$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: HpcUr50BIvU636PnQTcIfL0GRQkOYYSwzRfNiiOGISA= Subject key identifier: F6:01:AD:55:0C:F3:76:F8:DD:DE:55:04:44:3E:4F:FC:FA:3E:CE:71 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 01EF Signing time: Wed 13 May 2026 03:31:35 +0000 Manifest this update: Wed 13 May 2026 03:31:34 +0000 Manifest next update: Wed 20 May 2026 03:31:34 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: SiOO5isBhXrDDf4LezWDEAbLuS+cfwN8dnKFPfjCJa0=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 3: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) 4: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: May 13 03:31:34 2026 GMT Not After : May 20 03:31:34 2026 GMT Subject: CN=6a03f096-cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:f2:1b:44:53:96:83:52:65:20:1d:d8:e3: 3d:05:77:f2:5d:b6:0d:08:ad:11:ee:68:b7:4f:ae: be:0c:67:7f:7d:e0:6a:e5:2e:27:6f:81:62:c6:9a: 74:a8:c7:c3:6d:7c:5b:8c:f0:6d:6a:5c:94:89:96: 18:ce:7c:49:f4:6e:3e:f6:5c:c6:11:51:b2:2b:01: 74:97:99:a3:68:bd:61:33:5b:86:1b:df:a3:41:b4: 0f:fa:6e:f5:d5:c6:4b:cf:cb:c2:af:27:dd:1d:b7: 34:37:a0:f2:be:68:14:e5:96:41:c4:ee:4a:b4:02: c4:9a:d1:8b:08:dc:a9:eb:b8:9b:94:6a:d7:a7:63: cb:7e:6a:84:64:eb:39:21:e8:5c:91:76:b7:1e:fe: 14:01:c9:1a:13:2c:f0:fb:4b:17:1d:2d:88:e6:13: 26:d4:40:ee:c5:ec:f0:dd:bb:5f:cf:4c:d6:d6:96: e4:4b:f4:2b:ac:02:70:99:ea:0c:b5:ea:21:35:fa: 8e:39:ad:d3:4f:86:8c:a5:34:3b:88:29:86:ae:19: 08:c2:46:9b:49:62:e2:f0:b9:dc:f4:c6:8d:34:11: 65:6b:ab:33:2f:e0:c0:ca:cf:3e:2e:17:65:f8:f1: 54:4d:88:54:07:03:ba:81:46:eb:88:b3:50:5c:e9: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:01:AD:55:0C:F3:76:F8:DD:DE:55:04:44:3E:4F:FC:FA:3E:CE:71 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:28:39:8f:f5:87:46:cf:f6:49:96:7b:7b:a5:b0:be:56:68: b1:99:51:b5:73:ca:52:ab:ca:28:41:5d:ee:9e:3a:3b:f6:f1: 75:ad:72:fc:4c:54:bf:cd:75:d8:67:18:8e:f7:f4:29:9a:dd: 75:29:dd:2c:e9:e9:2e:d7:71:0e:16:2f:85:ba:2e:86:42:29: 9f:35:0d:7d:17:8a:1c:ec:50:3e:71:c1:be:62:a3:a6:6a:0e: e0:b9:c2:14:8a:e6:04:0d:1f:2e:e4:76:1a:d3:b1:31:ce:ce: d5:5c:7e:4c:1d:98:08:c0:f7:0b:9e:95:3d:a4:3e:bf:ac:a0: 3e:90:ea:71:fc:66:82:c3:24:d4:a6:b6:d4:b3:66:2e:2b:59: 44:f0:4e:2e:3b:2f:b1:ec:80:24:b1:8f:b9:98:48:97:2c:de: 13:70:94:f6:eb:5d:52:74:84:af:12:07:af:74:c9:62:d4:0a: 0c:20:37:0f:bf:89:0f:a8:e4:ed:c8:6e:b0:10:f3:74:8e:d9: be:bc:e0:bd:eb:5b:3e:aa:11:a9:30:f3:e8:62:03:44:3d:e4: 4e:49:89:40:f2:d2:39:00:63:8a:dc:e0:cd:3e:89:86:0a:1d: 39:ee:11:db:77:30:da:ee:97:de:f0:d7:56:0a:8e:c3:05:8c: 77:91:cb:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwNTEzMDMzMTM0WhcNMjYwNTIwMDMzMTM0WjAYMRYwFAYD VQQDEw02YTAzZjA5Ni1jYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtHyG0RTloNSZSAd2OM9BXfyXbYNCK0R7mi3T66+DGd/feBq5S4nb4Fixpp0 qMfDbXxbjPBtalyUiZYYznxJ9G4+9lzGEVGyKwF0l5mjaL1hM1uGG9+jQbQP+m71 1cZLz8vCryfdHbc0N6DyvmgU5ZZBxO5KtALEmtGLCNyp67iblGrXp2PLfmqEZOs5 IehckXa3Hv4UAckaEyzw+0sXHS2I5hMm1EDuxezw3btfz0zW1pbkS/QrrAJwmeoM teohNfqOOa3TT4aMpTQ7iCmGrhkIwkabSWLi8Lnc9MaNNBFla6szL+DAys8+Lhdl +PFUTYhUBwO6gUbriLNQXOlYOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYBrVUM 83b43d5VBEQ+T/z6Ps5xMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABig5j/WHRs/2SZZ7e6WwvlZosZlRtXPKUqvKKEFd7p46O/bxda1y/ExUv811 2GcYjvf0KZrddSndLOnpLtdxDhYvhbouhkIpnzUNfReKHOxQPnHBvmKjpmoO4LnC FIrmBA0fLuR2GtOxMc7O1Vx+TB2YCMD3C56VPaQ+v6ygPpDqcfxmgsMk1Ka21LNm LitZRPBOLjsvseyAJLGPuZhIlyzeE3CU9utdUnSErxIHr3TJYtQKDCA3D7+JD6jk 7chusBDzdI7ZvrzgvetbPqoRqTDz6GIDRD3kTkmJQPLSOQBjitzgzT6JhgodOe4R 23cw2u6X3vDXVgqOwwWMd5HLBA== -----END CERTIFICATE-----Generated at Wed May 13 05:40:47 2026 by rpki-client