$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: XeX2VTwy1gESmq+pZ9cCRw4FCc+FWfdvboCJ/H0/w6U= Subject key identifier: 6C:21:94:63:BA:42:B7:1B:0F:41:F0:BB:8B:B5:EE:E9:65:FD:05:D2 Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 0209 Signing time: Mon 11 May 2026 03:07:16 +0000 Manifest this update: Mon 11 May 2026 03:07:15 +0000 Manifest next update: Mon 18 May 2026 03:07:15 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: ST0xtJz2MtIywh7hYH1yzbAHwJ11H1bG3a+vuc6yULA=) 2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=) 3: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=) 4: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: May 11 03:07:15 2026 GMT Not After : May 18 03:07:15 2026 GMT Subject: CN=6a0147e4-1f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:8f:f6:03:9a:28:55:5d:14:62:4f:2e:36: ac:65:07:e0:53:bf:36:db:8b:d3:0a:6d:49:a3:84: c9:25:1b:4f:fe:36:45:12:99:65:e6:15:b5:b6:85: 6a:dd:fd:08:bf:e7:d0:47:59:30:9a:62:88:ec:24: ac:e9:7f:a2:be:49:c0:da:5e:27:0f:c9:e4:c3:01: 16:fb:59:68:21:82:71:b9:4a:3c:ea:37:d4:fc:e7: 6e:c9:60:a0:ee:3e:58:bd:f3:fb:2c:40:7b:f8:2e: 1c:64:c2:ee:78:69:4a:ee:cf:f0:c5:bd:0c:0a:0a: d8:02:38:c4:d3:92:d4:36:2e:ff:27:dd:85:46:4c: d4:14:60:38:c2:fd:51:54:23:2f:f6:03:15:f7:84: d2:0a:86:23:29:f5:be:1c:11:cb:24:76:c2:83:10: 2c:7f:0d:70:7c:80:19:cd:2d:57:5b:fa:c9:53:1f: 62:fc:90:4f:cf:a7:3b:19:b5:5f:fe:a2:77:08:89: 62:71:7d:cf:c6:9b:6b:a6:d7:54:b8:a1:90:d8:0a: dc:85:af:37:de:19:58:b4:80:cb:9f:02:cc:34:e1: ea:dd:f2:0a:ac:c6:aa:a0:15:37:80:6a:38:32:69: 63:1b:40:17:d0:9b:6b:ad:41:f2:8c:9f:e1:c0:63: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:21:94:63:BA:42:B7:1B:0F:41:F0:BB:8B:B5:EE:E9:65:FD:05:D2 X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9f:38:5b:7c:67:d5:13:a5:79:5b:d1:dc:36:39:88:ea:3a: 1c:43:ac:48:db:b2:e0:54:58:71:9c:f0:43:6a:5f:d7:0c:a9: d8:d1:9e:78:79:56:22:1e:78:3a:7b:e1:27:56:43:f1:90:f0: f0:9e:1c:d4:bb:b0:2c:40:1c:74:ed:f9:4b:c8:c9:0b:55:68: 68:72:a0:9c:fa:c6:65:22:57:43:20:e1:82:2a:fb:86:96:99: eb:40:cc:4d:d7:ed:26:a9:91:dc:48:4e:91:d3:a8:0b:a0:1d: 62:51:5d:43:9e:31:e0:d1:2b:6a:a7:5f:76:aa:84:70:8b:71: 01:f6:e4:66:6a:6a:e1:52:fc:a7:e4:68:d8:14:c0:95:27:4e: 64:f0:50:75:46:25:7f:6a:a7:a6:1f:45:c4:1b:43:b5:3a:1f: 1f:f4:ba:f0:73:ce:9d:40:3e:3b:35:0e:80:08:2a:f3:75:1f: 0e:26:3e:43:c9:4b:50:c9:97:01:3d:e9:b0:1b:20:03:81:5b: 5b:c3:0f:82:f5:b6:bb:fe:d0:8a:98:6a:7b:51:59:55:a5:3b: 41:73:58:2b:32:a2:19:bc:6a:db:41:c5:bb:1a:fb:f7:37:b5: 01:4b:11:25:a6:b5:a2:66:27:cf:fc:ce:36:3c:16:c7:18:5d: 6b:15:76:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjYwNTExMDMwNzE1WhcNMjYwNTE4MDMwNzE1WjAYMRYwFAYD VQQDEw02YTAxNDdlNC0xZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxSP9gOaKFVdFGJPLjasZQfgU78224vTCm1Jo4TJJRtP/jZFEpll5hW1toVq 3f0Iv+fQR1kwmmKI7CSs6X+ivknA2l4nD8nkwwEW+1loIYJxuUo86jfU/OduyWCg 7j5YvfP7LEB7+C4cZMLueGlK7s/wxb0MCgrYAjjE05LUNi7/J92FRkzUFGA4wv1R VCMv9gMV94TSCoYjKfW+HBHLJHbCgxAsfw1wfIAZzS1XW/rJUx9i/JBPz6c7GbVf /qJ3CIlicX3PxptrptdUuKGQ2Archa833hlYtIDLnwLMNOHq3fIKrMaqoBU3gGo4 MmljG0AX0JtrrUHyjJ/hwGNRbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwhlGO6 QrcbD0Hwu4u17ull/QXSMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfZ84W3xn1ROleVvR3DY5iOo6HEOsSNuy4FRYcZzwQ2pf1wyp2NGeeHlWIh54 OnvhJ1ZD8ZDw8J4c1LuwLEAcdO35S8jJC1VoaHKgnPrGZSJXQyDhgir7hpaZ60DM TdftJqmR3EhOkdOoC6AdYlFdQ54x4NEraqdfdqqEcItxAfbkZmpq4VL8p+Ro2BTA lSdOZPBQdUYlf2qnph9FxBtDtTofH/S68HPOnUA+OzUOgAgq83UfDiY+Q8lLUMmX AT3psBsgA4FbW8MPgvW2u/7Qiphqe1FZVaU7QXNYKzKiGbxq20HFuxr79ze1AUsR Jaa1omYnz/zONjwWxxhdaxV20w== -----END CERTIFICATE-----Generated at Wed May 13 05:01:22 2026 by rpki-client