$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: cHwenXt7Ngiv3zk7Z0TCt7KFiiCOV5qzp2Kfnm+pti8= Subject key identifier: 4E:6F:56:9F:F0:73:C1:39:34:6C:DC:BD:70:08:01:3E:28:9E:4B:12 Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: B3 Signing time: Mon 11 May 2026 07:38:18 +0000 Manifest this update: Mon 11 May 2026 07:38:17 +0000 Manifest next update: Mon 18 May 2026 07:38:17 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: oI37tiZ+2siWXnPIX9VUq7Y5nLU009+9WBtaiSP92/8=) 2: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=) 3: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=) 4: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=) 5: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: May 11 07:38:17 2026 GMT Not After : May 18 07:38:17 2026 GMT Subject: CN=6a01876a-d4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:ed:08:8d:b6:95:4e:ca:9b:d3:5a:a2:58: 22:9a:b7:24:5d:9e:cd:30:8a:9d:9f:d1:50:ec:d1: d2:20:7a:48:c7:8a:b9:64:85:78:f2:6f:b1:dc:83: 77:da:21:b3:a1:62:36:06:06:95:b1:02:47:05:e2: 49:a2:33:47:10:ea:7d:b1:e4:5f:84:bf:1a:47:dc: 30:8a:5c:fd:7e:96:e0:2e:ff:0c:4a:91:20:69:26: 5e:6d:4c:32:a1:5b:d1:5c:f3:78:27:02:74:9d:e2: 7a:33:99:ad:80:9a:a2:c4:de:b8:4d:37:23:8d:c9: 10:4b:8f:d7:1d:d4:72:4a:d0:db:92:98:32:50:55: 55:d9:bc:64:84:7f:4a:b6:10:52:6a:b0:3b:ba:c9: ac:40:74:ea:71:15:7f:1b:41:46:7e:55:26:4b:c6: 84:70:23:88:34:af:00:ae:88:4b:f5:ee:cd:05:37: e2:5b:dc:13:74:2e:a7:1a:e2:b5:c1:de:3e:af:24: 4b:ca:f9:02:24:b4:fa:1a:c0:9e:03:bd:a1:4d:62: 6a:6f:fe:25:ea:a1:54:8e:97:74:10:d9:e1:cc:43: 54:46:71:0f:93:f7:08:f5:11:9d:e8:97:cc:4a:da: 6b:54:46:59:2c:ee:01:99:fa:f1:56:69:dc:a0:cd: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:56:9F:F0:73:C1:39:34:6C:DC:BD:70:08:01:3E:28:9E:4B:12 X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:96:e1:89:6e:0b:b5:5c:d7:80:b1:0a:8b:d8:83:c4:b1:6c: 6b:5b:69:63:0d:f4:b9:ff:49:80:6f:b8:a6:c3:ee:ce:b0:80: 6a:10:90:05:12:6e:6f:03:e5:34:e0:ed:a9:3d:05:7f:70:a1: 80:c8:40:9b:f0:29:d6:7b:e0:72:42:33:cc:12:a7:04:b4:fa: d3:4e:7b:c1:6b:b8:48:1a:a5:c1:66:a1:6b:e6:12:e5:2c:c8: f8:2d:74:60:19:b1:eb:c8:5f:d8:97:fe:24:fe:55:18:e3:18: 8a:48:3c:cd:45:e6:dc:f2:cb:7a:cc:e1:02:18:dd:9d:62:6f: a9:16:3d:68:0f:65:1b:71:9d:fa:28:60:77:7e:ef:14:a7:8e: ad:8c:63:16:67:94:38:70:8f:9c:45:6a:42:b5:b7:c0:41:9a: 25:b5:11:a0:53:a4:0e:60:db:c2:ae:ab:1d:07:1d:15:65:d4: 2b:d5:b5:62:92:72:08:2c:87:e6:85:e9:7e:d7:f3:29:bd:72: 2d:30:6f:7c:3a:d4:d5:d3:24:9e:60:fe:eb:03:bf:1b:4b:a9: 4b:6f:3a:0c:0a:53:a3:7d:10:79:58:3e:2c:7b:4c:3d:50:c2: 5a:5e:ad:dd:df:33:8e:f2:dc:7f:ef:7f:67:a9:e5:bb:ca:9b: f6:7c:b1:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYwNTExMDczODE3WhcNMjYwNTE4MDczODE3WjAYMRYwFAYD VQQDEw02YTAxODc2YS1kNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR/tCI22lU7Km9NaolgimrckXZ7NMIqdn9FQ7NHSIHpIx4q5ZIV48m+x3IN3 2iGzoWI2BgaVsQJHBeJJojNHEOp9seRfhL8aR9wwilz9fpbgLv8MSpEgaSZebUwy oVvRXPN4JwJ0neJ6M5mtgJqixN64TTcjjckQS4/XHdRyStDbkpgyUFVV2bxkhH9K thBSarA7usmsQHTqcRV/G0FGflUmS8aEcCOINK8ArohL9e7NBTfiW9wTdC6nGuK1 wd4+ryRLyvkCJLT6GsCeA72hTWJqb/4l6qFUjpd0ENnhzENURnEPk/cI9RGd6JfM StprVEZZLO4BmfrxVmncoM27QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5vVp/w c8E5NGzcvXAIAT4onksSMB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQZbhiW4LtVzXgLEKi9iDxLFsa1tpYw30uf9JgG+4psPuzrCAahCQBRJubwPl NODtqT0Ff3ChgMhAm/Ap1nvgckIzzBKnBLT60057wWu4SBqlwWaha+YS5SzI+C10 YBmx68hf2Jf+JP5VGOMYikg8zUXm3PLLeszhAhjdnWJvqRY9aA9lG3Gd+ihgd37v FKeOrYxjFmeUOHCPnEVqQrW3wEGaJbURoFOkDmDbwq6rHQcdFWXUK9W1YpJyCCyH 5oXpftfzKb1yLTBvfDrU1dMknmD+6wO/G0upS286DApTo30QeVg+LHtMPVDCWl6t 3d8zjvLcf+9/Z6nlu8qb9nyxfg== -----END CERTIFICATE-----Generated at Wed May 13 05:53:33 2026 by rpki-client