$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json) Hash identifier: QblLXo7ZVBcgmUQb+c4F8BHsDPP1AQhQeU/YLOEjQUo= Subject key identifier: 16:86:DA:BD:D9:0A:1A:70:91:A6:56:27:7A:C0:35:ED:CE:6E:5F:55 Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft Manifest number: 0105 Signing time: Mon 01 Jun 2026 06:57:12 +0000 Manifest this update: Mon 01 Jun 2026 06:57:11 +0000 Manifest next update: Mon 08 Jun 2026 06:57:11 +0000 Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: vQo76pJ1rc+k1IShlv8ItSv8QDiZ4wSxFpVXnBN6ckY=) 2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Validity Not Before: Jun 1 06:57:11 2026 GMT Not After : Jun 8 06:57:11 2026 GMT Subject: CN=6a1d2d47-d6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:db:3e:ab:0b:60:b2:86:f7:07:3b:96:57: 38:12:e0:5a:33:93:be:cd:d5:1f:67:fe:6c:65:76: 4b:91:ec:b1:b2:8b:dd:d0:94:93:dd:15:c0:9a:4c: e6:4f:e0:3a:66:ba:c2:d4:81:0b:3e:95:a0:51:35: 51:8d:44:a0:60:d1:29:a4:a5:2c:88:a9:20:65:24: e1:95:d8:ad:1a:a2:6c:54:c3:77:94:b6:6f:ba:2b: 8d:da:0e:82:17:3e:fa:16:e5:aa:66:43:ed:0f:5f: 8f:2d:33:e8:f9:34:83:14:33:56:d2:98:72:26:4c: d1:70:c1:5f:f2:8d:12:3f:7d:bd:75:ea:78:9f:95: 67:de:1b:4e:52:b4:77:83:c7:fb:6c:c5:5c:97:2d: f8:44:62:ce:bc:9b:81:f5:2e:6b:96:89:7c:c1:5a: 21:0f:e2:19:62:64:dd:c1:e8:10:d5:d4:52:6e:73: 24:50:32:45:30:cb:56:89:26:9e:37:6e:2d:55:a1: 71:d6:4d:d9:67:be:9e:26:eb:ff:09:86:78:f7:3d: 6a:02:a4:3d:95:65:72:4b:2d:a5:8d:a0:85:3a:4b: f8:94:31:31:01:69:0c:a6:76:30:5d:9a:9a:92:02: 04:69:2e:b3:45:43:1a:d5:29:0b:d7:67:f7:e1:d3: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:DA:BD:D9:0A:1A:70:91:A6:56:27:7A:C0:35:ED:CE:6E:5F:55 X509v3 Authority Key Identifier: keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:79:d1:b4:31:c4:f6:e1:a2:e4:2a:83:96:1c:73:c1:73:d7: 15:4b:1d:6f:1a:62:f9:4f:0b:1a:aa:53:95:90:c3:0b:06:77: 5b:2a:a4:eb:82:61:8d:20:c9:97:12:e7:8d:c8:0b:59:a0:60: b3:e1:7d:fe:3b:c6:19:84:37:be:cb:e0:e7:9f:09:d2:35:97: fa:ce:6d:bd:67:1a:dc:30:a2:ef:76:0b:84:1d:05:dc:15:95: 9a:55:19:ce:7b:93:23:82:dc:5d:59:4a:dd:43:e9:69:6f:82: eb:59:5a:df:3a:55:fe:a3:ce:75:2a:bb:25:70:e6:9c:95:94: f5:e2:be:1b:2c:26:22:9a:e4:fb:a3:b5:c6:a2:cf:d9:30:a2: 62:9a:48:64:90:6e:2f:05:7b:ec:c7:bb:84:84:f5:a9:5a:52: e0:5e:0c:f2:64:5f:83:09:61:b7:4c:f2:14:e6:7b:73:78:1e: f8:87:a5:2b:1b:77:59:a5:d6:3f:bc:08:ff:19:6d:66:6e:c6: ea:64:42:f0:4a:db:92:75:cd:96:9a:87:e1:32:31:54:bb:e3: 42:f9:e2:5a:39:c6:d0:14:db:81:e1:8c:68:e3:ea:d7:d3:77: a7:5b:68:c9:61:2f:53:33:de:a3:a8:4f:86:bb:1a:b4:7d:f5: 53:9c:19:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3QjAxMTAvBgNVBAUTKENBMjk3NzQ3NDMwQTFCRUIzNDBCQ0EzOUQ2MjIyRkQy NjQxOUI3REIwHhcNMjYwNjAxMDY1NzExWhcNMjYwNjA4MDY1NzExWjAYMRYwFAYD VQQDEw02YTFkMmQ0Ny1kNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAjbPqsLYLKG9wc7llc4EuBaM5O+zdUfZ/5sZXZLkeyxsovd0JST3RXAmkzm T+A6ZrrC1IELPpWgUTVRjUSgYNEppKUsiKkgZSThlditGqJsVMN3lLZvuiuN2g6C Fz76FuWqZkPtD1+PLTPo+TSDFDNW0phyJkzRcMFf8o0SP329dep4n5Vn3htOUrR3 g8f7bMVcly34RGLOvJuB9S5rlol8wVohD+IZYmTdwegQ1dRSbnMkUDJFMMtWiSae N24tVaFx1k3ZZ76eJuv/CYZ49z1qAqQ9lWVySy2ljaCFOkv4lDExAWkMpnYwXZqa kgIEaS6zRUMa1SkL12f34dMHeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaG2r3Z ChpwkaZWJ3rANe3Obl9VMB8GA1UdIwQYMBaAFMopd0dDChvrNAvKOdYiL9JkGbfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTdCMC9FMUFDODIxMEQ4 ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ctczBDOG81MWlJdjBtUVp0 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTdCMC9FMUFDODIxMEQ4ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ct czBDOG81MWlJdjBtUVp0OXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZXnRtDHE9uGi5CqDlhxzwXPXFUsdbxpi+U8LGqpTlZDDCwZ3Wyqk64JhjSDJ lxLnjcgLWaBgs+F9/jvGGYQ3vsvg558J0jWX+s5tvWca3DCi73YLhB0F3BWVmlUZ znuTI4LcXVlK3UPpaW+C61la3zpV/qPOdSq7JXDmnJWU9eK+GywmIprk+6O1xqLP 2TCiYppIZJBuLwV77Me7hIT1qVpS4F4M8mRfgwlht0zyFOZ7c3ge+IelKxt3WaXW P7wI/xltZm7G6mRC8ErbknXNlpqH4TIxVLvjQvniWjnG0BTbgeGMaOPq19N3p1to yWEvUzPeo6hPhrsatH31U5wZCg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:37 2026 by rpki-client