$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: kJyA3XC9MXX8aoEot/lAB3Q4Lu5vuwNGeAutLh7voYc= Subject key identifier: A6:8E:9F:50:3F:E9:4C:0C:B6:A3:61:42:EA:95:D9:B5:15:F5:4F:6B Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0CDA Signing time: Tue 12 May 2026 18:24:43 +0000 Manifest this update: Tue 12 May 2026 18:24:42 +0000 Manifest next update: Tue 19 May 2026 18:24:42 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: DKnqHGRkm2XYKMbDy7WVWikwGgYOV+vaojGXnrgjBgQ=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: Og8kggLWLgVMfPp3OlQnblKMTWi+r7xJXzXK2YD03aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: May 12 18:24:42 2026 GMT Not After : May 19 18:24:42 2026 GMT Subject: CN=6a03706a-8b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:11:ac:01:e6:28:06:78:5a:c7:04:7c:e2: ca:19:e6:23:86:e6:02:fd:df:49:f3:b4:12:fa:58: c3:1c:ca:41:a8:7f:ab:69:60:4c:4c:89:c7:8d:5c: b8:5b:6f:20:3b:d0:7a:91:56:a6:50:42:b7:67:0c: 93:88:22:ac:09:41:16:64:85:84:33:31:1c:a9:5a: 95:da:6f:e2:b8:64:d4:fa:cd:3f:9e:e7:82:b4:8d: 1a:83:bd:1e:0a:c3:63:f6:c8:ac:45:b3:66:f8:af: 81:b6:63:9b:96:fe:ff:c2:19:1f:c7:d1:34:fd:31: be:a8:1c:19:aa:7e:31:e4:ab:e6:90:97:99:19:1f: d8:01:ad:9a:60:99:c7:17:91:95:d7:76:1b:cd:c4: 4d:9e:ca:7e:41:30:3a:1e:9a:49:c9:68:3f:42:d5: a5:6a:b7:7e:c3:16:32:5a:91:68:1b:1f:78:a4:83: a4:b1:12:30:d8:e9:7d:e1:35:ea:40:ab:1e:2f:cf: 47:79:99:17:71:6e:9f:7e:a3:5d:65:93:5d:28:f1: c9:97:44:7d:d6:3d:fb:aa:43:b4:27:32:b3:07:cb: 21:98:d2:fb:ea:cb:f0:fa:9e:fd:db:ab:e2:32:5f: d9:09:74:7f:29:85:0b:a8:18:59:f2:5d:a8:7c:09: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8E:9F:50:3F:E9:4C:0C:B6:A3:61:42:EA:95:D9:B5:15:F5:4F:6B X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:07:c5:00:a3:83:35:8c:18:81:a8:d6:fe:53:40:2b:55:2f: 38:68:46:80:3f:85:7f:84:a2:7f:96:6d:e1:fd:d9:5d:e4:41: a6:6d:c8:95:63:7a:85:cb:d2:fb:f6:d6:e0:7b:25:20:4e:97: d6:73:54:e9:4e:91:f6:84:49:5e:e4:20:23:f3:6b:b9:a9:9e: f5:ae:84:a9:46:65:77:d4:d0:1b:79:f6:9e:02:02:85:ec:df: 69:2f:ea:eb:07:7d:7a:9d:13:ef:31:db:34:ba:8a:97:7f:a4: 50:d4:05:11:48:e5:2e:91:ca:1e:7b:4d:ec:83:9a:0d:fe:54: 4d:c1:90:44:0c:f4:fd:16:c7:8d:e3:45:98:ea:13:44:5a:1b: 33:f6:95:a1:93:06:d2:ca:e9:22:1b:46:09:93:4a:9c:e7:32: 41:0b:44:35:5e:c4:5b:49:6e:3a:55:c5:44:f1:fb:09:ed:1f: 84:15:11:08:92:80:b0:34:34:15:21:d5:dc:07:d7:8b:bd:96: e5:51:fb:0a:73:90:07:cf:4f:fa:ae:86:5e:df:cd:bc:e9:33: 56:27:35:da:cf:82:8c:a1:c1:6d:1e:f9:1d:80:bc:dd:cf:d0: e9:57:35:c3:83:08:e6:95:e7:23:c3:c1:c2:ec:53:eb:f1:f9: 74:17:50:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjYwNTEyMTgyNDQyWhcNMjYwNTE5MTgyNDQyWjAYMRYwFAYD VQQDEw02YTAzNzA2YS04YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jcRrAHmKAZ4WscEfOLKGeYjhuYC/d9J87QS+ljDHMpBqH+raWBMTInHjVy4 W28gO9B6kVamUEK3ZwyTiCKsCUEWZIWEMzEcqVqV2m/iuGTU+s0/nueCtI0ag70e CsNj9sisRbNm+K+BtmOblv7/whkfx9E0/TG+qBwZqn4x5KvmkJeZGR/YAa2aYJnH F5GV13YbzcRNnsp+QTA6HppJyWg/QtWlard+wxYyWpFoGx94pIOksRIw2Ol94TXq QKseL89HeZkXcW6ffqNdZZNdKPHJl0R91j37qkO0JzKzB8shmNL76svw+p7926vi Ml/ZCXR/KYULqBhZ8l2ofAmzNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaOn1A/ 6UwMtqNhQuqV2bUV9U9rMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlAfFAKODNYwYgajW/lNAK1UvOGhGgD+Ff4Sif5Zt4f3ZXeRBpm3IlWN6hcvS +/bW4HslIE6X1nNU6U6R9oRJXuQgI/Nruame9a6EqUZld9TQG3n2ngIChezfaS/q 6wd9ep0T7zHbNLqKl3+kUNQFEUjlLpHKHntN7IOaDf5UTcGQRAz0/RbHjeNFmOoT RFobM/aVoZMG0srpIhtGCZNKnOcyQQtENV7EW0luOlXFRPH7Ce0fhBURCJKAsDQ0 FSHV3AfXi72W5VH7CnOQB89P+q6GXt/NvOkzVic12s+CjKHBbR75HYC83c/Q6Vc1 w4MI5pXnI8PBwuxT6/H5dBdQZg== -----END CERTIFICATE-----Generated at Wed May 13 08:41:36 2026 by rpki-client