$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: Zu+3DhWQ8aAJnJMGpPSftZeZav9vG5db3g8gHxWZw+Y= Subject key identifier: 86:D6:F6:8F:40:4D:98:F5:DB:F5:2F:6E:F3:2B:0C:DB:A9:03:88:9B Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0CC5 Signing time: Wed 20 May 2026 18:29:41 +0000 Manifest this update: Wed 20 May 2026 18:29:40 +0000 Manifest next update: Wed 27 May 2026 18:29:40 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: u+Gilj2+SkztmXhsHRNgaHi7qDldWi6RnqG213799xw=) 2: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=) 3: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: May 20 18:29:40 2026 GMT Not After : May 27 18:29:40 2026 GMT Subject: CN=6a0dfd95-029c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:5e:96:16:ce:0a:c0:83:d1:ef:fb:b0:d7: 97:e9:0c:c6:da:2d:cf:a6:99:a9:2e:c6:a4:d7:45: 28:14:4a:c6:49:d7:66:14:08:de:3c:3e:44:40:4f: b5:10:77:22:04:2c:43:91:9c:9f:04:64:26:0f:b7: 61:73:60:f1:c8:14:c3:bd:93:43:40:23:4e:a3:18: 09:84:88:75:66:9c:b7:6f:62:b9:bf:eb:5b:02:20: d1:9d:8b:da:36:c5:28:b5:83:10:da:e7:fa:6d:cf: 93:dd:d7:e1:1f:c4:fe:01:88:81:10:47:f5:f3:3e: d9:05:2a:d4:ae:5e:68:57:70:b4:dc:65:a1:f8:1f: 92:97:e3:d9:1e:77:32:97:2e:28:a6:38:51:31:c2: 42:54:ee:5c:ef:64:fd:b5:7e:32:d8:43:d5:84:3c: 46:a9:19:58:ed:07:82:9c:cd:ea:4c:2b:ab:d2:52: 81:2a:30:f5:39:19:ea:c3:6b:77:ad:1d:52:ac:c6: a3:26:0e:b6:91:a7:e2:7b:88:25:ac:ca:1d:c3:59: 8a:a9:72:d8:4a:21:55:d5:c4:8e:8b:9c:d0:c0:62: 10:62:2f:bf:6c:d5:cd:95:ac:77:4f:1c:d1:27:75: bb:9e:79:da:6f:31:48:b0:58:8c:8a:b4:81:58:1d: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:F6:8F:40:4D:98:F5:DB:F5:2F:6E:F3:2B:0C:DB:A9:03:88:9B X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:65:73:c2:59:8d:8e:93:2a:76:73:f2:2b:30:8e:ab:c8:7b: 13:b2:7e:98:24:4e:a3:44:ec:c0:6c:39:ca:e6:5b:95:fc:ae: 88:55:ed:9c:8c:68:f6:c3:9f:8b:d4:1e:a4:27:0e:4b:83:48: c0:7f:1e:a0:a1:48:b7:12:3a:7a:62:cd:43:bb:e6:40:a4:4d: 93:a6:54:36:b2:65:aa:6b:00:59:06:5e:26:42:dc:27:62:75: 0f:08:86:60:da:70:3d:74:90:99:4f:47:2f:5e:a3:2c:c6:05: b4:03:e3:c1:e5:65:e2:ba:21:83:9e:0b:b9:ad:c5:69:90:49: b0:8c:a2:e1:67:39:f2:a8:cb:c7:40:ab:ce:be:52:9a:25:13: 19:c0:68:1d:d3:47:46:c4:b7:5d:e6:d9:0a:5a:3e:39:1c:7a: 25:ea:30:fc:4c:c5:bc:a2:83:80:6e:22:13:1c:d6:59:23:89: 94:05:65:aa:24:d2:4c:40:ae:6e:05:cd:76:0a:9f:f0:5c:fb: fc:ea:1c:3f:19:7b:27:3c:48:5d:68:81:c4:b8:d5:c6:94:a2: b5:9a:e6:82:8c:a3:b4:20:5b:12:73:10:2c:38:cf:4b:da:55: 58:89:33:38:cc:a1:00:39:09:05:8c:b2:1a:c0:97:f8:2f:34: 3c:f0:72:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjYwNTIwMTgyOTQwWhcNMjYwNTI3MTgyOTQwWjAYMRYwFAYD VQQDEw02YTBkZmQ5NS0wMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiwdelhbOCsCD0e/7sNeX6QzG2i3PppmpLsak10UoFErGSddmFAjePD5EQE+1 EHciBCxDkZyfBGQmD7dhc2DxyBTDvZNDQCNOoxgJhIh1Zpy3b2K5v+tbAiDRnYva NsUotYMQ2uf6bc+T3dfhH8T+AYiBEEf18z7ZBSrUrl5oV3C03GWh+B+Sl+PZHncy ly4opjhRMcJCVO5c72T9tX4y2EPVhDxGqRlY7QeCnM3qTCur0lKBKjD1ORnqw2t3 rR1SrMajJg62kafie4glrModw1mKqXLYSiFV1cSOi5zQwGIQYi+/bNXNlax3TxzR J3W7nnnabzFIsFiMirSBWB1AbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbW9o9A TZj12/UvbvMrDNupA4ibMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkGVzwlmNjpMqdnPyKzCOq8h7E7J+mCROo0TswGw5yuZblfyuiFXtnIxo9sOf i9QepCcOS4NIwH8eoKFItxI6emLNQ7vmQKRNk6ZUNrJlqmsAWQZeJkLcJ2J1DwiG YNpwPXSQmU9HL16jLMYFtAPjweVl4rohg54Lua3FaZBJsIyi4Wc58qjLx0Crzr5S miUTGcBoHdNHRsS3XebZClo+ORx6Jeow/EzFvKKDgG4iExzWWSOJlAVlqiTSTECu bgXNdgqf8Fz7/OocPxl7JzxIXWiBxLjVxpSitZrmgoyjtCBbEnMQLDjPS9pVWIkz OMyhADkJBYyyGsCX+C80PPByWw== -----END CERTIFICATE-----Generated at Thu May 21 12:17:39 2026 by rpki-client