$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: yXm1lQ1OVui87jOsf+DeHGxS4po6tIRWdv99TS41R1Q= Subject key identifier: FD:80:1D:86:B3:43:0D:F1:B9:FF:71:19:79:BE:CC:19:2F:35:1D:C7 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 01F7 Signing time: Wed 13 May 2026 03:22:16 +0000 Manifest this update: Wed 13 May 2026 03:22:16 +0000 Manifest next update: Wed 20 May 2026 03:22:16 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: NAutTODb0L8cowj2UZB91py8DqPRz1cKaTakSrhsRUU=) 2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: May 13 03:22:16 2026 GMT Not After : May 20 03:22:16 2026 GMT Subject: CN=6a03ee68-f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:db:d6:c1:f1:3f:7c:34:b7:d5:48:d1:0f: 04:e0:b8:a5:26:ec:f3:2c:56:ce:94:c6:f9:4b:13: dc:92:12:11:56:cf:47:9d:e6:88:ad:ea:df:77:63: c7:3c:9e:85:03:45:ee:e6:d8:d6:15:53:2d:d4:02: 02:2b:47:ec:55:8b:e3:8c:e8:c7:73:4a:9e:a8:e9: 6a:a9:9e:f2:fb:56:e9:49:7a:39:42:68:4e:f2:34: 4d:9a:1a:74:55:26:18:ed:3f:a4:d8:e5:26:b9:6a: b0:d0:c6:e3:76:92:73:ae:71:8e:80:2d:58:6c:cc: 28:47:71:dd:bf:8c:6f:2c:5e:d3:88:07:ee:22:89: 96:d7:94:11:ad:49:f8:77:78:79:90:02:b6:03:11: 78:04:49:55:1e:cf:41:a4:c1:31:00:97:85:eb:46: ad:a1:49:c8:ec:17:ca:7d:b1:e7:f7:dd:f8:7a:6a: 27:cd:43:4f:38:a7:d9:20:48:81:f0:c3:2d:e7:67: 6c:c1:5c:df:2d:cd:8d:7e:12:ef:ca:19:e6:f2:43: ef:b9:70:09:5f:fb:df:89:c7:d0:3d:33:05:92:26: ca:7c:53:2b:64:5b:63:dc:2f:e2:a8:f2:4b:bc:42: 8c:4d:c9:fb:7d:da:7c:2c:fd:12:24:d9:67:43:82: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:1D:86:B3:43:0D:F1:B9:FF:71:19:79:BE:CC:19:2F:35:1D:C7 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:f8:0d:8f:0a:67:3c:04:b7:10:98:5f:9d:f4:42:bf:93:d6: 13:9d:07:c9:aa:35:e6:6d:47:19:1e:56:a9:e9:19:66:76:59: 48:68:da:14:95:ca:92:32:2b:81:6e:26:cd:d1:7a:b0:d9:99: f2:7e:9e:d9:4a:e5:10:38:03:9e:ec:85:46:2e:00:a9:fb:3c: 04:1b:ff:11:70:ed:24:7f:dd:2d:2a:5a:d1:6a:ca:74:78:73: e6:0b:14:57:72:e5:0e:16:78:73:79:a3:e6:e0:2e:bb:6c:f0: 69:63:12:05:5e:95:f0:e1:29:fa:9f:f3:3b:51:20:79:41:0f: fd:56:27:06:09:c5:d3:be:2e:8c:9a:35:3c:e0:09:75:81:ef: 0d:6e:1d:37:e8:fb:df:a3:c9:13:a2:d8:47:76:8c:bc:0e:56: cd:8e:a6:10:7c:73:16:60:c4:3c:25:df:da:cf:b8:8d:9a:91: e1:76:01:16:c5:2a:35:e4:71:17:3f:cb:f4:0d:d6:7b:bc:7d: 72:f8:37:5e:26:5a:11:df:24:e2:e3:06:80:50:75:80:e0:7f: de:59:15:34:e1:3d:3f:e6:0b:89:4e:59:9c:7c:38:35:d0:3a: 74:0b:b9:e6:7d:98:e6:34:5f:68:35:d2:90:49:8d:76:f4:1a: 28:a9:fa:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwNTEzMDMyMjE2WhcNMjYwNTIwMDMyMjE2WjAYMRYwFAYD VQQDEw02YTAzZWU2OC1mMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsejb1sHxP3w0t9VI0Q8E4LilJuzzLFbOlMb5SxPckhIRVs9HneaIrerfd2PH PJ6FA0Xu5tjWFVMt1AICK0fsVYvjjOjHc0qeqOlqqZ7y+1bpSXo5QmhO8jRNmhp0 VSYY7T+k2OUmuWqw0MbjdpJzrnGOgC1YbMwoR3Hdv4xvLF7TiAfuIomW15QRrUn4 d3h5kAK2AxF4BElVHs9BpMExAJeF60atoUnI7BfKfbHn9934emonzUNPOKfZIEiB 8MMt52dswVzfLc2NfhLvyhnm8kPvuXAJX/vficfQPTMFkibKfFMrZFtj3C/iqPJL vEKMTcn7fdp8LP0SJNlnQ4I6sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2AHYaz Qw3xuf9xGXm+zBkvNR3HMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7PgNjwpnPAS3EJhfnfRCv5PWE50Hyao15m1HGR5WqekZZnZZSGjaFJXKkjIr gW4mzdF6sNmZ8n6e2UrlEDgDnuyFRi4Aqfs8BBv/EXDtJH/dLSpa0WrKdHhz5gsU V3LlDhZ4c3mj5uAuu2zwaWMSBV6V8OEp+p/zO1EgeUEP/VYnBgnF074ujJo1POAJ dYHvDW4dN+j736PJE6LYR3aMvA5WzY6mEHxzFmDEPCXf2s+4jZqR4XYBFsUqNeRx Fz/L9A3We7x9cvg3XiZaEd8k4uMGgFB1gOB/3lkVNOE9P+YLiU5ZnHw4NdA6dAu5 5n2Y5jRfaDXSkEmNdvQaKKn6lg== -----END CERTIFICATE-----Generated at Wed May 13 09:08:12 2026 by rpki-client