:92:97:46: ab:26:73:18:83:43:23:85:14:c2:a8:81:85:36:00: 59:9e:f3:d2:f7:a1:cc:37:be:79:14:60:6e:7a:72: 22:8a:fd:ff:fd:1e:44:c6:09:3c:61:ad:d6:48:9a: a6:9d:8c:b8:59:6b:ab:48:b9:5d:39:9f:9d:05:db: ef:4b:fc:1f:62:5d:dd:9f:e5:39:2a:db:61:a1:f0: f6:9e:bb:07:40:36:81:a6:5c:f0:6b:fe:5b:c9:3f: 8f:34:82:fc:ad:86:1b:06:d5:30:9f:c5:03:5a:f1: 10:7d:55:52:86:39:fc:19:14:16:56:5f:3a:dc:43: c7:38:78:6f:e1:b8:a3:0a:d1:64:da:8b:5e:93:9c: 75:e0:b8:2c:ca:97:5a:99:81:da:6b:3b:b9:b5:2d: 0e:c9:30:ee:c6:54:09:03:62:89:3c:57:bd:cc:52: 41:3d:c0:8e:7a:e3:a5:b1:ca:52:e9:fb:42:52:82: 3d:8f:18:1f:7f:9a:da:99:ee:a8:fb:63:87:00:39: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7C:A8:73:7B:E0:B5:E8:7D:05:38:42:9D:5E:B0:63:B0:F2:35:E9 X509v3 Authority Key Identifier: keyid:62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2c:99:04:7c:af:7e:85:ce:95:84:28:03:2c:d0:16:79:2d: 35:98:50:41:c4:a6:b4:33:ac:ab:d6:26:57:8e:ee:31:41:5c: e4:92:6f:db:bf:47:98:9e:71:ab:85:1c:56:aa:37:c2:7c:d5: b9:6a:5e:cf:5b:2f:73:19:9b:05:df:bb:9a:41:ed:4c:3d:47: 9a:a1:93:74:8e:de:66:51:61:a2:a2:0b:c7:99:2c:d3:2e:ff: e7:f3:bb:6b:48:17:e5:18:ad:c4:dd:21:1d:f8:33:34:ef:fb: e2:2e:e3:b5:3f:a9:2c:6a:ac:b9:01:e0:4c:f3:39:1a:d4:6a: 9d:63:1e:31:1c:f8:e8:9b:96:2a:e6:8c:03:a5:ed:57:ff:09: 0f:3d:a0:09:ee:b1:cc:0e:1c:55:81:3a:b8:e7:f0:3a:21:c2: a2:fc:fc:e6:ba:bc:cc:63:bf:43:cc:cb:fe:ed:c6:45:98:32: b4:f8:88:28:0d:1c:1c:a4:ec:7b:8a:2d:2c:9d:89:6a:ba:03: 2d:20:4d:ca:23:d1:29:be:13:3f:84:43:ff:17:b0:8f:4e:70: b9:af:04:4b:0a:69:0d:1a:ea:e8:78:24:6c:90:dc:b4:11:89: 46:2e:52:83:ef:50:57:e9:32:61:7e:11:13:d7:4a:06:cb:4b: da:40:54:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRDExMC8GA1UEBRMoNjI5NjE2NUMzNkRGOTYwNTY2QjFFRDM1MEVBN0RFN0Yz MzhCM0E5OTAeFw0yNjA1MTMwOTE0MzNaFw0yNjA1MjAwOTE0MzNaMBgxFjAUBgNV BAMTDTZhMDQ0MGZhLWUwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD38vNqibITIpPLrA0Cf8C2XYo7tD6LJz4tZ60/fPYqS9PBPZWdmF3A9r4CiAL4 y703HYq36cf17pKXRqsmcxiDQyOFFMKogYU2AFme89L3ocw3vnkUYG56ciKK/f/9 HkTGCTxhrdZImqadjLhZa6tIuV05n50F2+9L/B9iXd2f5Tkq22Gh8PaeuwdANoGm XPBr/lvJP480gvythhsG1TCfxQNa8RB9VVKGOfwZFBZWXzrcQ8c4eG/huKMK0WTa i16TnHXguCzKl1qZgdprO7m1LQ7JMO7GVAkDYok8V73MUkE9wI5646WxylLp+0JS gj2PGB9/mtqZ7qj7Y4cAOTBZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw3yoc3vg teh9BThCnV6wY7DyNekwHwYDVR0jBBgwFoAUYpYWXDbflgVmse01DqfefzOLOpkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNEL0FDNEE4ODQwM0Uw RjExRjFBQTE1OEQ1NkFBODMzNzczL1lwWVdYRGJmbGdWbXNlMDFEcWZlZnpPTE9w ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXBZV1hEYmZsZ1Ztc2UwMURxZmVmek9MT3BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNEL0FDNEE4ODQwM0UwRjExRjFBQTE1OEQ1NkFBODMzNzczL1lwWVdYRGJmbGdW bXNlMDFEcWZlZnpPTE9way5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByLJkEfK9+hc6VhCgDLNAWeS01mFBBxKa0M6yr1iZXju4xQVzkkm/bv0eYnnGr hRxWqjfCfNW5al7PWy9zGZsF37uaQe1MPUeaoZN0jt5mUWGiogvHmSzTLv/n87tr SBflGK3E3SEd+DM07/viLuO1P6ksaqy5AeBM8zka1GqdYx4xHPjom5Yq5owDpe1X /wkPPaAJ7rHMDhxVgTq45/A6IcKi/PzmurzMY79DzMv+7cZFmDK0+IgoDRwcpOx7 ii0snYlqugMtIE3KI9EpvhM/hEP/F7CPTnC5rwRLCmkNGuroeCRskNy0EYlGLlKD 71BX6TJhfhET10oGy0vaQFSy -----END CERTIFICATE-----Generated at Wed May 13 12:25:36 2026 by rpki-client