$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json) Hash identifier: LJJPzBbEB4TVQFSBt2Im1aZxTK8vxusPgcdst7yjiXE= Subject key identifier: E5:06:9B:6E:B8:5A:5A:DF:93:E0:83:4F:1F:E7:F5:E3:BF:52:CB:8A Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft Manifest number: 028E Signing time: Thu 21 May 2026 01:53:17 +0000 Manifest this update: Thu 21 May 2026 01:53:16 +0000 Manifest next update: Thu 28 May 2026 01:53:16 +0000 Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: /GIs3l5AQ4Ttyd3ckladlPpvT70gJXVcUe1qyDNQLbQ=) 2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: dSdyOI3NKroBXRPK4g3/VXBd5t/AgAoW4VERy4gWDHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: May 21 01:53:16 2026 GMT Not After : May 28 01:53:16 2026 GMT Subject: CN=6a0e658d-d282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:fa:d6:07:fe:b8:b6:ce:5c:b2:8d:1a:96: 91:70:5b:5a:bd:f3:41:7f:4d:69:00:23:a5:00:fd: 30:11:b3:a5:ae:2c:35:40:32:4a:9f:e2:33:15:2c: 69:1a:82:63:ea:b4:63:36:52:41:e0:16:7c:c0:83: 85:41:45:3c:22:7c:59:52:af:d8:30:43:2e:67:19: 41:ed:4e:6f:ff:d5:70:5e:4d:5f:6e:37:98:cb:12: 3c:7c:91:5d:40:8b:bc:6c:9a:63:e0:32:74:3f:a1: e4:5c:84:2b:37:03:f2:8e:5f:26:a4:b2:c4:44:3c: 3e:46:89:78:74:aa:61:a7:21:35:bb:5d:43:c6:02: ea:ad:f6:a6:5b:8a:4d:dc:36:37:4d:50:bc:3b:31: 49:37:e0:d2:96:e3:4a:e0:e0:26:1b:d3:25:87:b3: 44:5f:c8:48:68:bf:e3:55:93:6f:d0:67:77:9d:d0: 89:e8:4b:17:14:13:5a:28:2f:93:d8:fd:e5:d3:b0: fe:54:cf:ad:8c:a2:07:6d:68:4e:1d:aa:44:73:3b: 40:2f:d9:db:bd:31:8a:ea:c0:8e:1d:a8:14:f0:35: 73:ab:1a:cf:42:27:03:b0:9a:aa:f1:4c:64:82:29: 04:03:51:f0:2b:30:9c:65:8b:a9:52:23:e1:82:24: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:06:9B:6E:B8:5A:5A:DF:93:E0:83:4F:1F:E7:F5:E3:BF:52:CB:8A X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0c:89:8b:1d:23:87:05:f9:e0:cf:5e:c5:2c:4d:ca:e0:ef: 32:20:54:66:91:0c:3a:51:02:af:04:0e:ba:22:50:22:f9:3d: a3:f6:67:2b:8a:84:40:c7:b2:bf:55:14:54:d8:68:94:a1:fa: 4f:41:27:b6:a9:b1:14:e8:12:d7:56:0c:5f:1e:df:16:23:bc: 4b:25:0e:62:71:69:2c:c9:76:39:44:59:51:6a:ea:b9:63:16: cf:39:ec:2a:8f:39:b9:65:6c:fc:05:ef:b2:c9:07:8d:ce:00: d4:9b:5e:49:93:df:77:88:0f:5a:8b:6f:4d:3f:a6:59:b7:8a: e0:88:eb:31:f6:11:f6:1a:12:59:5e:df:86:eb:94:6a:72:ac: af:a9:e0:04:40:8a:ec:f6:e1:83:1b:3c:c9:be:25:19:11:c5: e5:f0:6f:8f:82:52:2a:f9:f6:7f:40:9c:2f:06:28:2b:1a:46: a0:2a:da:0c:f1:de:d3:03:24:66:eb:a8:3a:e9:f6:68:7b:c5: 81:cc:77:7b:ca:d3:f6:8d:69:bf:e7:81:56:a0:fc:c0:15:6a: 67:09:b9:a2:b3:c1:61:8b:8e:38:ad:d1:a0:5c:71:61:2a:39: 97:87:b7:2e:b7:7c:24:a2:a6:3a:f0:d6:84:60:44:46:f4:a6: 7e:86:09:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjYwNTIxMDE1MzE2WhcNMjYwNTI4MDE1MzE2WjAYMRYwFAYD VQQDEw02YTBlNjU4ZC1kMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdj61gf+uLbOXLKNGpaRcFtavfNBf01pACOlAP0wEbOlriw1QDJKn+IzFSxp GoJj6rRjNlJB4BZ8wIOFQUU8InxZUq/YMEMuZxlB7U5v/9VwXk1fbjeYyxI8fJFd QIu8bJpj4DJ0P6HkXIQrNwPyjl8mpLLERDw+Rol4dKphpyE1u11DxgLqrfamW4pN 3DY3TVC8OzFJN+DSluNK4OAmG9Mlh7NEX8hIaL/jVZNv0Gd3ndCJ6EsXFBNaKC+T 2P3l07D+VM+tjKIHbWhOHapEcztAL9nbvTGK6sCOHagU8DVzqxrPQicDsJqq8Uxk gikEA1HwKzCcZYupUiPhgiRtzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUGm264 Wlrfk+CDTx/n9eO/UsuKMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2 YW5kYXBTWFZQWTR6RGpJSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgQyJix0jhwX54M9exSxNyuDvMiBUZpEMOlECrwQOuiJQIvk9o/ZnK4qEQMey v1UUVNholKH6T0EntqmxFOgS11YMXx7fFiO8SyUOYnFpLMl2OURZUWrquWMWzzns Ko85uWVs/AXvsskHjc4A1JteSZPfd4gPWotvTT+mWbeK4IjrMfYR9hoSWV7fhuuU anKsr6ngBECK7Pbhgxs8yb4lGRHF5fBvj4JSKvn2f0CcLwYoKxpGoCraDPHe0wMk ZuuoOun2aHvFgcx3e8rT9o1pv+eBVqD8wBVqZwm5orPBYYuOOK3RoFxxYSo5l4e3 Lrd8JKKmOvDWhGBERvSmfoYJew== -----END CERTIFICATE-----Generated at Thu May 21 09:39:05 2026 by rpki-client