$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: lJnwsBss87meIMJey8hVLaWVz4G6KW3uGYDrUGO1ngw= Subject key identifier: 25:ED:58:76:55:2F:44:C7:35:64:7A:DE:3C:C7:ED:9C:61:43:31:C8 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0D71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0D60 Signing time: Tue 02 Jun 2026 18:01:28 +0000 Manifest this update: Tue 02 Jun 2026 18:01:28 +0000 Manifest next update: Tue 09 Jun 2026 18:01:28 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: hfzq1XQ3qfebEor45wPYgzbpLOu1ZEmyybMdu2eo3Iw=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Jun 2 18:01:28 2026 GMT Not After : Jun 9 18:01:28 2026 GMT Subject: CN=6a1f1a78-e2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:03:dc:44:95:d5:d1:46:96:05:97:3c:5b: 76:0f:49:fb:0b:37:07:f2:b6:44:b6:d5:7b:fa:ac: cc:2a:2c:c6:4e:2c:08:db:41:ac:f3:c5:55:4c:9a: 52:c5:f2:d4:78:7c:3a:38:ff:dd:84:f9:f8:44:5b: 00:86:b6:c2:5a:d1:a9:d9:9b:cc:32:fd:e0:62:ca: 46:5c:aa:7a:6d:c1:83:f2:71:85:db:ba:95:35:23: 1f:05:48:e1:04:b5:3f:e0:d6:e3:bf:80:7b:f0:bc: de:64:96:d7:20:48:3d:7b:63:47:eb:8c:91:fb:3f: 03:c4:1c:3d:32:22:19:7a:9c:a9:cc:f8:f2:33:38: 26:91:f5:01:4c:fb:ae:b4:2e:74:39:d0:56:2e:fc: 2b:5a:79:cf:94:2f:f8:97:7c:a0:31:9f:95:04:1d: d2:ac:9d:ff:29:8d:af:27:95:fb:3d:ba:cd:f1:ab: 50:59:09:aa:c1:27:70:87:d8:b0:68:80:0c:67:e3: c0:3f:94:f6:ee:78:46:5f:8d:70:96:4d:69:86:85: 47:ef:c5:97:4a:a8:9e:9f:b5:a3:14:2d:c5:d3:16: 3d:85:7f:14:83:2c:a7:47:dc:0f:de:69:bf:e6:f8: d2:58:3a:29:a1:ce:c4:29:d5:fd:ec:96:65:c4:8b: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:ED:58:76:55:2F:44:C7:35:64:7A:DE:3C:C7:ED:9C:61:43:31:C8 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:a7:da:3d:92:dd:76:6f:d3:e4:ab:9a:4d:30:22:3c:2d: 1e:0f:ec:a4:08:73:0b:ae:25:7e:ab:b7:eb:f9:22:1c:62:58: 26:0f:52:1f:5a:24:88:97:6e:ea:a2:63:ea:a6:0e:ec:6e:d1: 54:f6:b7:b9:e2:fa:a8:38:53:ba:a6:6e:53:67:40:54:85:3e: dc:ab:ea:6c:91:35:5e:19:5e:68:bd:8b:c1:f6:5b:77:c1:22: 27:53:0a:12:1d:3f:41:6c:37:8f:88:66:2c:7d:c4:e6:7d:d3: 52:6d:ec:c0:6f:bc:13:24:6a:e1:cc:fa:94:51:0b:9a:46:6f: 44:53:8c:e7:2a:11:fe:99:92:41:a7:e5:4f:79:9c:19:39:2c: ce:1e:4f:59:a8:06:dc:28:47:a4:9d:ee:73:46:f1:35:6e:59: cd:d1:20:b6:7c:30:9f:1b:ec:ab:62:98:cb:a5:21:59:ee:62: 7d:f7:9f:3d:99:6a:8d:2a:fc:4a:46:b9:da:56:76:eb:3a:25: d4:46:b2:42:06:1d:82:67:7d:2a:22:19:e3:7b:14:17:93:aa: 08:51:0b:98:30:ee:e0:7c:03:bf:09:0a:77:b1:0f:83:6e:7c: 6a:5e:37:05:73:28:73:05:c2:b4:97:d8:ea:fa:10:cf:99:77: ec:8d:ea:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjYwNjAyMTgwMTI4WhcNMjYwNjA5MTgwMTI4WjAYMRYwFAYD VQQDEw02YTFmMWE3OC1lMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbgD3ESV1dFGlgWXPFt2D0n7CzcH8rZEttV7+qzMKizGTiwI20Gs88VVTJpS xfLUeHw6OP/dhPn4RFsAhrbCWtGp2ZvMMv3gYspGXKp6bcGD8nGF27qVNSMfBUjh BLU/4Nbjv4B78LzeZJbXIEg9e2NH64yR+z8DxBw9MiIZepypzPjyMzgmkfUBTPuu tC50OdBWLvwrWnnPlC/4l3ygMZ+VBB3SrJ3/KY2vJ5X7PbrN8atQWQmqwSdwh9iw aIAMZ+PAP5T27nhGX41wlk1phoVH78WXSqien7WjFC3F0xY9hX8UgyynR9wP3mm/ 5vjSWDopoc7EKdX97JZlxIvbYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXtWHZV L0THNWR63jzH7ZxhQzHIMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxqn2j2S3XZv0+Srmk0wIjwtHg/spAhzC64lfqu36/kiHGJYJg9SH1okiJdu 6qJj6qYO7G7RVPa3ueL6qDhTuqZuU2dAVIU+3KvqbJE1XhleaL2LwfZbd8EiJ1MK Eh0/QWw3j4hmLH3E5n3TUm3swG+8EyRq4cz6lFELmkZvRFOM5yoR/pmSQaflT3mc GTkszh5PWagG3ChHpJ3uc0bxNW5ZzdEgtnwwnxvsq2KYy6UhWe5iffefPZlqjSr8 Ska52lZ26zol1EayQgYdgmd9KiIZ43sUF5OqCFELmDDu4HwDvwkKd7EPg258al43 BXMocwXCtJfY6voQz5l37I3qBg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:14 2026 by rpki-client