$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: aeNGgjEowq2SQ6j9RIwC4Uxg9p44KiUJct3faNR0Oek= Subject key identifier: A9:4B:4A:79:6C:18:DE:99:A9:8E:3B:A5:2A:0A:12:6A:92:24:81:04 Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 0874 Signing time: Wed 20 May 2026 20:45:29 +0000 Manifest this update: Wed 20 May 2026 20:45:29 +0000 Manifest next update: Wed 27 May 2026 20:45:29 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: rjYL3F26qohVPD84HNUntycYOHAeaG9hXdVTKfptb8A=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: FgNhv4Lyku+4T14lzJCXvI1aI6pzmBx0dttZBahWL/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: May 20 20:45:29 2026 GMT Not After : May 27 20:45:29 2026 GMT Subject: CN=6a0e1d69-db48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:14:d9:0d:6b:ba:a3:00:52:32:a9:2e:ee: e9:a2:35:4d:16:c6:51:90:98:d7:d0:15:d4:51:5e: 2d:04:51:6d:6c:a4:8b:a5:13:cc:b9:6a:3d:d6:a7: 9a:70:62:4a:7b:6b:68:f3:99:4a:c6:14:f6:24:f9: a6:09:a6:2f:ba:12:03:ea:55:f3:f8:19:b0:c7:cb: 50:84:81:89:5d:90:b3:34:cd:47:ca:7e:5d:34:c6: 2a:87:8e:1d:21:9c:57:b1:26:93:5a:c1:fb:b1:cc: 3b:6b:99:8a:30:11:a2:66:2a:9a:f6:6f:13:9a:72: 96:d7:c4:0c:b7:8e:49:8f:26:80:72:a9:c5:21:31: 40:2d:5e:12:3d:96:26:64:65:9f:67:90:8c:c0:cf: 8c:12:05:7b:aa:28:d5:74:40:ce:60:bc:4a:f5:95: e6:8f:92:18:0f:06:34:19:98:a3:37:68:30:59:69: 6e:ed:78:93:9d:ea:f4:d6:e2:6f:95:fd:c8:d0:d6: 78:42:c0:d5:3a:25:a4:51:61:ff:55:a5:62:7d:74: 57:11:0e:b0:c6:e6:d6:cf:e8:b3:53:f8:be:1d:53: 6c:a5:d8:83:8c:36:b7:21:e4:e2:45:57:97:73:11: 40:a0:96:1d:05:42:ab:3c:71:32:1e:79:df:13:5a: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4B:4A:79:6C:18:DE:99:A9:8E:3B:A5:2A:0A:12:6A:92:24:81:04 X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:68:95:16:bc:6a:0e:7f:b3:54:4c:df:d1:5d:11:bb:d7:a7: 90:25:fa:0a:0c:b0:cb:93:97:50:6a:ee:1f:70:82:1f:dc:61: d3:68:bc:67:0f:2f:9f:d5:66:db:c2:7a:8f:ff:ee:69:37:c1: 5c:72:12:92:8c:76:dc:25:60:a6:a7:45:ec:0e:ed:91:b8:2e: 3b:ad:56:15:49:b4:32:1f:8e:dd:9a:0c:f4:7a:ef:74:a8:81: 08:87:67:2b:45:6a:ec:5e:88:a6:25:21:85:6a:f7:a8:76:ab: f6:83:52:01:af:d6:e8:e3:44:8c:75:d2:f5:c0:df:27:23:c0: 96:39:9f:a2:f5:84:f0:21:d6:42:61:ad:cf:33:df:18:83:8d: 86:fd:1a:6d:aa:cd:a3:3f:3e:fc:72:80:b0:2e:1f:4d:15:2a: 8a:31:8a:48:4d:67:0b:b4:73:8a:53:42:c0:23:bd:16:68:16: c8:66:54:5c:0d:b7:54:a0:b6:3c:81:49:be:69:f7:1b:10:be: 79:51:30:f2:9d:ee:0d:5d:05:82:bb:d6:a2:79:e2:42:7b:62: 52:9a:0f:76:bf:90:f1:b2:68:a6:c6:75:fd:b3:a0:f5:a8:b7: 55:6d:87:a3:aa:91:6c:e6:50:e2:69:09:cf:7b:a0:78:4e:3a: 1d:fc:90:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjYwNTIwMjA0NTI5WhcNMjYwNTI3MjA0NTI5WjAYMRYwFAYD VQQDEw02YTBlMWQ2OS1kYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIoU2Q1ruqMAUjKpLu7pojVNFsZRkJjX0BXUUV4tBFFtbKSLpRPMuWo91qea cGJKe2to85lKxhT2JPmmCaYvuhID6lXz+Bmwx8tQhIGJXZCzNM1Hyn5dNMYqh44d IZxXsSaTWsH7scw7a5mKMBGiZiqa9m8TmnKW18QMt45JjyaAcqnFITFALV4SPZYm ZGWfZ5CMwM+MEgV7qijVdEDOYLxK9ZXmj5IYDwY0GZijN2gwWWlu7XiTner01uJv lf3I0NZ4QsDVOiWkUWH/VaVifXRXEQ6wxubWz+izU/i+HVNspdiDjDa3IeTiRVeX cxFAoJYdBUKrPHEyHnnfE1pRmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlLSnls GN6ZqY47pSoKEmqSJIEEMB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALWiVFrxqDn+zVEzf0V0Ru9enkCX6Cgywy5OXUGruH3CCH9xh02i8Zw8vn9Vm 28J6j//uaTfBXHISkox23CVgpqdF7A7tkbguO61WFUm0Mh+O3ZoM9HrvdKiBCIdn K0Vq7F6IpiUhhWr3qHar9oNSAa/W6ONEjHXS9cDfJyPAljmfovWE8CHWQmGtzzPf GIONhv0abarNoz8+/HKAsC4fTRUqijGKSE1nC7RzilNCwCO9FmgWyGZUXA23VKC2 PIFJvmn3GxC+eVEw8p3uDV0FgrvWonniQntiUpoPdr+Q8bJopsZ1/bOg9ai3VW2H o6qRbOZQ4mkJz3ugeE46HfyQiw== -----END CERTIFICATE-----Generated at Thu May 21 11:59:21 2026 by rpki-client