$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: jtVcC119Q9XYyMVH2xEcmLwWvWyrP3MHWkoFz6Ft1qA= Subject key identifier: 4C:10:95:67:AE:12:3B:10:E8:A0:5A:17:22:78:81:9C:70:D7:6F:A1 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0F08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0EEE Signing time: Tue 12 May 2026 17:41:33 +0000 Manifest this update: Tue 12 May 2026 17:41:33 +0000 Manifest next update: Tue 19 May 2026 17:41:33 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: xi0hqkONwGuXSc1x0cX5DmThCkNwsJO+RxebH4Ry8qY=) 2: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 9PzmGNvK7SqmPlPyXHrhBcEPkqCMbrFtsm/C/q55ytk=) 3: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: JURe/kWLxWBBPujRNutDT5hH/C63Ar6PS7XUiquehOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3848 (0xf08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: May 12 17:41:33 2026 GMT Not After : May 19 17:41:33 2026 GMT Subject: CN=6a03664d-f0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:c3:48:7d:8f:2f:68:a9:49:eb:6d:c1:71: 1d:64:80:f7:dc:30:ad:f6:cd:27:81:60:2d:dd:bf: 22:e4:26:91:54:dd:66:fd:f0:77:ee:4a:18:03:e7: 7c:be:74:cd:b7:d8:53:59:1f:1f:96:33:81:71:b9: 06:3a:6a:e9:5e:d7:9e:e7:d2:e6:9a:fd:28:48:34: 0f:6a:23:4b:d2:e6:33:c0:0b:84:c6:58:4d:25:69: 33:c6:a0:01:79:00:4a:1b:42:cb:f8:de:72:a3:d2: 6c:1f:24:69:0d:9e:13:62:4c:13:5d:7e:86:05:7d: 24:52:b4:23:30:1f:43:30:ab:1a:58:3c:1b:94:51: 2a:0d:0e:76:08:77:7b:a1:5e:f5:92:e7:ec:8b:5f: c8:6a:7a:50:8e:8f:30:33:c2:90:2f:a6:e5:d9:40: 64:f2:12:de:38:1e:65:be:93:1f:b1:c7:d7:61:71: 62:57:aa:29:24:f5:a0:dc:4b:9a:de:6f:8b:9d:e0: c2:12:44:9b:f3:b6:57:c5:ef:a4:47:0a:0f:f9:71: ff:42:e8:c0:8f:10:0a:51:47:9a:e5:ac:c2:be:2d: ef:6c:ff:a5:59:a5:23:5b:80:49:4a:17:35:e8:cd: fb:be:c3:60:03:29:8d:7f:67:aa:84:ad:6a:5c:e0: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:10:95:67:AE:12:3B:10:E8:A0:5A:17:22:78:81:9C:70:D7:6F:A1 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d6:fb:a7:6a:86:03:eb:fb:7b:5d:c4:b4:1b:44:81:9b:2c: 32:23:56:53:2d:ea:8c:93:18:93:94:3e:5f:61:ec:89:9d:f3: 31:c4:0e:84:fb:5b:26:ae:e6:d5:b6:23:db:7b:f1:db:74:91: ad:2c:64:69:62:e3:f2:32:39:ce:d8:50:2a:2d:e2:2c:78:d5: 38:5c:91:ba:7c:8d:61:25:29:28:35:b3:4a:3c:8e:8a:e5:16: 51:e0:2d:b3:50:38:ac:e0:10:d3:de:6e:5b:9f:f7:70:47:77: 05:ce:11:e2:52:fe:13:f3:ac:d2:9b:9a:65:56:4d:3f:b5:8f: b8:06:89:92:56:fd:74:b9:3d:4a:d9:68:02:47:ff:ff:ec:9f: be:a7:d5:b2:57:83:82:0b:1e:04:c4:02:44:b2:b1:51:4c:f0: 5e:20:72:7d:a3:f7:1d:d2:ca:18:57:8c:1e:e7:b1:94:86:b4: 4c:6b:8e:48:4e:03:79:3f:00:cc:ed:7a:7e:fe:4a:fe:1b:cf: 89:de:44:e1:df:73:49:fe:1b:7d:33:99:31:e8:ff:d2:18:a4: 21:9a:4f:de:8f:1d:9c:02:7e:eb:95:e1:8f:07:b4:a4:50:63: 3e:86:db:e8:cb:23:6e:a8:26:44:fa:95:9e:08:a5:89:6d:d8: a7:be:a0:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjYwNTEyMTc0MTMzWhcNMjYwNTE5MTc0MTMzWjAYMRYwFAYD VQQDEw02YTAzNjY0ZC1mMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowXDSH2PL2ipSettwXEdZID33DCt9s0ngWAt3b8i5CaRVN1m/fB37koYA+d8 vnTNt9hTWR8fljOBcbkGOmrpXtee59Lmmv0oSDQPaiNL0uYzwAuExlhNJWkzxqAB eQBKG0LL+N5yo9JsHyRpDZ4TYkwTXX6GBX0kUrQjMB9DMKsaWDwblFEqDQ52CHd7 oV71kufsi1/IanpQjo8wM8KQL6bl2UBk8hLeOB5lvpMfscfXYXFiV6opJPWg3Eua 3m+LneDCEkSb87ZXxe+kRwoP+XH/QujAjxAKUUea5azCvi3vbP+lWaUjW4BJShc1 6M37vsNgAymNf2eqhK1qXOBO0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwQlWeu EjsQ6KBaFyJ4gZxw12+hMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgdb7p2qGA+v7e13EtBtEgZssMiNWUy3qjJMYk5Q+X2HsiZ3zMcQOhPtbJq7m 1bYj23vx23SRrSxkaWLj8jI5zthQKi3iLHjVOFyRunyNYSUpKDWzSjyOiuUWUeAt s1A4rOAQ095uW5/3cEd3Bc4R4lL+E/Os0puaZVZNP7WPuAaJklb9dLk9StloAkf/ /+yfvqfVsleDggseBMQCRLKxUUzwXiByfaP3HdLKGFeMHuexlIa0TGuOSE4DeT8A zO16fv5K/hvPid5E4d9zSf4bfTOZMej/0hikIZpP3o8dnAJ+65Xhjwe0pFBjPobb 6MsjbqgmRPqVngiliW3Yp76gFw== -----END CERTIFICATE-----Generated at Wed May 13 07:42:33 2026 by rpki-client