$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: 25ZxFvih4lXcwuJvAk4fw5DG50i28R2OFSoWsg/8mkQ= Subject key identifier: 2C:56:26:80:2B:86:95:46:80:39:36:A6:EF:76:B1:3B:21:95:4F:6B Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 01DB Signing time: Thu 21 May 2026 03:40:30 +0000 Manifest this update: Thu 21 May 2026 03:40:29 +0000 Manifest next update: Thu 28 May 2026 03:40:29 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: SGb5NLlG+i1xyxXeZLyRKDL2jvAuLxUMBMZ820NkWWI=) 2: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: UCp6rrqiqQr0+NrkScEIOxBhtPkUO8ePaR/RWaljIG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: May 21 03:40:29 2026 GMT Not After : May 28 03:40:29 2026 GMT Subject: CN=6a0e7ead-a431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:7f:8b:30:ab:d6:52:2e:27:e1:73:9c:1a: 46:ca:e8:ff:72:68:3e:7a:ec:cc:ff:a8:81:81:92: b6:2a:d1:43:39:39:8a:1b:b4:fc:1b:34:a8:79:d2: f3:18:05:d5:2b:96:85:72:cf:c2:8b:bb:7c:3e:f7: e4:9d:37:d2:e0:02:99:98:7e:9e:c2:5b:a0:1c:6b: 05:c8:f5:2a:29:f4:be:02:e1:6f:53:61:4c:c2:c1: 3e:db:dd:51:d0:b8:a8:5b:bd:89:7d:b0:6f:d9:3d: 6d:9b:a0:61:67:ed:8f:4e:d0:26:58:9e:36:66:60: ad:fa:b7:10:70:a8:9b:40:a0:dd:86:7f:c2:e6:79: 82:c3:54:5d:11:b0:81:31:1d:56:35:e6:51:99:de: 39:d3:49:50:d3:e0:e5:29:f2:f3:62:cf:83:21:95: 93:b1:d0:55:df:13:6a:cc:4d:3d:d4:a0:29:fb:a8: e7:fb:f8:f1:af:a3:21:12:64:a2:62:a9:7d:08:d8: 9c:c9:a9:cd:83:aa:4d:d8:48:7b:7f:12:bf:fe:75: 67:d7:b3:15:4a:1e:3d:28:bd:1c:fe:78:22:ea:65: e1:5e:c3:74:78:a3:a0:f5:d6:04:cc:88:3b:d4:d0: 57:14:7b:ca:12:a9:89:af:b3:79:a1:70:d2:c1:d1: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:56:26:80:2B:86:95:46:80:39:36:A6:EF:76:B1:3B:21:95:4F:6B X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:96:84:38:65:84:5a:63:87:4e:93:c5:f1:4e:b6:5f:eb:e8: 54:c5:c6:9a:f1:1d:3d:d6:a5:72:d8:c0:36:bb:b4:40:13:70: 1b:6a:05:42:a2:75:bf:17:3c:fa:ba:67:5f:27:c2:5f:bf:a6: 15:7e:2d:7b:ed:32:bd:05:c5:81:eb:3f:2e:ba:2f:6d:dc:20: 34:bc:c5:49:9a:55:bf:8e:2b:98:fd:fc:ff:48:35:0b:48:f1: 6c:3f:12:e6:7f:70:69:4c:a2:77:55:14:f4:5c:41:b6:2b:3c: 8c:6c:05:aa:01:1a:de:f5:08:e5:09:c7:58:5e:a2:e3:20:9d: ac:1a:b8:d2:08:a0:d7:16:c7:d0:aa:ae:ab:73:13:ad:3b:07: dd:ee:e5:6e:1a:a2:d8:30:40:78:fc:dc:b2:7f:b7:3c:9a:9b: 19:f2:fa:43:8e:a2:d1:16:36:72:e1:1c:9b:14:a0:ff:b5:36: b4:00:30:3e:7d:34:31:a3:13:9f:e0:20:14:2f:09:1b:99:75: ed:17:61:c6:4f:70:9a:c5:b2:79:60:c8:69:78:f8:29:c5:ec: 28:5a:30:98:63:b8:f4:bb:0b:98:96:d6:58:6c:ef:94:e0:02: 6b:5b:66:3a:d1:cc:fc:9c:08:2d:54:ae:7d:0f:9a:05:10:93: 34:1f:e7:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjYwNTIxMDM0MDI5WhcNMjYwNTI4MDM0MDI5WjAYMRYwFAYD VQQDEw02YTBlN2VhZC1hNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KB/izCr1lIuJ+FznBpGyuj/cmg+euzM/6iBgZK2KtFDOTmKG7T8GzSoedLz GAXVK5aFcs/Ci7t8PvfknTfS4AKZmH6ewlugHGsFyPUqKfS+AuFvU2FMwsE+291R 0LioW72JfbBv2T1tm6BhZ+2PTtAmWJ42ZmCt+rcQcKibQKDdhn/C5nmCw1RdEbCB MR1WNeZRmd4500lQ0+DlKfLzYs+DIZWTsdBV3xNqzE091KAp+6jn+/jxr6MhEmSi Yql9CNicyanNg6pN2Eh7fxK//nVn17MVSh49KL0c/ngi6mXhXsN0eKOg9dYEzIg7 1NBXFHvKEqmJr7N5oXDSwdHU6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxWJoAr hpVGgDk2pu92sTshlU9rMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmZaEOGWEWmOHTpPF8U62X+voVMXGmvEdPdalctjANru0QBNwG2oFQqJ1vxc8 +rpnXyfCX7+mFX4te+0yvQXFges/LrovbdwgNLzFSZpVv44rmP38/0g1C0jxbD8S 5n9waUyid1UU9FxBtis8jGwFqgEa3vUI5QnHWF6i4yCdrBq40gig1xbH0Kquq3MT rTsH3e7lbhqi2DBAePzcsn+3PJqbGfL6Q46i0RY2cuEcmxSg/7U2tAAwPn00MaMT n+AgFC8JG5l17Rdhxk9wmsWyeWDIaXj4KcXsKFowmGO49LsLmJbWWGzvlOACa1tm OtHM/JwILVSufQ+aBRCTNB/nVg== -----END CERTIFICATE-----Generated at Thu May 21 14:44:03 2026 by rpki-client