$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: GOh3hlGW/Q4I12O3HtlAruveE5AcuqlRqG9crTc+0Pc= Subject key identifier: 0B:0C:B2:15:B5:96:52:DB:8C:6A:C8:B0:23:17:83:4A:E6:2A:62:87 Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 0849 Signing time: Tue 12 May 2026 21:02:43 +0000 Manifest this update: Tue 12 May 2026 21:02:42 +0000 Manifest next update: Tue 19 May 2026 21:02:42 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: Qqj3e/U3+++FJTe7bPrtb77NiumhgPrY1yJ5vjMNTuQ=) 2: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=) 3: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: May 12 21:02:42 2026 GMT Not After : May 19 21:02:42 2026 GMT Subject: CN=6a039572-5608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:92:f3:70:16:0e:d1:81:53:d9:42:57:96: 60:85:cc:5c:64:b4:f6:0f:d1:13:fe:68:5f:16:b5: e7:dc:2f:fb:23:6e:e1:60:b9:73:64:02:40:41:a6: a7:ed:8c:b4:0f:4e:a5:e9:ca:3f:fe:77:13:38:38: db:27:f9:3f:2f:d2:ad:72:bb:5f:d9:f5:04:fb:2a: cb:f5:c8:d8:94:83:4c:6d:ef:2a:e8:e8:b0:8b:a8: c0:62:c0:d3:5f:af:6d:70:29:67:55:b3:83:0a:8a: 28:d4:e9:63:52:34:7b:f8:86:ac:de:82:89:01:01: d8:14:92:7d:5d:42:08:c6:f2:d2:c0:5c:37:b8:59: 03:45:27:57:92:e4:c1:9f:53:dd:86:7e:aa:d3:47: 3d:8c:f7:6c:67:d4:de:9f:a1:59:63:23:78:8e:07: 4a:15:3a:c7:b2:f1:75:71:7a:b2:3a:07:d6:56:5b: 00:97:8f:7f:c5:96:60:d1:66:9a:a4:f5:b7:6f:bd: 81:64:fb:25:31:b9:04:c1:8c:dd:87:a4:96:d8:71: 9e:ab:34:5a:a4:cd:9f:f4:85:1a:35:6f:21:8f:5c: cf:16:81:2d:e6:a7:a5:e6:e5:eb:c2:fd:60:85:28: c2:44:d1:e4:9a:fd:92:b6:73:c5:5d:d2:73:03:0a: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0C:B2:15:B5:96:52:DB:8C:6A:C8:B0:23:17:83:4A:E6:2A:62:87 X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6f:8d:62:0a:1e:db:38:ed:f3:da:ea:9b:f6:5e:02:e2:dc: 95:27:11:0e:82:d2:e1:4c:66:4e:76:95:50:5b:82:dc:32:4d: 3a:54:2b:aa:eb:7e:c6:75:05:f8:e7:c8:79:bf:9f:e1:d5:8f: 1d:67:77:e0:c0:00:8a:7c:84:65:c5:93:9e:44:7d:77:63:47: ad:44:e5:d1:d4:82:fd:77:81:cd:c6:5a:f7:61:1f:15:e8:96: 48:c6:fa:10:eb:7e:79:3a:ab:d0:6d:5b:b8:14:31:73:a2:81: a7:53:b9:c9:ce:cb:cb:4e:ce:af:79:42:71:b8:e4:5b:7c:b7: c9:a2:3f:fb:49:20:6b:0d:e5:03:41:23:72:86:bf:ab:87:8b: 68:03:b6:3c:ed:8e:ce:fd:d7:6d:28:b3:c8:de:e9:a7:2e:92: c7:02:2d:97:ab:e1:62:98:f8:2b:2a:73:57:df:2a:27:e9:e4: 10:da:90:61:3a:68:c8:4f:4c:78:07:96:ae:aa:59:43:c2:15: 4e:f3:09:c2:c1:a3:01:c7:87:c8:7c:db:9f:e1:10:27:e8:e0: 9b:ca:d1:e6:b7:7c:ba:8d:35:f6:b5:d0:fd:a3:e4:e7:77:9b: de:0b:d9:75:5b:b7:a3:51:b8:46:e4:c5:07:69:de:33:bb:fa: 6d:0e:6d:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjYwNTEyMjEwMjQyWhcNMjYwNTE5MjEwMjQyWjAYMRYwFAYD VQQDEw02YTAzOTU3Mi01NjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJqS83AWDtGBU9lCV5ZghcxcZLT2D9ET/mhfFrXn3C/7I27hYLlzZAJAQaan 7Yy0D06l6co//ncTODjbJ/k/L9Ktcrtf2fUE+yrL9cjYlINMbe8q6Oiwi6jAYsDT X69tcClnVbODCooo1OljUjR7+Ias3oKJAQHYFJJ9XUIIxvLSwFw3uFkDRSdXkuTB n1Pdhn6q00c9jPdsZ9Ten6FZYyN4jgdKFTrHsvF1cXqyOgfWVlsAl49/xZZg0Waa pPW3b72BZPslMbkEwYzdh6SW2HGeqzRapM2f9IUaNW8hj1zPFoEt5qel5uXrwv1g hSjCRNHkmv2StnPFXdJzAwrOVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsMshW1 llLbjGrIsCMXg0rmKmKHMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaG+NYgoe2zjt89rqm/ZeAuLclScRDoLS4UxmTnaVUFuC3DJNOlQrqut+xnUF +OfIeb+f4dWPHWd34MAAinyEZcWTnkR9d2NHrUTl0dSC/XeBzcZa92EfFeiWSMb6 EOt+eTqr0G1buBQxc6KBp1O5yc7Ly07Or3lCcbjkW3y3yaI/+0kgaw3lA0Ejcoa/ q4eLaAO2PO2Ozv3XbSizyN7ppy6SxwItl6vhYpj4KypzV98qJ+nkENqQYTpoyE9M eAeWrqpZQ8IVTvMJwsGjAceHyHzbn+EQJ+jgm8rR5rd8uo019rXQ/aPk53eb3gvZ dVu3o1G4RuTFB2neM7v6bQ5tTA== -----END CERTIFICATE-----Generated at Wed May 13 14:38:28 2026 by rpki-client