$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: OgPfCIYKs79yd4k22/ry5eM/w/miQ3nyGwG0KjABr7w= Subject key identifier: F4:A9:69:A3:8F:E9:42:50:47:C9:A1:F7:8A:2A:13:2E:7E:09:D6:BA Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 021B Signing time: Thu 21 May 2026 02:56:19 +0000 Manifest this update: Thu 21 May 2026 02:56:18 +0000 Manifest next update: Thu 28 May 2026 02:56:18 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: zexANVcQTIG1DlYOnADC18o7jwqBw0GyjWYGEjLdc7Q=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: May 21 02:56:18 2026 GMT Not After : May 28 02:56:18 2026 GMT Subject: CN=6a0e7453-dfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:a2:e9:3f:6d:4e:5e:d3:09:9c:70:9e:e2: 28:83:24:2f:78:59:09:c0:7f:4f:7a:30:b0:31:b3: 6f:4c:46:59:bc:1e:f0:28:4f:85:b4:51:be:e4:d3: a4:86:5d:e5:08:7f:03:fb:8a:53:13:16:21:09:ab: 1d:9c:e1:41:5d:7a:7d:00:55:4d:3c:ae:49:da:d7: 61:37:9b:e8:96:c6:47:34:59:1f:a8:3a:27:5e:fe: 7b:75:81:db:66:a9:b1:28:57:25:6f:69:f0:90:6d: 5d:e3:a0:0f:8e:28:47:9a:6d:fb:f6:50:dd:b0:f1: 3b:70:1e:0e:81:ea:be:60:a2:33:b7:b1:f6:86:9a: 04:c3:10:60:ef:4f:1d:cf:bf:90:c0:c2:b0:b6:7c: 96:98:57:3d:74:49:73:d9:39:33:dc:d3:fc:b5:d3: 26:37:5a:8d:7f:4f:fa:54:f8:3e:bc:15:0e:a9:17: c3:96:96:94:0e:22:72:23:6c:3c:32:86:0a:a1:aa: 9b:cc:91:fe:b5:8d:52:22:68:e5:d9:ab:2b:ef:3d: 42:0f:d7:fc:ca:d7:55:54:b4:4c:da:bd:73:fb:23: 5f:ce:9d:51:e6:53:43:ee:d1:dc:ef:31:72:15:a2: 98:9a:06:e4:3e:26:ee:b5:5f:71:04:7a:aa:e9:6e: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A9:69:A3:8F:E9:42:50:47:C9:A1:F7:8A:2A:13:2E:7E:09:D6:BA X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:46:da:69:af:a5:fd:2c:6e:03:74:82:ba:16:55:4c:8f:fc: 67:18:77:dd:9b:02:1a:a5:12:a6:53:08:df:e2:e6:de:54:29: bb:4f:ff:43:e6:5d:60:70:27:27:a3:ec:11:54:5a:23:96:a4: 22:5a:bd:cc:bb:b4:d1:bb:59:c0:89:3d:7e:44:48:f2:cf:7f: 4b:fd:e6:ff:a8:cd:6e:74:5c:cd:d1:25:17:b0:d1:2b:46:fe: bc:c5:41:1c:4f:df:3c:86:53:7d:7c:53:15:9e:f6:03:70:1b: 43:47:d6:73:2d:83:c3:a1:51:56:0c:2b:9c:be:c0:bd:0c:56: e5:64:c4:38:f9:a8:c9:17:23:17:ed:a1:b8:af:10:d8:4f:b6: 27:f2:29:e3:bc:e3:85:7a:34:3f:4e:7f:5b:4e:db:7c:ac:7f: 11:2a:84:dc:01:ec:02:64:35:3d:1b:93:25:9d:94:bd:e6:98: e9:99:83:2d:44:a9:7a:db:62:01:f9:75:b5:ed:22:4b:73:1b: 84:45:75:34:49:35:37:b4:1f:ea:e0:b9:ed:4d:7a:55:24:89: b1:cd:b6:92:9a:8f:9b:43:ce:43:a1:74:da:98:04:d5:ba:be: 0d:92:5a:cc:7f:c2:ef:ca:78:69:e9:aa:85:f7:31:c0:8d:fb: 8c:de:d1:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwNTIxMDI1NjE4WhcNMjYwNTI4MDI1NjE4WjAYMRYwFAYD VQQDEw02YTBlNzQ1My1kZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwyi6T9tTl7TCZxwnuIogyQveFkJwH9PejCwMbNvTEZZvB7wKE+FtFG+5NOk hl3lCH8D+4pTExYhCasdnOFBXXp9AFVNPK5J2tdhN5volsZHNFkfqDonXv57dYHb ZqmxKFclb2nwkG1d46APjihHmm379lDdsPE7cB4Ogeq+YKIzt7H2hpoEwxBg708d z7+QwMKwtnyWmFc9dElz2Tkz3NP8tdMmN1qNf0/6VPg+vBUOqRfDlpaUDiJyI2w8 MoYKoaqbzJH+tY1SImjl2asr7z1CD9f8ytdVVLRM2r1z+yNfzp1R5lND7tHc7zFy FaKYmgbkPibutV9xBHqq6W4CRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSpaaOP 6UJQR8mh94oqEy5+Cda6MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiEbaaa+l/SxuA3SCuhZVTI/8Zxh33ZsCGqUSplMI3+Lm3lQpu0//Q+ZdYHAn J6PsEVRaI5akIlq9zLu00btZwIk9fkRI8s9/S/3m/6jNbnRczdElF7DRK0b+vMVB HE/fPIZTfXxTFZ72A3AbQ0fWcy2Dw6FRVgwrnL7AvQxW5WTEOPmoyRcjF+2huK8Q 2E+2J/Ip47zjhXo0P05/W07bfKx/ESqE3AHsAmQ1PRuTJZ2UveaY6ZmDLUSpetti Afl1te0iS3MbhEV1NEk1N7Qf6uC57U16VSSJsc22kpqPm0POQ6F02pgE1bq+DZJa zH/C78p4aemqhfcxwI37jN7RDw== -----END CERTIFICATE-----Generated at Thu May 21 10:16:17 2026 by rpki-client