$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft File: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json) Hash identifier: 7ypdE5LWo3PhjrnMUzLwvJ4EnJE/8sPJAmW5nEE5J2s= Subject key identifier: AD:4C:3E:10:FB:FC:BA:4C:FC:D1:4A:07:37:6B:D3:9A:59:A7:3C:51 Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 Certificate issuer: /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft Manifest number: 0130 Signing time: Mon 01 Jun 2026 06:19:38 +0000 Manifest this update: Mon 01 Jun 2026 06:19:37 +0000 Manifest next update: Mon 08 Jun 2026 06:19:37 +0000 Files and hashes: 1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: 1xqGJw+VCoZ+HGhMZudGebuYt2wJbWtS7OoRKho6Q1U=) 2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: OMf3bH3yxhVkJLXPWPpo+JeDue+AzlqHbjI50Pp8r90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Validity Not Before: Jun 1 06:19:37 2026 GMT Not After : Jun 8 06:19:37 2026 GMT Subject: CN=6a1d247a-483e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b0:71:2b:5c:8c:75:7c:09:5d:d6:7c:60:c0: 49:05:d0:9b:6d:6e:4b:05:6f:c3:9d:3b:d9:f1:9d: b1:dd:ee:aa:36:af:5e:86:7b:f8:87:11:2e:73:5e: 88:d3:00:8f:44:2b:65:dc:6f:8a:55:55:9b:db:2d: f1:64:c2:d5:81:06:2a:e7:57:5a:af:c7:39:1b:20: c6:54:7a:f3:ff:5e:b8:81:8d:36:c7:e3:b4:58:d2: a5:2f:cb:55:8f:00:17:34:c7:18:bf:2a:95:e7:5e: 09:eb:60:10:a1:d5:76:2a:aa:ab:9e:f2:36:75:b4: 57:a6:b9:a9:a5:f5:e9:81:b8:78:62:25:7a:44:12: 9d:08:61:5f:b5:cf:79:e2:f6:a6:97:df:87:a8:39: ed:b5:75:76:82:6d:7a:7b:6e:a0:68:04:51:34:61: 7e:9c:ab:4b:00:9b:30:be:00:55:d8:33:e7:f9:fb: 71:d1:5e:97:bc:40:67:a8:0e:8b:04:9f:e3:4b:d6: 9a:ad:fb:ef:e5:7e:12:84:91:ed:8c:33:75:20:34: b0:c7:66:d0:ba:37:1e:ff:ae:db:6f:f5:b0:8b:48: 6f:c2:40:35:5d:24:85:28:28:95:3b:0b:f6:ef:51: 95:c7:29:44:80:ac:5b:e5:82:d5:87:e3:78:24:18: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:3E:10:FB:FC:BA:4C:FC:D1:4A:07:37:6B:D3:9A:59:A7:3C:51 X509v3 Authority Key Identifier: keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:18:d9:bd:87:e3:1c:b4:87:62:92:41:15:29:b4:8c:72:99: 2f:9c:7c:c6:73:33:01:e6:f1:cb:f9:9f:ba:2c:2c:3c:65:8d: 28:c8:a5:d1:6a:d8:89:b2:85:af:2c:a2:e3:ac:d0:21:4d:12: d6:11:a3:a2:6e:38:41:07:ff:1f:0e:41:58:a1:21:98:bd:f4: e9:44:3d:99:30:c3:49:b1:cc:01:fd:85:84:dc:63:b3:f6:3d: 8e:32:c6:b4:03:7c:d1:1d:00:fa:87:71:58:72:03:00:2a:5d: 83:bd:a8:ed:2b:d9:41:3e:b8:c4:60:ab:b4:1b:ea:cc:ee:38: 4f:be:37:5a:b3:49:6d:38:ec:12:d1:bd:52:9a:9e:f7:9b:f3: de:34:91:38:58:53:21:0e:3d:0e:61:05:62:2c:96:c5:48:dd: e2:1f:8c:31:82:07:df:45:f4:99:f1:87:26:a2:23:7f:fa:e9: c1:0e:d6:c2:c5:e5:d7:3a:c5:df:09:92:a1:70:86:71:6f:4d: fb:20:17:43:e3:6d:be:65:81:cb:a4:f8:7f:12:2f:0f:dc:85: e1:fd:78:2c:2a:bf:66:fe:4d:00:7f:aa:e3:ee:5b:75:54:30: dd:1f:0f:d5:8d:27:19:b7:78:3e:29:82:ea:68:b7:13:47:4c: 58:f9:89:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKEVEODJBMkZEN0RFMTQ3NTI3Q0ZDQzQyNDdBMjU2QzFB MEVEQjRFRDMwHhcNMjYwNjAxMDYxOTM3WhcNMjYwNjA4MDYxOTM3WjAYMRYwFAYD VQQDEw02YTFkMjQ3YS00ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87BxK1yMdXwJXdZ8YMBJBdCbbW5LBW/DnTvZ8Z2x3e6qNq9ehnv4hxEuc16I 0wCPRCtl3G+KVVWb2y3xZMLVgQYq51dar8c5GyDGVHrz/164gY02x+O0WNKlL8tV jwAXNMcYvyqV514J62AQodV2KqqrnvI2dbRXprmppfXpgbh4YiV6RBKdCGFftc95 4vaml9+HqDnttXV2gm16e26gaARRNGF+nKtLAJswvgBV2DPn+ftx0V6XvEBnqA6L BJ/jS9aarfvv5X4ShJHtjDN1IDSwx2bQujce/67bb/Wwi0hvwkA1XSSFKCiVOwv2 71GVxylEgKxb5YLVh+N4JBg6rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1MPhD7 /LpM/NFKBzdr05pZpzxRMB8GA1UdIwQYMBaAFO2Cov194UdSfPzEJHolbBoO207T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yQjFDNDdGRThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIxSjhfTVFrZWlWc0dnN2JU dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZS2lfWDNoUjFKOF9NUWtlaVZzR2c3YlR0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mjc4Ny8yQjFDNDdGRThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIx SjhfTVFrZWlWc0dnN2JUdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARRjZvYfjHLSHYpJBFSm0jHKZL5x8xnMzAebxy/mfuiwsPGWNKMil0WrYibKF ryyi46zQIU0S1hGjom44QQf/Hw5BWKEhmL306UQ9mTDDSbHMAf2FhNxjs/Y9jjLG tAN80R0A+odxWHIDACpdg72o7SvZQT64xGCrtBvqzO44T743WrNJbTjsEtG9Upqe 95vz3jSROFhTIQ49DmEFYiyWxUjd4h+MMYIH30X0mfGHJqIjf/rpwQ7WwsXl1zrF 3wmSoXCGcW9N+yAXQ+NtvmWBy6T4fxIvD9yF4f14LCq/Zv5NAH+q4+5bdVQw3R8P 1Y0nGbd4PimC6mi3E0dMWPmJEw== -----END CERTIFICATE-----Generated at Tue Jun 2 22:17:23 2026 by rpki-client