$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json) Hash identifier: omHVte1xM2XG1vo1AkrQLx9+AmcNEOisyYhBL9Wwah0= Subject key identifier: 51:61:98:B6:12:EB:44:C6:D0:30:46:50:0C:5E:AC:79:B3:94:AC:39 Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft Manifest number: 0CF6 Signing time: Tue 12 May 2026 18:16:38 +0000 Manifest this update: Tue 12 May 2026 18:16:38 +0000 Manifest next update: Tue 19 May 2026 18:16:38 +0000 Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: MEI3Gu+nJ5xzfu7vgrhDmhl5oHcfe/f3R5ChBVsQgvQ=) 2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: May 12 18:16:38 2026 GMT Not After : May 19 18:16:38 2026 GMT Subject: CN=6a036e86-0312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:3b:90:2d:21:7e:54:cd:c3:41:bd:5b:40: af:0f:8b:57:8c:e2:99:5b:12:71:62:76:e8:fd:19: 1a:31:ae:ba:4f:06:0c:f1:0d:56:82:51:af:5d:e9: 47:af:da:cd:e0:34:13:d6:ad:a0:62:ce:4e:50:40: eb:46:1d:c4:bd:80:0a:39:53:86:f3:d3:e8:e3:09: d0:55:a7:63:b9:f0:e2:9b:b7:80:c9:40:99:21:b6: 40:e8:3f:f8:7b:1a:bd:a4:b2:35:49:a9:22:bb:66: a7:58:ec:99:50:43:a3:6a:35:7e:a3:65:06:56:45: 24:bf:73:3f:59:74:08:61:92:45:82:23:50:31:dc: 29:89:5e:9a:9d:7c:99:9c:30:17:f8:2b:a1:74:bf: 0e:3f:06:49:16:6a:7a:e1:ba:b9:53:ba:77:a2:55: 79:cf:23:dc:34:2b:5e:bd:c2:5a:0c:30:5c:59:75: 3e:c8:6e:f8:92:b6:75:60:90:1d:37:c1:8c:99:23: ad:f3:08:cb:72:d6:6c:78:65:4d:86:b4:e4:02:6e: 79:91:68:bc:41:57:99:7f:10:32:d9:45:bc:42:6d: 05:35:40:4e:f6:70:68:56:81:2e:ec:29:fe:32:a3: 97:e7:3d:63:52:f6:ad:47:31:f0:e8:41:42:54:49: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:98:B6:12:EB:44:C6:D0:30:46:50:0C:5E:AC:79:B3:94:AC:39 X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:53:7b:e4:0a:ae:91:b3:7c:da:2a:79:a2:ec:41:77:36:6c: a4:d0:ed:59:f4:bc:9b:66:eb:01:06:66:44:11:9f:83:08:0d: 10:a4:d1:8b:d7:d6:cf:7a:ad:db:fd:3c:8f:6a:b0:aa:e4:58: cd:a3:58:41:ce:02:24:79:ad:43:6e:f5:ea:9a:17:31:a7:32: a9:46:08:56:72:cf:17:6c:d7:37:d2:69:ae:70:3b:6c:bd:90: b6:d8:a0:34:ef:8d:f7:23:50:59:ac:ff:08:3c:81:89:85:68: 97:e4:22:77:05:05:df:63:80:c9:37:89:a3:7f:16:63:3d:c9: 0c:45:3d:a8:71:0f:43:08:b8:0f:0a:21:f9:71:7d:a6:df:49: 40:78:6a:ad:57:d6:0e:88:d3:23:ff:74:5e:0d:45:b1:c6:99: 63:c2:43:af:ed:0c:99:28:03:bb:72:50:4c:23:32:15:95:a8: fb:fa:dc:bf:33:5f:9f:28:f6:d8:cf:fe:04:43:bb:03:4b:86: c1:58:52:87:db:f1:de:f5:31:1a:6e:5e:19:b5:cf:2d:2a:b1: 27:f5:19:d3:c5:09:6a:86:f9:f7:b5:05:dc:08:8f:45:99:54: e8:b9:24:fd:0c:b4:14:a0:b4:71:e4:c7:d3:55:ee:5d:45:43: 2c:cd:0d:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjYwNTEyMTgxNjM4WhcNMjYwNTE5MTgxNjM4WjAYMRYwFAYD VQQDEw02YTAzNmU4Ni0wMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRc7kC0hflTNw0G9W0CvD4tXjOKZWxJxYnbo/RkaMa66TwYM8Q1WglGvXelH r9rN4DQT1q2gYs5OUEDrRh3EvYAKOVOG89Po4wnQVadjufDim7eAyUCZIbZA6D/4 exq9pLI1Sakiu2anWOyZUEOjajV+o2UGVkUkv3M/WXQIYZJFgiNQMdwpiV6anXyZ nDAX+CuhdL8OPwZJFmp64bq5U7p3olV5zyPcNCtevcJaDDBcWXU+yG74krZ1YJAd N8GMmSOt8wjLctZseGVNhrTkAm55kWi8QVeZfxAy2UW8Qm0FNUBO9nBoVoEu7Cn+ MqOX5z1jUvatRzHw6EFCVEnnmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFhmLYS 60TG0DBGUAxerHmzlKw5MB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTA2NC8wNzYzOTYyMDA1MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVot S2hRTlRTTVU0ckRwd0VkREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUFN75AqukbN82ip5ouxBdzZspNDtWfS8m2brAQZmRBGfgwgNEKTRi9fWz3qt 2/08j2qwquRYzaNYQc4CJHmtQ2716poXMacyqUYIVnLPF2zXN9JprnA7bL2Qttig NO+N9yNQWaz/CDyBiYVol+QidwUF32OAyTeJo38WYz3JDEU9qHEPQwi4Dwoh+XF9 pt9JQHhqrVfWDojTI/90Xg1FscaZY8JDr+0MmSgDu3JQTCMyFZWo+/rcvzNfnyj2 2M/+BEO7A0uGwVhSh9vx3vUxGm5eGbXPLSqxJ/UZ08UJaob597UF3AiPRZlU6Lkk /Qy0FKC0ceTH01XuXUVDLM0NnA== -----END CERTIFICATE-----Generated at Wed May 13 07:12:48 2026 by rpki-client