$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: 97wznkhJ7PSL1AuWDFynkfOTeyvTeF/vyC1sT7Jf1gE= Subject key identifier: 94:9D:36:20:08:C7:1A:1C:82:F0:EE:B7:BA:AC:C5:53:02:2A:F9:16 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 0482 Signing time: Mon 11 May 2026 00:06:49 +0000 Manifest this update: Mon 11 May 2026 00:06:48 +0000 Manifest next update: Mon 18 May 2026 00:06:48 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: 1Q2srERw9gZWCPoqN1GkCoRFe9NLRbAuLvf0VsH0znY=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: May 11 00:06:48 2026 GMT Not After : May 18 00:06:48 2026 GMT Subject: CN=6a011d99-e2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:e0:28:38:1e:aa:ec:8f:27:77:e9:5d:db: e9:ef:0b:bf:c1:eb:30:4c:50:82:17:73:4b:e7:0d: f0:fc:60:26:82:99:f5:8a:dd:27:4f:39:e9:a9:5a: f7:a6:70:2b:c8:6f:6c:62:12:00:34:31:9f:c2:9d: ca:96:33:4c:67:9f:2d:4b:56:90:59:e0:77:9c:4f: 81:f7:1a:c9:bf:3b:65:d1:e0:ad:6f:6f:8c:e7:99: 50:01:0a:fd:73:3d:dc:4c:b0:84:f0:e3:59:35:b7: 28:2a:18:fa:d6:04:aa:d5:5c:ae:97:5f:2c:c3:4b: b5:d1:43:12:a7:dc:6c:d3:3f:7f:ab:65:6b:38:47: 8a:b8:26:a4:23:19:0f:d2:32:c5:8c:22:9d:ff:3d: 00:b2:51:6c:bb:d7:b5:21:9b:e6:44:a9:a6:a7:1d: ca:cf:e8:6c:1a:3f:0d:0e:16:16:9c:0d:66:9d:6e: da:b8:ee:b0:9a:4f:87:95:f3:e0:de:5c:85:89:07: bd:19:3c:48:ec:92:1b:4a:38:2e:48:a4:41:e5:9c: 8e:1e:46:ca:04:42:c2:0c:b4:74:b2:d9:b5:54:e4: 45:2e:9d:39:29:50:15:21:0a:07:e5:5d:1f:71:75: 6f:a8:fe:bb:6d:09:37:4f:cf:ff:00:83:2c:5b:9f: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:36:20:08:C7:1A:1C:82:F0:EE:B7:BA:AC:C5:53:02:2A:F9:16 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3a:c7:a2:bc:cd:d1:d7:8e:4f:49:3d:4e:0b:14:b0:d9:2c: fa:ed:a6:77:eb:8c:1f:f1:ef:7c:e8:4c:a5:a2:47:ff:07:84: de:bf:f5:f5:5c:3c:78:81:38:d0:d2:c0:87:32:c0:92:1c:eb: c5:8b:c0:8e:d5:b8:63:d0:b8:46:b0:03:06:03:bc:9d:27:8d: 5d:7d:bf:ab:ee:d8:3a:33:4b:77:5f:e7:2c:d3:0d:c9:ed:b8: 73:4a:bb:18:ab:ec:9c:de:af:04:b6:19:b1:88:8f:e4:7a:60: bf:bc:ec:68:d2:17:fa:04:a1:1e:1a:56:f3:c2:ed:19:6e:4a: 53:38:fe:e7:b1:2e:b1:b6:7c:c7:ca:54:68:b4:37:e0:6f:7d: f6:a8:43:2c:47:00:b7:b7:7d:1f:eb:1a:e2:8a:cc:da:97:52: 12:f9:e2:12:43:6d:55:e5:9f:ff:c8:63:b2:b8:28:52:22:e5: 76:2f:ae:b2:7d:a2:9c:64:f4:05:f3:09:24:b5:da:3e:64:8b: 6b:99:0f:51:fd:61:a3:a9:f4:a2:a7:d5:6e:f7:a6:71:e9:85: bc:2d:b9:7e:19:36:24:bc:7d:c9:5d:57:47:58:74:75:05:b0: f2:70:8c:91:d8:d1:0e:77:76:85:9b:3e:6a:96:87:6c:59:6f: f8:78:fa:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjYwNTExMDAwNjQ4WhcNMjYwNTE4MDAwNjQ4WjAYMRYwFAYD VQQDEw02YTAxMWQ5OS1lMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tvgKDgequyPJ3fpXdvp7wu/weswTFCCF3NL5w3w/GAmgpn1it0nTznpqVr3 pnAryG9sYhIANDGfwp3KljNMZ58tS1aQWeB3nE+B9xrJvztl0eCtb2+M55lQAQr9 cz3cTLCE8ONZNbcoKhj61gSq1Vyul18sw0u10UMSp9xs0z9/q2VrOEeKuCakIxkP 0jLFjCKd/z0AslFsu9e1IZvmRKmmpx3Kz+hsGj8NDhYWnA1mnW7auO6wmk+HlfPg 3lyFiQe9GTxI7JIbSjguSKRB5ZyOHkbKBELCDLR0stm1VORFLp05KVAVIQoH5V0f cXVvqP67bQk3T8//AIMsW5/9WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSdNiAI xxocgvDut7qsxVMCKvkWMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATzrHorzN0deOT0k9TgsUsNks+u2md+uMH/HvfOhMpaJH/weE3r/19Vw8eIE4 0NLAhzLAkhzrxYvAjtW4Y9C4RrADBgO8nSeNXX2/q+7YOjNLd1/nLNMNye24c0q7 GKvsnN6vBLYZsYiP5Hpgv7zsaNIX+gShHhpW88LtGW5KUzj+57EusbZ8x8pUaLQ3 4G999qhDLEcAt7d9H+sa4orM2pdSEvniEkNtVeWf/8hjsrgoUiLldi+usn2inGT0 BfMJJLXaPmSLa5kPUf1ho6n0oqfVbvemcemFvC25fhk2JLx9yV1XR1h0dQWw8nCM kdjRDnd2hZs+apaHbFlv+Hj6Sg== -----END CERTIFICATE-----Generated at Wed May 13 00:29:15 2026 by rpki-client