$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json) Hash identifier: B0Mra+hEdOwgJ+EVrlDkzhTQvf4dlnOF4p26Vq3aqjs= Subject key identifier: 89:E9:35:06:56:71:29:6F:B1:DE:52:82:C5:03:2E:9D:8D:20:00:A9 Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft Manifest number: 14 Signing time: Tue 12 May 2026 16:08:59 +0000 Manifest this update: Tue 12 May 2026 16:08:59 +0000 Manifest next update: Tue 19 May 2026 16:08:59 +0000 Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: kAnylWivDxl55qBEdSDKp5KrkOjg+SgBa9H4QWIpAoQ=) 2: E685F69A372D11F1A4767B088F833773.roa (hash: FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=) 3: CB53532C4A9711F184FA30B7B0833773.roa (hash: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: May 12 16:08:59 2026 GMT Not After : May 19 16:08:59 2026 GMT Subject: CN=6a03509b-8f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:56:59:c8:ca:2f:a7:7c:82:71:a0:a8:54: d8:07:12:2a:ef:ee:46:e3:6d:93:b8:ff:56:2d:c5: a7:b2:63:50:a6:3e:71:7b:73:9d:59:0a:4a:2b:0a: fe:3b:b5:26:fc:fb:ab:91:33:4e:a9:e2:ef:7d:88: 69:69:44:f0:0c:e9:18:12:ae:df:27:e2:9b:b6:b7: c5:af:ee:e3:34:c7:f3:67:76:7f:29:23:d8:c8:50: 89:21:e0:c4:f9:83:6f:9f:dc:35:54:62:a3:58:ee: bb:ca:7b:3a:df:58:bb:10:3d:e3:a2:3a:a1:e1:0c: f3:f7:3c:27:57:f6:97:cf:87:20:77:3b:6f:07:74: d8:13:bc:60:12:60:6a:4a:6f:38:e7:c3:f6:7c:a1: db:e0:a0:d2:bc:2f:d2:33:4f:3f:47:af:0b:95:eb: a9:8f:f6:86:88:a5:de:75:92:2a:1a:ac:20:ee:1d: 46:87:1a:fa:e9:d7:ed:0d:ca:5a:37:c8:47:22:1c: 86:29:89:24:26:4b:77:27:ca:53:09:10:0b:21:9a: 52:6d:95:06:b1:5d:40:1f:67:c3:26:78:24:cb:56: dc:a5:c7:1d:00:e5:07:4f:cb:37:6a:b9:49:65:17: 34:cc:68:e1:6a:f9:08:fe:e7:60:bb:58:45:c9:63: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E9:35:06:56:71:29:6F:B1:DE:52:82:C5:03:2E:9D:8D:20:00:A9 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0f:47:7a:62:48:eb:9b:c8:a8:18:79:31:48:0b:8a:a4:19: 48:a8:59:0a:7e:6d:84:56:30:67:fe:c4:2c:2d:ed:1d:d8:cb: 47:cf:d9:d4:e0:b2:a0:0a:de:67:82:ff:ed:c3:63:0f:e8:24: bb:44:53:f8:32:9c:90:b1:10:fd:5e:90:b3:ce:1c:cb:54:ad: 2c:9f:10:ff:81:e7:52:40:d2:cd:f7:4b:b3:cc:93:4d:dc:96: a6:ec:39:c8:cb:24:f8:c7:e7:79:86:58:93:a1:0c:79:10:bd: 1f:ec:4d:72:0e:3f:dd:1d:e6:92:b0:88:eb:31:fb:62:14:16: 73:a7:03:fe:18:a5:0f:b8:08:f2:57:c4:85:7f:32:af:fe:d9: 1f:e3:c2:db:61:9f:6b:39:eb:ad:2d:b4:f6:ad:37:84:f0:2d: 9c:e8:b5:5d:e1:de:bc:a1:de:87:32:c6:10:af:30:92:f7:c4: a5:63:f9:f3:d9:c4:bc:ed:cd:75:1c:52:ac:4c:fd:6b:5a:ff: 8d:fc:cc:21:d0:4a:a5:ae:b8:0c:b1:de:5e:bf:a9:0d:8a:1f: ee:62:d6:42:7b:62:a0:06:ca:0f:a9:a5:8d:6a:4a:44:cf:87: cf:54:5a:f5:62:c5:3a:6c:db:e8:29:a1:1e:b9:b9:3f:ae:61: 8d:8d:e1:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy RkJEOTYyRDAeFw0yNjA1MTIxNjA4NTlaFw0yNjA1MTkxNjA4NTlaMBgxFjAUBgNV BAMTDTZhMDM1MDliLThmMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqBlZZyMovp3yCcaCoVNgHEirv7kbjbZO4/1YtxaeyY1CmPnF7c51ZCkorCv47 tSb8+6uRM06p4u99iGlpRPAM6RgSrt8n4pu2t8Wv7uM0x/Nndn8pI9jIUIkh4MT5 g2+f3DVUYqNY7rvKezrfWLsQPeOiOqHhDPP3PCdX9pfPhyB3O28HdNgTvGASYGpK bzjnw/Z8odvgoNK8L9IzTz9HrwuV66mP9oaIpd51kioarCDuHUaHGvrp1+0Nylo3 yEciHIYpiSQmS3cnylMJEAshmlJtlQaxXUAfZ8MmeCTLVtylxx0A5QdPyzdquUll FzTMaOFq+Qj+52C7WEXJY7LRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiek1BlZx KW+x3lKCxQMunY0gAKkwHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB ODRBLzc3QUM3QkQyMzRGNzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhY SjVyQ0oyVFRMWGktOWxpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXD0d6Ykjrm8ioGHkxSAuKpBlIqFkKfm2EVjBn/sQsLe0d2MtHz9nU4LKgCt5n gv/tw2MP6CS7RFP4MpyQsRD9XpCzzhzLVK0snxD/gedSQNLN90uzzJNN3Jam7DnI yyT4x+d5hliToQx5EL0f7E1yDj/dHeaSsIjrMftiFBZzpwP+GKUPuAjyV8SFfzKv /tkf48LbYZ9rOeutLbT2rTeE8C2c6LVd4d68od6HMsYQrzCS98SlY/nz2cS87c11 HFKsTP1rWv+N/Mwh0EqlrrgMsd5ev6kNih/uYtZCe2KgBsoPqaWNakpEz4fPVFr1 YsU6bNvoKaEeubk/rmGNjeEV -----END CERTIFICATE-----Generated at Wed May 13 12:24:24 2026 by rpki-client