$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: MIDMQd7u2u2VKWamNWZ8kURKRg0gAH4GRoeMw7c/eus= Subject key identifier: EF:EF:BA:8E:A6:31:8F:5B:0C:40:8B:E6:0E:86:4F:E9:13:1F:0B:87 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0C1E Signing time: Wed 20 May 2026 18:50:25 +0000 Manifest this update: Wed 20 May 2026 18:50:25 +0000 Manifest next update: Wed 27 May 2026 18:50:25 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: pJATDp92L/zMJVbKJTbNyGMv9qKJGYnJsTeHUbbKA9U=) 2: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=) 3: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=) 4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: May 20 18:50:25 2026 GMT Not After : May 27 18:50:25 2026 GMT Subject: CN=6a0e0271-b18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:66:6e:74:c0:c8:32:cb:76:78:42:c2:ed: 69:95:70:ab:c2:78:ab:6a:a9:28:a1:09:67:f5:95: f0:84:14:bf:3b:8b:84:e0:45:cd:59:17:83:ad:80: 16:8f:d8:bb:05:a2:66:97:43:4a:1b:b8:fe:a4:38: ec:70:c3:27:13:8d:19:3c:68:2e:61:21:75:2f:9f: 07:52:86:cf:e1:0d:76:68:cc:c9:b8:29:01:e1:45: 8f:e6:37:92:c3:e4:ab:1a:d6:6b:3f:ba:29:df:5b: 2d:ea:b3:74:bc:09:f9:97:8c:18:59:f3:de:74:47: e4:05:3d:0c:5a:cd:32:55:88:56:d8:98:34:aa:0f: d2:9d:39:7a:65:56:7f:36:43:7a:c5:88:ac:72:2d: 7a:fb:08:45:f3:84:1b:1e:73:98:f9:be:78:21:67: f9:c6:7d:81:5b:d5:39:5b:db:a1:26:ae:54:56:33: 24:2e:cd:cf:0a:33:ae:0d:7a:84:7a:0d:d1:0e:d2: 88:05:ba:51:31:90:7d:a9:f2:21:7f:d5:45:57:44: 0d:81:8f:be:a0:bc:88:8a:96:9c:fd:d0:bf:50:58: b1:ff:82:9b:77:04:b9:80:6d:41:ef:72:13:39:ec: f3:c5:6b:5e:11:64:dd:04:f8:0c:b5:0b:a6:25:f2: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EF:BA:8E:A6:31:8F:5B:0C:40:8B:E6:0E:86:4F:E9:13:1F:0B:87 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ad:52:79:68:f0:44:5d:c7:6b:58:1c:d1:ff:55:59:19:53: e0:46:6f:0f:2d:d0:3e:ac:1b:71:ac:f8:55:17:8e:f7:b3:37: 8c:2e:49:89:8d:16:68:62:a5:63:b3:25:16:57:4e:77:1a:e8: 6b:38:11:d4:c5:f4:d5:8b:cb:1a:6b:78:91:4c:f8:ff:65:ec: 16:93:54:5b:2f:ff:ba:7e:eb:d0:c5:51:7c:3b:cd:38:c6:37: 9c:e1:23:db:bb:e7:74:28:7c:b6:65:b4:7b:5e:cb:fc:84:c9: 4c:ad:bc:5d:69:62:3b:a1:5b:68:03:41:ec:87:a4:36:3d:96: 2a:67:74:69:8a:2a:ac:f1:50:05:0d:b7:38:bb:c1:e4:e5:9e: 09:cc:f7:49:a5:59:12:8b:4a:13:c7:97:d6:0a:86:bc:3c:bc: af:d3:e2:bb:93:34:c7:be:3f:75:fd:48:b2:16:15:29:62:ea: 94:12:09:f2:00:c6:66:23:95:a5:73:aa:88:f6:30:11:b6:04: e7:4c:41:fc:16:e2:30:6b:d4:1d:51:c0:7d:f1:7d:da:41:e2: 48:18:0c:2d:9e:14:f9:d0:98:c0:e2:fe:c8:9f:09:93:c5:a0: 26:e7:56:18:d1:da:25:e3:ea:3e:96:b6:40:0f:64:84:89:04: 74:d3:2d:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjYwNTIwMTg1MDI1WhcNMjYwNTI3MTg1MDI1WjAYMRYwFAYD VQQDEw02YTBlMDI3MS1iMThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7lmbnTAyDLLdnhCwu1plXCrwniraqkooQln9ZXwhBS/O4uE4EXNWReDrYAW j9i7BaJml0NKG7j+pDjscMMnE40ZPGguYSF1L58HUobP4Q12aMzJuCkB4UWP5jeS w+SrGtZrP7op31st6rN0vAn5l4wYWfPedEfkBT0MWs0yVYhW2Jg0qg/SnTl6ZVZ/ NkN6xYisci16+whF84QbHnOY+b54IWf5xn2BW9U5W9uhJq5UVjMkLs3PCjOuDXqE eg3RDtKIBbpRMZB9qfIhf9VFV0QNgY++oLyIipac/dC/UFix/4KbdwS5gG1B73IT OezzxWteEWTdBPgMtQumJfIK1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/vuo6m MY9bDECL5g6GT+kTHwuHMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFK1SeWjwRF3Ha1gc0f9VWRlT4EZvDy3QPqwbcaz4VReO97M3jC5JiY0WaGKl Y7MlFldOdxroazgR1MX01YvLGmt4kUz4/2XsFpNUWy//un7r0MVRfDvNOMY3nOEj 27vndCh8tmW0e17L/ITJTK28XWliO6FbaANB7IekNj2WKmd0aYoqrPFQBQ23OLvB 5OWeCcz3SaVZEotKE8eX1gqGvDy8r9Piu5M0x74/df1IshYVKWLqlBIJ8gDGZiOV pXOqiPYwEbYE50xB/BbiMGvUHVHAffF92kHiSBgMLZ4U+dCYwOL+yJ8Jk8WgJudW GNHaJePqPpa2QA9khIkEdNMtZw== -----END CERTIFICATE-----Generated at Thu May 21 10:17:58 2026 by rpki-client