$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json) Hash identifier: fG94bXUtW+wzGT4CPUnuBmnPfBRSX1OZX5kx3dIowQk= Subject key identifier: 28:84:3C:5D:A6:56:15:F9:62:B8:EA:B8:5C:48:F2:02:31:B5:63:4E Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft Manifest number: 0665 Signing time: Wed 20 May 2026 22:40:30 +0000 Manifest this update: Wed 20 May 2026 22:40:29 +0000 Manifest next update: Wed 27 May 2026 22:40:29 +0000 Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: ih9falWGZWPW2JuFWEkKFVmujeoCGS36MsXqTGhRneM=) 2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D Validity Not Before: May 20 22:40:29 2026 GMT Not After : May 27 22:40:29 2026 GMT Subject: CN=6a0e385e-c441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:46:a2:f6:e5:84:a4:6d:8a:e9:25:88:09: 7e:03:77:11:56:ad:f1:40:ee:e5:50:0e:0d:e3:dd: 24:9f:bf:1b:ee:87:ea:10:79:f5:be:bc:e5:e0:01: 96:50:e1:4a:dd:d0:ad:7a:78:6e:74:7a:eb:30:1b: e0:27:be:07:9b:35:43:9e:2c:51:80:12:d4:e9:3f: 2f:45:63:a1:27:d3:48:98:be:39:d1:19:a0:02:61: 14:70:7a:cd:65:ca:83:df:49:17:10:18:3a:27:b8: b6:4e:d0:94:40:3a:ab:e7:08:47:e0:d0:09:dd:37: 21:98:8d:94:7f:03:f4:c2:0f:a0:66:8f:18:72:d9: a9:be:10:fc:e1:8f:a3:9b:45:8c:c4:62:4c:83:da: 98:2e:95:82:b0:fa:ba:89:97:15:64:3f:38:15:21: 6a:6d:40:a0:b1:1c:33:91:e5:79:26:18:d4:03:96: 9b:e0:43:dc:14:ad:60:8a:aa:10:bd:ff:8a:2d:65: 86:54:0a:ae:fd:30:7c:ed:57:93:44:ec:0c:56:90: 22:32:ed:9d:40:b6:89:f8:b7:df:eb:73:99:b9:0c: 3a:d9:a7:78:a2:fa:6a:7b:e2:8e:c5:96:43:16:94: a7:3c:f3:ec:67:34:d0:8b:77:19:fd:79:a3:e3:d7: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:3C:5D:A6:56:15:F9:62:B8:EA:B8:5C:48:F2:02:31:B5:63:4E X509v3 Authority Key Identifier: keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6e:c7:73:53:c1:cf:a2:ad:ee:cd:9b:11:da:20:56:dc:56: f8:c7:03:4a:6e:25:10:fb:d2:b8:c9:a0:e0:fe:79:3a:77:31: 9b:51:7e:e2:04:c8:2e:a3:45:d8:ac:57:25:87:3e:c1:b9:68: e7:ee:8a:6d:b7:8c:cf:a8:ac:33:c2:42:5f:3e:33:27:d0:22: 9b:26:67:dc:e9:c0:fa:b7:3e:62:26:2e:28:dd:c7:46:28:18: 18:04:33:a4:df:88:70:76:94:eb:5f:f1:6e:1b:fe:b3:27:ba: 0e:36:6d:df:36:ef:d5:80:08:f5:a7:9b:11:50:78:6f:79:d4: b1:7d:9b:a9:33:3a:fe:56:f5:f9:f2:43:0c:64:a8:04:1a:ae: a8:bf:4a:f9:f1:8a:1a:9a:83:e4:c4:84:4f:25:3b:6d:b6:dd: 9d:27:1d:96:d9:ed:40:88:58:81:b1:ca:0b:23:80:61:c1:b6: 3d:13:73:31:bf:d8:33:e1:f8:f4:df:5d:81:13:91:10:2b:6b: 5e:59:93:5a:16:a3:03:55:f5:09:78:45:fb:92:80:16:49:b0: 6b:b4:dc:8a:12:70:24:00:a8:46:c3:ec:d9:9f:cc:4d:c0:7b: 19:fe:0a:81:eb:fd:9f:e0:50:34:f2:57:38:41:51:b7:32:34: 24:f8:28:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNTgxMTAvBgNVBAUTKDYzRTQ4NzYyQTg5MzA4MDk2NzczRDlFMUM5RDFBOTk5 ODAzNTY3MEQwHhcNMjYwNTIwMjI0MDI5WhcNMjYwNTI3MjI0MDI5WjAYMRYwFAYD VQQDEw02YTBlMzg1ZS1jNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s5GovblhKRtiukliAl+A3cRVq3xQO7lUA4N490kn78b7ofqEHn1vrzl4AGW UOFK3dCtenhudHrrMBvgJ74HmzVDnixRgBLU6T8vRWOhJ9NImL450RmgAmEUcHrN ZcqD30kXEBg6J7i2TtCUQDqr5whH4NAJ3TchmI2UfwP0wg+gZo8YctmpvhD84Y+j m0WMxGJMg9qYLpWCsPq6iZcVZD84FSFqbUCgsRwzkeV5JhjUA5ab4EPcFK1giqoQ vf+KLWWGVAqu/TB87VeTROwMVpAiMu2dQLaJ+Lff63OZuQw62ad4ovpqe+KOxZZD FpSnPPPsZzTQi3cZ/Xmj49c4pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiEPF2m VhX5YrjquFxI8gIxtWNOMB8GA1UdIwQYMBaAFGPkh2KokwgJZ3PZ4cnRqZmANWcN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I1OC9BQUMyMUM3RUNB QjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENBbG5jOW5oeWRHcG1ZQTFa dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktU0hZcWlUQ0FsbmM5bmh5ZEdwbVlBMVp3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I1OC9BQUMyMUM3RUNBQjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENB bG5jOW5oeWRHcG1ZQTFadzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFm7Hc1PBz6Kt7s2bEdogVtxW+McDSm4lEPvSuMmg4P55Oncxm1F+4gTILqNF 2KxXJYc+wblo5+6KbbeMz6isM8JCXz4zJ9AimyZn3OnA+rc+YiYuKN3HRigYGAQz pN+IcHaU61/xbhv+sye6DjZt3zbv1YAI9aebEVB4b3nUsX2bqTM6/lb1+fJDDGSo BBquqL9K+fGKGpqD5MSETyU7bbbdnScdltntQIhYgbHKCyOAYcG2PRNzMb/YM+H4 9N9dgRORECtrXlmTWhajA1X1CXhF+5KAFkmwa7TcihJwJACoRsPs2Z/MTcB7Gf4K gev9n+BQNPJXOEFRtzI0JPgo4g== -----END CERTIFICATE-----Generated at Thu May 21 10:14:49 2026 by rpki-client