$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: osUT2AI+bDKOPZwU8ma6r27+dVb/pisAX7B2iE8ivYM= Subject key identifier: 1F:7A:55:35:90:C5:FD:BE:65:1A:91:0C:8F:3C:06:79:47:6F:78:6C Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0EBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0EAF Signing time: Tue 12 May 2026 17:44:32 +0000 Manifest this update: Tue 12 May 2026 17:44:32 +0000 Manifest next update: Tue 19 May 2026 17:44:32 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: 5i29W1IOf0aL1ntMhXS3SFi0Pegy9O7X5ZTyNmdD9Fc=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=) 3: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: May 12 17:44:32 2026 GMT Not After : May 19 17:44:32 2026 GMT Subject: CN=6a036700-0f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:bc:2a:d9:8f:b5:ed:6c:10:cd:1f:fb:ac: dd:ec:42:c3:99:b5:6d:7e:54:99:e3:08:75:ba:13: e3:70:ad:a1:6e:95:34:87:fc:ae:37:b7:01:f4:ed: cf:1c:76:01:1d:e9:b0:a5:9b:a5:ca:11:1a:4b:a6: 53:71:df:8c:10:15:2c:79:ae:21:1d:0b:a6:4f:6b: 9c:88:a9:ac:a0:29:22:22:54:23:a2:f3:09:b1:61: 38:e9:58:58:f2:19:0d:08:7f:63:f0:70:a8:38:1b: 2c:e0:db:3e:46:5c:0d:7d:e5:6a:c0:2c:bc:e5:86: 31:00:a2:67:7a:af:0b:f0:d8:8a:f4:d5:e0:12:6c: d9:71:f6:64:55:1f:95:fa:f5:c2:a5:b0:a8:af:ee: f6:77:3a:4e:5f:38:6c:fd:45:82:ef:29:cd:9e:00: a0:ba:a1:4a:c3:47:66:83:af:58:d9:88:6e:a1:40: a5:8a:44:24:b6:d0:ff:ec:60:bd:58:0c:cd:02:8c: ca:f9:35:16:a1:7a:d0:c2:a0:c6:b3:10:16:82:72: ca:25:2e:b1:3f:77:64:c5:10:74:fd:b5:c7:f2:55: 8e:da:89:40:e7:75:44:ce:8d:fc:8d:2b:bb:ea:cb: c5:f9:e8:a9:50:d0:ff:95:e8:21:f1:03:66:c5:98: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7A:55:35:90:C5:FD:BE:65:1A:91:0C:8F:3C:06:79:47:6F:78:6C X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:cd:24:5f:86:52:f5:56:0d:8d:ec:fd:7c:13:27:cc:c7:10: f1:0f:a4:4a:57:32:49:db:8c:e4:e5:04:db:0a:79:1a:b8:f4: 32:94:10:98:69:06:54:a8:80:5d:9f:51:f1:f7:d0:81:74:e0: 94:73:e2:2b:81:a1:d4:f8:35:f6:bc:a0:9c:7f:95:ae:cb:e6: 71:9c:34:f7:4f:7d:97:5c:57:01:8b:f0:c9:19:a9:0e:75:85: 56:b7:8b:bf:51:e6:74:d4:6b:b8:9f:d4:c0:61:3c:9d:1a:f1: 19:dd:4d:ff:3c:cd:d3:07:96:16:8b:43:c2:e1:f0:22:53:b8: 37:86:d1:29:33:65:cb:07:22:3d:ea:45:84:f8:5f:51:22:e8: 7f:1c:39:09:d6:1a:18:03:e2:70:48:55:cd:a2:2d:3b:78:90: 5f:bf:4d:a3:42:da:17:d2:76:fb:8a:16:d0:87:be:5d:8b:df: e8:ac:29:85:0b:92:1a:22:55:e8:a2:9b:02:9a:a8:2e:dd:36: b7:4e:66:35:a6:40:f6:b8:47:75:3c:b3:1a:9d:c2:53:72:ae: aa:49:96:bc:eb:6c:cb:da:43:d3:3e:bb:37:2d:0a:4c:5d:ec: 4d:07:b0:04:7d:09:60:9c:fb:6d:fa:c2:c0:86:82:44:07:4c: 73:ea:aa:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjYwNTEyMTc0NDMyWhcNMjYwNTE5MTc0NDMyWjAYMRYwFAYD VQQDEw02YTAzNjcwMC0wZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRS8KtmPte1sEM0f+6zd7ELDmbVtflSZ4wh1uhPjcK2hbpU0h/yuN7cB9O3P HHYBHemwpZulyhEaS6ZTcd+MEBUsea4hHQumT2uciKmsoCkiIlQjovMJsWE46VhY 8hkNCH9j8HCoOBss4Ns+RlwNfeVqwCy85YYxAKJneq8L8NiK9NXgEmzZcfZkVR+V +vXCpbCor+72dzpOXzhs/UWC7ynNngCguqFKw0dmg69Y2YhuoUClikQkttD/7GC9 WAzNAozK+TUWoXrQwqDGsxAWgnLKJS6xP3dkxRB0/bXH8lWO2olA53VEzo38jSu7 6svF+eipUND/legh8QNmxZiJ5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB96VTWQ xf2+ZRqRDI88BnlHb3hsMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiM0kX4ZS9VYNjez9fBMnzMcQ8Q+kSlcySduM5OUE2wp5Grj0MpQQmGkGVKiA XZ9R8ffQgXTglHPiK4Gh1Pg19rygnH+VrsvmcZw09099l1xXAYvwyRmpDnWFVreL v1HmdNRruJ/UwGE8nRrxGd1N/zzN0weWFotDwuHwIlO4N4bRKTNlywciPepFhPhf USLofxw5CdYaGAPicEhVzaItO3iQX79No0LaF9J2+4oW0Ie+XYvf6KwphQuSGiJV 6KKbApqoLt02t05mNaZA9rhHdTyzGp3CU3KuqkmWvOtsy9pD0z67Ny0KTF3sTQew BH0JYJz7bfrCwIaCRAdMc+qqEg== -----END CERTIFICATE-----Generated at Wed May 13 14:51:01 2026 by rpki-client