$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: K9F/1FbhOGEFBUG9UCCxTO0PsWVBfDTm7iHil6z0S9k= Subject key identifier: C8:57:8B:D6:A8:CC:07:BD:4F:C8:E6:DC:27:50:DE:BE:F6:B1:13:4A Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 01D4 Signing time: Tue 05 May 2026 03:36:35 +0000 Manifest this update: Tue 05 May 2026 03:36:35 +0000 Manifest next update: Tue 12 May 2026 03:36:35 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: pcLMMOGl7u2BjmrEDIFJN4mmtEv5thqDeUksCAZZ8QI=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: May 5 03:36:35 2026 GMT Not After : May 12 03:36:35 2026 GMT Subject: CN=69f965c3-e9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:5c:c0:67:ce:5a:3b:91:ef:62:aa:ba:71: b8:97:df:ba:9d:63:a9:1f:d3:94:80:96:80:f2:ca: 00:4e:7b:b6:a5:e9:5e:72:31:aa:ab:ac:4e:03:4a: d1:7f:e1:f7:ba:cf:f6:12:9c:53:53:77:9e:41:38: 58:f7:a4:72:0c:fd:de:7e:b7:91:2f:a2:40:dc:78: 6b:46:a1:b7:20:a1:4c:f9:4d:f3:12:33:49:33:cd: 14:71:72:d0:7b:57:82:fe:be:a6:a4:44:b8:41:ba: 6a:b5:79:0b:08:32:fb:c0:83:02:72:06:1c:a4:44: 51:fd:6c:13:c4:b3:96:47:a9:a7:bb:46:85:5b:8d: 97:21:0d:26:5b:e7:dc:e4:0f:d9:a1:a5:15:01:99: 6f:a0:7d:a0:75:d8:cc:df:d2:14:72:14:32:a5:9d: c9:c8:b2:d2:f5:aa:4b:6c:8b:f7:08:98:a4:e6:a8: 3c:0e:59:0a:bb:07:d4:cc:03:a1:85:1e:7c:71:b9: 2c:b2:1e:f0:51:3c:68:01:74:83:3b:d8:c4:a1:0c: f4:87:7a:a8:0c:bf:d1:90:8d:36:b2:11:0e:13:b7: 6c:c0:d3:ce:ff:8b:5a:7c:85:31:70:ec:db:cb:d7: f3:cc:23:fd:a5:c1:22:43:06:ba:9c:10:be:0b:65: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:8B:D6:A8:CC:07:BD:4F:C8:E6:DC:27:50:DE:BE:F6:B1:13:4A X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:46:2f:66:70:2a:f8:c9:ed:00:c6:9c:1e:9c:bc:0e:67:51: 1b:5c:25:bd:62:66:7d:b1:91:89:89:a6:1f:8b:a9:6d:d4:62: 52:e9:97:6b:8c:c0:f6:76:f2:03:77:7b:37:c4:05:27:ce:0b: 50:b9:d0:f5:31:9c:f1:87:2f:c4:15:e0:8a:b7:77:4f:50:a5: ef:48:a5:a1:41:b1:7b:80:13:97:15:e7:c6:29:90:27:48:01: 3c:6d:20:63:9d:79:3e:af:80:9c:2d:b2:55:ad:74:88:58:da: 50:1f:96:e6:c2:94:c9:fc:f4:f8:00:ee:05:bc:27:62:c4:34: 9d:e1:9f:7e:4d:eb:fc:90:da:5e:3d:cb:2e:e8:54:a7:73:07: 05:de:77:99:69:cb:28:b0:3a:c7:af:7c:e7:e0:79:f1:14:60: b9:72:cd:2f:02:75:29:a5:2a:91:ec:0e:f9:96:65:90:77:cc: 42:9a:d1:11:cb:be:87:af:5c:a4:0b:69:54:af:82:13:68:99: b6:96:86:0d:55:7d:24:8c:d4:a1:21:34:82:db:65:03:f0:ad: 07:dc:95:51:64:f6:35:bb:f3:1f:8c:36:7f:a3:af:dd:cc:20: f4:47:f2:8d:eb:f2:0b:45:22:69:e5:45:06:c5:16:4f:ba:ad: 11:ea:eb:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYwNTA1MDMzNjM1WhcNMjYwNTEyMDMzNjM1WjAYMRYwFAYD VQQDEw02OWY5NjVjMy1lOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphtcwGfOWjuR72KqunG4l9+6nWOpH9OUgJaA8soATnu2pelecjGqq6xOA0rR f+H3us/2EpxTU3eeQThY96RyDP3efreRL6JA3HhrRqG3IKFM+U3zEjNJM80UcXLQ e1eC/r6mpES4QbpqtXkLCDL7wIMCcgYcpERR/WwTxLOWR6mnu0aFW42XIQ0mW+fc 5A/ZoaUVAZlvoH2gddjM39IUchQypZ3JyLLS9apLbIv3CJik5qg8DlkKuwfUzAOh hR58cbkssh7wUTxoAXSDO9jEoQz0h3qoDL/RkI02shEOE7dswNPO/4tafIUxcOzb y9fzzCP9pcEiQwa6nBC+C2X5RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhXi9ao zAe9T8jm3CdQ3r72sRNKMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASEYvZnAq+MntAMacHpy8DmdRG1wlvWJmfbGRiYmmH4upbdRiUumXa4zA9nby A3d7N8QFJ84LULnQ9TGc8YcvxBXgird3T1Cl70iloUGxe4ATlxXnximQJ0gBPG0g Y515Pq+AnC2yVa10iFjaUB+W5sKUyfz0+ADuBbwnYsQ0neGffk3r/JDaXj3LLuhU p3MHBd53mWnLKLA6x6985+B58RRguXLNLwJ1KaUqkewO+ZZlkHfMQprREcu+h69c pAtpVK+CE2iZtpaGDVV9JIzUoSE0gttlA/CtB9yVUWT2NbvzH4w2f6Ov3cwg9Efy jevyC0UiaeVFBsUWT7qtEerrIQ== -----END CERTIFICATE-----Generated at Wed May 6 06:24:44 2026 by rpki-client