$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: VduRByRZfjXge7HctBLfX9mruG9v3lxYuhNwnorxSXY= Subject key identifier: AB:7E:C1:BF:E0:00:F9:F8:D2:8E:EB:5D:18:A4:E8:73:6F:C7:58:D8 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1C1A Signing time: Wed 20 May 2026 16:13:12 +0000 Manifest this update: Wed 20 May 2026 16:13:12 +0000 Manifest next update: Wed 27 May 2026 16:13:12 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: uStCabx/3c+Ktzvxa6O8dRT7xOtIn51WX30tLy1HEQ4=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: L7DWBL32H6f/RwujbTDFVJWqhVPyJvTq/sa1OY01Oko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7220 (0x1c34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: May 20 16:13:12 2026 GMT Not After : May 27 16:13:12 2026 GMT Subject: CN=6a0ddd98-b483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:32:36:22:79:1d:00:ba:4d:d7:30:a5:9f: 23:cb:97:95:78:4e:af:a0:41:4d:71:03:13:fc:cd: 97:25:6b:6b:26:2c:83:19:19:b6:fd:9b:fa:6d:99: df:d8:26:17:45:1e:22:3c:db:68:8a:13:dc:5f:86: 83:c4:5c:7f:3f:de:dd:4e:56:55:09:90:0d:46:32: e6:a7:f7:1b:d4:6f:ec:3e:54:0e:10:f7:ce:7e:2a: b0:62:40:29:26:ee:27:ec:c8:1b:b3:b7:cb:a4:42: 90:ce:b0:1a:f2:f6:66:48:d1:5a:7f:55:3d:14:5e: b5:d3:0d:ae:2c:70:57:34:6b:17:ab:05:b2:ff:73: db:53:e5:23:03:aa:e8:98:4e:c9:a1:6b:1e:6b:d7: fe:83:08:08:31:1c:b2:bf:d0:41:bc:ae:5c:b4:c3: 73:11:e9:32:80:9e:08:9d:ab:32:f2:e9:c3:31:2a: 80:ba:7d:52:b9:a7:ad:17:19:6b:08:42:84:6d:d6: 7e:18:ff:72:0a:25:f1:84:ff:db:03:52:a3:96:db: 65:6f:86:68:a9:52:4a:b6:5b:9c:33:1f:75:05:16: 95:8c:0d:7a:79:1c:b9:84:0d:bd:1d:ec:e1:d8:08: 64:b8:a0:e8:15:25:1b:5e:e0:3c:cd:f4:e9:4c:27: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7E:C1:BF:E0:00:F9:F8:D2:8E:EB:5D:18:A4:E8:73:6F:C7:58:D8 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7f:09:c3:2a:3e:4e:15:b4:55:2c:2f:bb:29:dd:0e:c7:c4: 53:2d:8e:fb:df:2b:f5:08:f6:39:f6:1b:6c:eb:30:b9:71:68: ee:bc:cd:f9:de:2a:cd:54:15:fb:b4:7b:a1:c6:56:18:99:d4: b2:78:4c:29:14:5d:ac:50:42:a5:84:7e:99:bb:ed:47:33:96: 22:c2:5f:76:1a:f4:76:a0:58:1d:dd:9f:fa:ca:e3:49:e5:77: bf:33:18:32:04:0f:9a:cc:3b:aa:67:b0:03:a4:5d:4e:df:09: e9:1d:3a:97:ae:c8:f1:c6:6a:76:85:1a:b1:21:87:5b:0a:af: a0:bf:e9:a4:e7:92:07:53:a6:33:7f:e8:3c:51:06:1c:66:b9: 04:ca:e6:cf:5e:97:0a:ca:e7:86:85:23:6d:40:45:9b:37:5c: ab:7e:2f:3c:bc:ba:fa:ec:2c:69:a0:77:32:74:d9:ce:50:21: 88:e3:0a:7f:68:e4:c7:07:77:57:a3:f1:d1:21:6e:99:54:6f: b6:5e:34:c1:20:7c:c8:0e:c3:d1:12:f8:ff:a4:36:e2:b2:bc: ef:8a:89:4f:40:ac:d4:f4:de:bb:43:c9:ef:72:f4:36:3d:5a: db:f7:d2:37:03:3b:b8:d1:51:38:d1:6d:5d:fd:48:1e:1f:ae: d1:21:29:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjYwNTIwMTYxMzEyWhcNMjYwNTI3MTYxMzEyWjAYMRYwFAYD VQQDEw02YTBkZGQ5OC1iNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcEyNiJ5HQC6TdcwpZ8jy5eVeE6voEFNcQMT/M2XJWtrJiyDGRm2/Zv6bZnf 2CYXRR4iPNtoihPcX4aDxFx/P97dTlZVCZANRjLmp/cb1G/sPlQOEPfOfiqwYkAp Ju4n7Mgbs7fLpEKQzrAa8vZmSNFaf1U9FF610w2uLHBXNGsXqwWy/3PbU+UjA6ro mE7JoWsea9f+gwgIMRyyv9BBvK5ctMNzEekygJ4Inasy8unDMSqAun1SuaetFxlr CEKEbdZ+GP9yCiXxhP/bA1Kjlttlb4ZoqVJKtlucMx91BRaVjA16eRy5hA29Hezh 2AhkuKDoFSUbXuA8zfTpTCeF8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKt+wb/g APn40o7rXRik6HNvx1jYMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPH8Jwyo+ThW0VSwvuyndDsfEUy2O+98r9Qj2OfYbbOswuXFo7rzN+d4qzVQV +7R7ocZWGJnUsnhMKRRdrFBCpYR+mbvtRzOWIsJfdhr0dqBYHd2f+srjSeV3vzMY MgQPmsw7qmewA6RdTt8J6R06l67I8cZqdoUasSGHWwqvoL/ppOeSB1OmM3/oPFEG HGa5BMrmz16XCsrnhoUjbUBFmzdcq34vPLy6+uwsaaB3MnTZzlAhiOMKf2jkxwd3 V6Px0SFumVRvtl40wSB8yA7D0RL4/6Q24rK874qJT0Cs1PTeu0PJ73L0Nj1a2/fS NwM7uNFRONFtXf1IHh+u0SEpww== -----END CERTIFICATE-----Generated at Thu May 21 10:29:06 2026 by rpki-client