$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: kuG7pQ1waqn9NvuiB4XEp5kpFRp7nyBsYBZFZMV80LM= Subject key identifier: 73:44:02:69:30:17:CF:04:C3:61:F8:E9:53:62:FB:67:38:29:FA:A1 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 18C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 18B5 Signing time: Tue 24 Mar 2026 16:23:01 +0000 Manifest this update: Tue 24 Mar 2026 16:23:00 +0000 Manifest next update: Tue 31 Mar 2026 16:23:00 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: ITfXF54oeL1R0VIWfO96bzEkBibnxTNryrTk01y1shE=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6341 (0x18c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Mar 24 16:23:00 2026 GMT Not After : Mar 31 16:23:00 2026 GMT Subject: CN=69c2ba65-b028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:a9:12:96:ce:73:9d:c5:c0:77:67:86:87: 14:ba:d0:bd:a7:49:18:42:20:85:49:02:84:5e:f0: ce:1c:d2:9d:43:15:d1:6a:76:42:d6:b5:9e:e8:0d: cd:dd:ae:bb:70:58:68:a3:da:c5:3a:f9:65:dc:69: 41:b5:cf:43:45:40:4d:dd:84:48:e5:5a:20:71:a1: 76:45:af:61:9a:dc:e7:bc:6d:01:10:39:94:d3:9b: 7c:e9:31:01:e1:9d:40:0f:6b:7e:56:cd:ae:60:f2: 9a:5c:25:05:d9:eb:64:7f:1a:db:06:dc:bc:2a:bb: 09:90:51:a3:2a:8f:f7:fe:3c:3c:ac:36:3a:ea:98: a3:e0:fc:fd:4c:0a:83:10:24:fa:29:7b:ff:eb:d9: 9b:38:d8:03:7b:f7:57:73:f3:d3:af:3a:34:57:cb: f3:d2:03:bb:8d:c6:3b:5d:1b:74:04:25:54:6b:48: e2:b9:2f:4a:1c:14:c0:3b:af:3b:5f:4d:b6:e6:fa: 37:9a:e8:9e:5b:17:6c:92:4d:c5:05:6a:39:c6:98: 22:49:08:0b:37:bb:48:4f:8c:94:a5:4b:27:12:72: d0:73:62:47:51:65:ff:37:99:3c:cf:a4:8b:35:1a: 9e:ec:f2:e2:d4:cd:91:ec:c1:15:e3:14:2d:ff:c1: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:44:02:69:30:17:CF:04:C3:61:F8:E9:53:62:FB:67:38:29:FA:A1 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9b:07:77:58:f4:f7:e2:75:58:79:84:a0:f7:59:49:4b:05: a4:0d:64:53:87:97:93:64:06:66:64:96:b9:54:03:c1:d9:25: 0c:15:dd:8c:d6:12:90:85:65:6e:7a:c0:21:1b:09:10:55:5b: 08:17:30:cc:91:c9:d7:d8:c2:4b:47:dc:4f:ed:af:d4:92:b0: 56:91:be:a2:c6:06:bb:d5:1d:e0:63:4e:ad:74:97:aa:d2:b9: 22:03:a3:61:c1:9e:a3:25:14:22:15:d8:a7:22:bf:1f:08:24: b0:f3:71:15:e8:66:fc:a5:c8:bf:e7:1a:4d:1a:16:65:68:d8: d6:f6:cf:0a:17:d4:52:e5:15:2b:78:ec:27:5b:78:cd:d9:3c: ea:19:a2:ba:7e:7f:a3:77:7d:f2:dc:21:b7:bd:26:8b:0f:9e: 7e:f6:b7:1a:c3:32:23:79:63:8b:87:cb:0b:1e:9e:8c:f1:f2: 67:c5:e0:02:6a:90:22:79:4f:41:87:01:09:32:f6:43:6b:da: be:ed:57:1d:dd:ca:36:f1:2e:a7:a5:38:77:4e:84:8e:91:f4: e4:39:d0:2a:45:37:c8:b1:58:f3:07:c9:60:b9:a7:76:a8:bf: ec:87:76:55:b8:1b:29:0f:3a:9a:05:bb:0e:4a:b5:ba:2a:2d: 0b:a4:f9:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYwMzI0MTYyMzAwWhcNMjYwMzMxMTYyMzAwWjAYMRYwFAYD VQQDEw02OWMyYmE2NS1iMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngapEpbOc53FwHdnhocUutC9p0kYQiCFSQKEXvDOHNKdQxXRanZC1rWe6A3N 3a67cFhoo9rFOvll3GlBtc9DRUBN3YRI5VogcaF2Ra9hmtznvG0BEDmU05t86TEB 4Z1AD2t+Vs2uYPKaXCUF2etkfxrbBty8KrsJkFGjKo/3/jw8rDY66pij4Pz9TAqD ECT6KXv/69mbONgDe/dXc/PTrzo0V8vz0gO7jcY7XRt0BCVUa0jiuS9KHBTAO687 X0225vo3muieWxdskk3FBWo5xpgiSQgLN7tIT4yUpUsnEnLQc2JHUWX/N5k8z6SL NRqe7PLi1M2R7MEV4xQt/8G3bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNEAmkw F88Ew2H46VNi+2c4KfqhMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFpsHd1j09+J1WHmEoPdZSUsFpA1kU4eXk2QGZmSWuVQDwdklDBXdjNYSkIVl bnrAIRsJEFVbCBcwzJHJ19jCS0fcT+2v1JKwVpG+osYGu9Ud4GNOrXSXqtK5IgOj YcGeoyUUIhXYpyK/HwgksPNxFehm/KXIv+caTRoWZWjY1vbPChfUUuUVK3jsJ1t4 zdk86hmiun5/o3d98twht70miw+efva3GsMyI3lji4fLCx6ejPHyZ8XgAmqQInlP QYcBCTL2Q2vavu1XHd3KNvEup6U4d06EjpH05DnQKkU3yLFY8wfJYLmndqi/7Id2 VbgbKQ86mgW7Dkq1uiotC6T5Lg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:37:24 2026 by rpki-client