$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: LUOLRM0qN1Iacs5rdkMB583XtOPDbjYE1ZB65sPXFcA= Subject key identifier: 52:70:7C:25:8B:B5:C1:7E:8A:A3:FD:D7:72:32:62:07:FC:B8:47:7D Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 01BA Signing time: Thu 21 May 2026 03:56:41 +0000 Manifest this update: Thu 21 May 2026 03:56:40 +0000 Manifest next update: Thu 28 May 2026 03:56:40 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: Y6s6OYE4EDfQINHsgUzblUkXJSk0LU0CeRcitDw0DYM=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: IvRWmE6+mjTb8POgLSJTClOjuqFSP0R7sU/me4/1UO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: May 21 03:56:40 2026 GMT Not After : May 28 03:56:40 2026 GMT Subject: CN=6a0e8279-8f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:0e:e1:ed:e2:9d:9a:97:3b:e6:b2:ca:6a: 06:5a:d2:db:f4:01:7b:a6:11:86:bd:af:36:cb:58: c0:2d:82:ad:27:ad:1f:cd:3e:45:a0:ee:f0:a5:cd: 82:42:df:94:c2:08:9b:8b:4e:8b:f2:3d:3a:37:a5: 4d:90:b2:d6:4f:9e:ec:55:89:63:b6:db:ee:b9:4d: d5:79:d5:68:bd:2b:57:d9:c1:39:4e:bd:55:b8:e6: c4:2a:0f:52:f9:36:1e:ae:d8:89:14:33:46:cf:f2: c9:19:83:0f:7b:43:9c:34:ff:7b:60:93:c8:b9:5c: 8a:7c:48:2c:5b:aa:d3:85:67:2e:f4:76:1f:5d:53: e5:0d:9f:53:73:9c:33:c5:e1:91:2b:4a:40:f9:bd: 5d:a9:52:3c:4f:8d:32:76:d6:c1:6e:68:50:bc:38: 3b:97:a8:a9:0f:3b:99:96:87:ee:fd:91:ef:49:c4: d4:3e:21:d8:24:1d:2d:76:89:72:a5:ba:c5:23:6b: e4:25:6a:11:63:5e:ca:cb:d0:54:2b:b4:06:87:23: b6:85:72:75:fc:33:6d:d1:15:ab:1e:91:8a:c7:d8: 9f:99:95:7a:1a:cd:d6:c9:01:ae:d9:45:01:0e:90: 32:57:1f:72:7a:1c:09:02:53:92:ac:4c:c8:6e:a3: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:70:7C:25:8B:B5:C1:7E:8A:A3:FD:D7:72:32:62:07:FC:B8:47:7D X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:7b:dd:ae:95:d3:ca:b7:dc:a5:8c:2a:41:d8:8a:66:c5: 84:51:3f:1c:3e:39:11:6e:38:92:ba:a2:3c:4f:13:28:3d:c9: c3:c8:cf:f2:ce:d2:d2:0e:a2:d5:cb:98:e1:01:29:77:d8:a6: 08:71:63:6e:7b:3e:e7:f2:27:d8:b4:f3:b4:b6:cd:22:48:a3: d8:7b:c7:15:85:bf:be:1c:d9:33:b5:2a:c6:e0:14:a2:20:16: d4:fb:fc:f0:c1:53:5b:5d:43:66:e7:e7:30:30:6a:d7:65:03: 99:96:5c:7e:f7:59:ad:fd:6f:83:a2:c2:d5:32:1b:e5:7e:57: 58:27:b0:22:0d:75:b8:34:61:b0:0a:64:16:d8:fd:2e:7b:3a: e3:70:37:10:7e:60:22:e6:06:b9:7c:ae:04:a6:7d:dd:fc:01: 9b:1e:15:91:70:80:da:70:c3:d6:5f:76:05:46:b1:b8:d0:12: 97:ef:d5:b7:c2:75:0f:2c:bc:4c:c3:ba:44:fd:c1:2d:15:1b: c6:90:7c:45:3e:02:8e:6d:34:68:92:79:9a:e2:f8:10:97:56: 65:5e:ec:5d:99:78:a3:7d:77:e8:8c:36:c6:98:a1:87:37:f2: e2:57:28:6a:d0:a2:46:c1:ef:73:8a:a2:94:3f:a5:44:61:4a: c9:a5:c7:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjYwNTIxMDM1NjQwWhcNMjYwNTI4MDM1NjQwWjAYMRYwFAYD VQQDEw02YTBlODI3OS04ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PEO4e3inZqXO+ayymoGWtLb9AF7phGGva82y1jALYKtJ60fzT5FoO7wpc2C Qt+Uwgibi06L8j06N6VNkLLWT57sVYljttvuuU3VedVovStX2cE5Tr1VuObEKg9S +TYertiJFDNGz/LJGYMPe0OcNP97YJPIuVyKfEgsW6rThWcu9HYfXVPlDZ9Tc5wz xeGRK0pA+b1dqVI8T40ydtbBbmhQvDg7l6ipDzuZlofu/ZHvScTUPiHYJB0tdoly pbrFI2vkJWoRY17Ky9BUK7QGhyO2hXJ1/DNt0RWrHpGKx9ifmZV6Gs3WyQGu2UUB DpAyVx9yehwJAlOSrEzIbqPavQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJwfCWL tcF+iqP913IyYgf8uEd9MB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOX173a6V08q33KWMKkHYimbFhFE/HD45EW44krqiPE8TKD3Jw8jP8s7S0g6i 1cuY4QEpd9imCHFjbns+5/In2LTztLbNIkij2HvHFYW/vhzZM7UqxuAUoiAW1Pv8 8MFTW11DZufnMDBq12UDmZZcfvdZrf1vg6LC1TIb5X5XWCewIg11uDRhsApkFtj9 Lns643A3EH5gIuYGuXyuBKZ93fwBmx4VkXCA2nDD1l92BUaxuNASl+/Vt8J1Dyy8 TMO6RP3BLRUbxpB8RT4Cjm00aJJ5muL4EJdWZV7sXZl4o3136Iw2xpihhzfy4lco atCiRsHvc4qilD+lRGFKyaXHwg== -----END CERTIFICATE-----Generated at Thu May 21 10:15:34 2026 by rpki-client