$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: ja2sSC1NvGWxQPGhaybOWeqfvkI9vzw9Anl0SDdHSvU= Subject key identifier: B8:6F:CF:5A:E2:E3:6C:09:A5:C8:78:D8:1A:8A:6C:69:80:65:9D:34 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 086D Signing time: Tue 12 May 2026 20:48:07 +0000 Manifest this update: Tue 12 May 2026 20:48:07 +0000 Manifest next update: Tue 19 May 2026 20:48:07 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: +PVYMBWwAzeSOUagSCPZOJsxUXYlopZKa0sRjgmxnak=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: e9rRepgEUQCp9vSJIwP7DAt7IRy8y+BxF4pfmKiepf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: May 12 20:48:07 2026 GMT Not After : May 19 20:48:07 2026 GMT Subject: CN=6a039207-86cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:20:01:29:15:f1:c8:aa:ab:7c:72:c3:6a: d7:0a:55:cf:27:40:6f:e0:a4:e2:cd:21:80:af:9e: cb:8e:8d:ea:6d:53:08:31:e0:e6:3e:99:19:43:6c: bb:3d:3b:d3:22:4c:18:1c:5e:e6:d7:08:62:49:0b: ca:99:77:02:5a:cb:0d:5a:be:61:e7:f2:ec:07:2d: b5:36:52:cb:12:91:a6:46:2f:c7:10:35:ac:f5:78: c8:e9:19:de:e8:c2:a9:ab:82:a3:50:be:81:8f:95: 2f:19:7b:d0:65:98:91:9b:ce:07:03:d2:86:31:de: 33:0a:85:7b:3a:1b:79:da:ef:f1:35:fc:13:61:c0: a8:a7:d3:2d:11:0b:38:be:91:3b:f6:3e:73:2c:e0: 6e:94:3f:a9:69:00:6d:6c:80:c6:26:6f:37:b4:b0: 06:3e:d9:18:56:76:a9:94:c7:31:f9:c2:9f:87:22: 17:0c:9d:1c:a2:a2:a8:96:ed:b5:e0:74:4c:8c:f2: 53:02:c5:f2:ca:64:0a:9d:a7:dd:0b:70:5f:f9:dd: 29:9f:c1:92:74:75:19:5a:e9:86:48:d3:50:8c:40: 7b:3b:53:bd:d2:d4:8d:b0:bc:4f:16:3a:09:dc:7b: 9d:4a:7e:a7:7c:8d:70:df:8e:52:ae:d6:69:c0:09: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6F:CF:5A:E2:E3:6C:09:A5:C8:78:D8:1A:8A:6C:69:80:65:9D:34 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:07:c0:5f:74:1d:c3:e8:77:90:81:ae:f7:c1:df:45:82:f8: 02:ca:16:94:51:c1:26:63:22:ff:1e:13:39:4c:40:87:60:3d: 5c:90:14:0d:25:b0:e1:ec:c8:6b:5f:ff:c8:3f:33:d9:da:64: b3:d9:4a:4a:fa:a8:fd:9f:88:35:01:77:ec:56:d9:a0:3d:ab: 87:37:a8:a5:d7:b1:2a:7e:2e:1d:6e:4d:74:1f:69:16:4c:a5: 18:22:68:c3:2f:73:04:58:51:e6:8c:f8:bd:64:eb:0a:79:d0: b2:73:ad:89:6e:26:fa:4c:d2:04:57:56:df:f7:64:2d:7c:ce: f6:36:07:e6:b8:6b:e3:09:ff:88:a5:7f:50:34:d9:64:62:a5: 68:f7:3a:26:81:a7:5e:17:1a:2e:98:0c:b4:c0:22:0d:0b:ff: ee:b8:6f:01:a1:31:e3:5a:8f:c3:12:93:5b:7c:3f:fe:8f:a6: 00:07:c5:5b:16:3d:db:59:d3:43:c0:0d:33:4b:69:2f:4a:20: 46:e7:32:9f:41:a9:f9:f9:f9:30:a6:84:39:28:a5:12:52:16: df:52:aa:a4:3a:76:33:a8:5f:88:77:db:65:ca:5b:80:91:a0: f4:b6:b7:78:3a:ab:a0:0f:94:45:3a:3e:0e:60:4f:9c:33:5c: 8a:b6:3a:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjYwNTEyMjA0ODA3WhcNMjYwNTE5MjA0ODA3WjAYMRYwFAYD VQQDEw02YTAzOTIwNy04NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23UgASkV8ciqq3xyw2rXClXPJ0Bv4KTizSGAr57Ljo3qbVMIMeDmPpkZQ2y7 PTvTIkwYHF7m1whiSQvKmXcCWssNWr5h5/LsBy21NlLLEpGmRi/HEDWs9XjI6Rne 6MKpq4KjUL6Bj5UvGXvQZZiRm84HA9KGMd4zCoV7Oht52u/xNfwTYcCop9MtEQs4 vpE79j5zLOBulD+paQBtbIDGJm83tLAGPtkYVnaplMcx+cKfhyIXDJ0coqKolu21 4HRMjPJTAsXyymQKnafdC3Bf+d0pn8GSdHUZWumGSNNQjEB7O1O90tSNsLxPFjoJ 3HudSn6nfI1w345SrtZpwAmXfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhvz1ri 42wJpch42BqKbGmAZZ00MB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmwfAX3Qdw+h3kIGu98HfRYL4AsoWlFHBJmMi/x4TOUxAh2A9XJAUDSWw4ezI a1//yD8z2dpks9lKSvqo/Z+INQF37FbZoD2rhzeopdexKn4uHW5NdB9pFkylGCJo wy9zBFhR5oz4vWTrCnnQsnOtiW4m+kzSBFdW3/dkLXzO9jYH5rhr4wn/iKV/UDTZ ZGKlaPc6JoGnXhcaLpgMtMAiDQv/7rhvAaEx41qPwxKTW3w//o+mAAfFWxY921nT Q8ANM0tpL0ogRucyn0Gp+fn5MKaEOSilElIW31KqpDp2M6hfiHfbZcpbgJGg9La3 eDqroA+URTo+DmBPnDNcirY66Q== -----END CERTIFICATE-----Generated at Wed May 13 04:13:12 2026 by rpki-client