$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json) Hash identifier: dQhwSJqEd1b1fWWlfPo1NNEgdsLJip4dfT7Yw8+FkWI= Subject key identifier: 7D:21:89:0F:2F:5E:9F:2C:7B:0D:63:A5:95:08:DC:75:98:A5:DB:AC Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1 Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft Manifest number: 0288 Signing time: Wed 13 May 2026 01:52:27 +0000 Manifest this update: Wed 13 May 2026 01:52:27 +0000 Manifest next update: Wed 20 May 2026 01:52:27 +0000 Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: E2PtabpP4NzDVxFCfw9oRrROGT8uk+60AcxvHVaOZjI=) 2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1 Validity Not Before: May 13 01:52:27 2026 GMT Not After : May 20 01:52:27 2026 GMT Subject: CN=6a03d95b-2e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:15:39:89:fc:62:da:c0:f5:06:b4:8b:de:b5: 37:81:33:10:4d:dc:0b:c6:ce:39:0b:81:86:8e:62: 93:80:14:25:5a:4c:da:b7:4a:1b:20:30:00:6b:52: 50:a9:32:4f:b5:2e:2c:15:69:79:dc:53:4f:5b:1b: ec:76:17:0d:62:22:8c:f9:ae:c6:80:2f:23:a1:9a: cc:de:00:2b:d8:c8:e5:d7:4c:c3:8d:ac:1c:8c:49: 33:dc:0f:63:2c:cd:f3:e0:42:b7:ca:9d:0e:87:83: 1f:23:77:85:1a:c8:41:a0:74:5e:df:c8:38:9f:21: b4:82:e0:7f:41:26:74:47:bb:e4:34:e9:84:16:05: 5a:c1:d6:ed:d2:d2:39:58:fd:cc:f5:5a:4f:87:da: 05:66:9a:e6:5d:8f:c0:6f:0a:9c:f9:ad:10:43:22: 79:35:6f:40:57:4c:77:db:89:d4:f0:e5:f6:02:32: 3f:61:47:12:82:76:c4:04:f1:a6:b8:fa:58:15:f4: fe:24:e5:fe:70:89:e9:97:c4:05:66:90:bd:e9:34: 86:df:20:5d:58:85:21:dc:ae:b1:3e:68:43:1c:ba: a8:7f:2f:0f:44:db:a1:9b:79:16:8f:92:32:b9:3e: 82:f2:d5:91:6c:03:09:33:2f:bd:fc:9f:43:32:39: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:89:0F:2F:5E:9F:2C:7B:0D:63:A5:95:08:DC:75:98:A5:DB:AC X509v3 Authority Key Identifier: keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:41:e5:5f:bd:cc:a1:6b:95:94:6d:87:20:0b:27:1c:2a:70: 83:35:2d:4c:c4:d8:19:02:37:24:0f:9a:e2:b2:21:03:bb:e8: 88:f3:24:6a:db:50:9a:89:67:f8:d5:3d:77:05:a1:75:bd:5d: bc:e4:9a:83:e1:97:40:a7:c2:6b:7f:e9:e5:30:dc:36:5e:99: 01:49:71:a7:5e:41:b3:94:23:5d:39:3c:76:cc:a6:50:78:73: 68:d8:5a:20:c8:de:5f:48:39:23:f7:75:45:ab:b0:85:75:81: 55:15:bb:c0:e5:34:f0:98:9c:23:5a:3a:cc:54:5b:85:25:44: 62:ec:d4:a3:4c:50:3d:7a:a7:97:f6:61:bc:49:59:bb:dd:a9: 1f:c0:b7:77:b4:35:24:9d:3b:18:f9:9a:a9:e3:aa:b5:29:99: b4:25:d8:31:35:08:ba:fb:cf:4d:a4:99:0e:81:22:95:28:08: 3f:40:25:cc:11:1b:be:55:a5:ad:41:f8:fc:92:9a:34:e2:8d: 65:e6:92:fc:bc:0a:a6:19:2f:5b:44:3b:44:85:36:96:8c:fb: 89:8e:e4:dd:7f:df:55:7d:c9:0d:d8:5d:8f:a2:48:27:b2:40: a9:b2:d1:54:87:be:2b:5a:c1:67:0e:e5:23:c8:56:13:98:68: 30:c9:30:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQTUxMTAvBgNVBAUTKDYwMThCOTg1QzM5OUNCMDczMUMxNjM0Q0ZFNEI0Nzkx MkYyQUY1RDEwHhcNMjYwNTEzMDE1MjI3WhcNMjYwNTIwMDE1MjI3WjAYMRYwFAYD VQQDEw02YTAzZDk1Yi0yZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BU5ifxi2sD1BrSL3rU3gTMQTdwLxs45C4GGjmKTgBQlWkzat0obIDAAa1JQ qTJPtS4sFWl53FNPWxvsdhcNYiKM+a7GgC8joZrM3gAr2Mjl10zDjawcjEkz3A9j LM3z4EK3yp0Oh4MfI3eFGshBoHRe38g4nyG0guB/QSZ0R7vkNOmEFgVawdbt0tI5 WP3M9VpPh9oFZprmXY/Abwqc+a0QQyJ5NW9AV0x324nU8OX2AjI/YUcSgnbEBPGm uPpYFfT+JOX+cInpl8QFZpC96TSG3yBdWIUh3K6xPmhDHLqofy8PRNuhm3kWj5Iy uT6C8tWRbAMJMy+9/J9DMjmFBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0hiQ8v Xp8sew1jpZUI3HWYpdusMB8GA1UdIwQYMBaAFGAYuYXDmcsHMcFjTP5LR5EvKvXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JBNS8yODYyMENDNDcw NUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3Y3h3V05NX2t0SGtTOHE5 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3 Y3h3V05NX2t0SGtTOHE5ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKEHlX73MoWuVlG2HIAsnHCpwgzUtTMTYGQI3JA+a4rIhA7voiPMkattQmoln +NU9dwWhdb1dvOSag+GXQKfCa3/p5TDcNl6ZAUlxp15Bs5QjXTk8dsymUHhzaNha IMjeX0g5I/d1RauwhXWBVRW7wOU08JicI1o6zFRbhSVEYuzUo0xQPXqnl/ZhvElZ u92pH8C3d7Q1JJ07GPmaqeOqtSmZtCXYMTUIuvvPTaSZDoEilSgIP0AlzBEbvlWl rUH4/JKaNOKNZeaS/LwKphkvW0Q7RIU2loz7iY7k3X/fVX3JDdhdj6JIJ7JAqbLR VIe+K1rBZw7lI8hWE5hoMMkwCg== -----END CERTIFICATE-----Generated at Wed May 13 05:34:47 2026 by rpki-client