$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json) Hash identifier: IbcqkRuStIvYyhyyG8f6eSU2O8Fqo5hHn+8I6kk+nMA= Subject key identifier: B3:F2:E2:50:24:79:D9:FC:F1:87:FC:FA:DF:12:71:9C:CC:B5:5E:78 Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 3565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft Manifest number: 3553 Signing time: Sat 16 May 2026 14:44:02 +0000 Manifest this update: Sat 16 May 2026 14:44:02 +0000 Manifest next update: Sat 23 May 2026 14:44:02 +0000 Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: vFcskrZoj8sO0W5bYbjVTL8jkUglWRg07nUqnzQciK0=) 2: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (hash: CHdRjKAYDzl4mARbLMEIedXV1bESXGd76YlTxW4AhVo=) 3: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: yOZ7NWihMQh2xMOicbiIAZG+/dVYwm+tNO5GsESSJA4=) 4: 929D25381D1711F1981A78170E3D8C67.roa (hash: i9GKuEAC1w7Uzsve2QE3rzgfDee7AvdLIQUdi85I8+s=) 5: 4821776AD9A211F092913C6268D3641D.roa (hash: Sy1HvppFOycihdTszz/358rIRt69yzzeT9izOzy0CC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13669 (0x3565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: May 16 14:44:02 2026 GMT Not After : May 23 14:44:02 2026 GMT Subject: CN=6a0882b2-728c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:cf:09:5f:b9:41:7b:05:4e:e7:5c:a3:5c: 07:50:5b:be:be:52:87:f1:94:ae:d2:85:ab:69:e5: f9:ac:df:53:da:f9:22:52:cb:cc:3c:b2:26:90:0b: cc:d4:4b:ba:7b:8f:2f:06:d8:29:e9:c0:69:86:22: 53:68:9e:11:f7:1a:41:8e:15:00:eb:74:b0:04:91: 8b:c1:9b:79:2b:f1:d6:8c:ff:2a:16:3b:8c:72:98: 62:31:81:49:f7:7a:f4:34:1a:f5:72:9e:f9:99:ba: be:5a:0b:c1:8d:61:2c:21:d9:46:67:ed:d8:19:eb: a3:27:94:0d:bd:df:eb:cb:74:fc:8b:28:99:fb:7f: d6:4a:31:e5:d8:de:fd:14:5b:9e:1e:8c:db:7e:af: 3e:ab:27:a4:70:06:13:f0:42:04:47:92:a8:51:36: 6b:eb:af:88:e3:f9:75:8a:a8:ee:89:d4:26:f9:be: 9a:f9:5c:4f:03:2d:e5:e2:6a:65:df:61:54:cf:46: 47:e1:04:e5:d2:73:44:63:1f:22:f6:3d:1f:f4:8f: d8:d8:7f:43:3b:2b:d3:fc:1e:c3:1a:fa:4d:34:12: 89:54:a5:c6:59:97:1c:dc:e3:cf:c6:19:ab:8f:26: 49:1f:fd:6a:b0:77:64:bf:42:aa:d6:e3:3e:a0:84: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F2:E2:50:24:79:D9:FC:F1:87:FC:FA:DF:12:71:9C:CC:B5:5E:78 X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9d:18:58:4b:d6:ee:da:8c:0c:3e:93:0e:6b:4e:09:85:57: a3:3e:26:9d:6b:d7:76:a7:99:e4:65:29:aa:0d:6f:52:1b:7a: b2:e8:ce:a2:1b:31:09:9c:57:fa:b6:c5:2b:4e:10:5e:78:a9: 24:5c:e3:6c:35:29:0a:af:47:4a:f6:71:af:2d:c1:aa:e6:77: c9:1f:a2:7d:5c:53:07:70:9c:a5:7f:05:c8:57:3d:8e:29:45: 5f:f8:74:73:f2:75:f2:8b:2a:18:94:ff:f4:ea:07:25:f8:cc: ad:b6:a9:07:76:a6:d8:5d:0f:88:48:fd:1d:f9:ef:a3:e7:a3: b9:75:a0:73:66:53:0a:71:54:05:5d:de:20:43:d9:df:bb:cb: a7:f1:ec:3b:44:d1:43:f5:75:90:90:ae:71:80:a0:2d:8a:30: 2b:b1:24:04:7d:46:0c:0d:a1:45:d4:27:db:37:39:79:95:c9: d6:d9:14:4d:c3:ac:ee:43:bc:75:94:9b:26:a8:92:5f:c4:a9: e7:cf:04:91:9c:37:ae:3d:fe:5a:ba:4c:f1:26:d1:19:f8:9c: 09:c5:e0:c1:5b:f2:c3:eb:be:61:23:a2:d8:63:42:2d:72:ac: 61:e9:c6:fc:c4:64:81:50:62:73:83:fe:73:e3:3e:71:4c:19: 7d:f4:22:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjYwNTE2MTQ0NDAyWhcNMjYwNTIzMTQ0NDAyWjAYMRYwFAYD VQQDEw02YTA4ODJiMi03MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u7PCV+5QXsFTudco1wHUFu+vlKH8ZSu0oWraeX5rN9T2vkiUsvMPLImkAvM 1Eu6e48vBtgp6cBphiJTaJ4R9xpBjhUA63SwBJGLwZt5K/HWjP8qFjuMcphiMYFJ 93r0NBr1cp75mbq+WgvBjWEsIdlGZ+3YGeujJ5QNvd/ry3T8iyiZ+3/WSjHl2N79 FFueHozbfq8+qyekcAYT8EIER5KoUTZr66+I4/l1iqjuidQm+b6a+VxPAy3l4mpl 32FUz0ZH4QTl0nNEYx8i9j0f9I/Y2H9DOyvT/B7DGvpNNBKJVKXGWZcc3OPPxhmr jyZJH/1qsHdkv0Kq1uM+oISkXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPy4lAk edn88Yf8+t8ScZzMtV54MB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdFOC83QTBGRTdGQTFEOTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRC TEpmQzNPeDhrRzVoclRKYXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALp0YWEvW7tqMDD6TDmtOCYVXoz4mnWvXdqeZ5GUpqg1vUht6sujOohsxCZxX +rbFK04QXnipJFzjbDUpCq9HSvZxry3BquZ3yR+ifVxTB3CcpX8FyFc9jilFX/h0 c/J18osqGJT/9OoHJfjMrbapB3am2F0PiEj9Hfnvo+ejuXWgc2ZTCnFUBV3eIEPZ 37vLp/HsO0TRQ/V1kJCucYCgLYowK7EkBH1GDA2hRdQn2zc5eZXJ1tkUTcOs7kO8 dZSbJqiSX8Sp588EkZw3rj3+WrpM8SbRGficCcXgwVvyw+u+YSOi2GNCLXKsYenG /MRkgVBic4P+c+M+cUwZffQiTA== -----END CERTIFICATE-----Generated at Sun May 17 04:37:46 2026 by rpki-client