$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: zD4FBV7cI3BwtDqEKWjG/oapW1bMX2xT+CXVbPqobrY= Subject key identifier: 74:20:F2:3F:F9:07:6F:BE:2F:26:89:95:86:0E:BB:F6:16:9B:41:B2 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 01FD Signing time: Thu 11 Jun 2026 05:28:02 +0000 Manifest this update: Thu 11 Jun 2026 05:28:01 +0000 Manifest next update: Thu 18 Jun 2026 05:28:01 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: aGjOD5cCT8qXzmjLa0hUZ/vC3bEHbUJokFRfI9aTmyk=) 2: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 3: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 05:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Jun 11 05:28:01 2026 GMT Not After : Jun 18 05:28:01 2026 GMT Subject: CN=6a2a4761-d76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:75:04:ec:da:c0:73:1d:60:3c:05:b1:58: 63:bb:7f:95:19:4f:48:44:7c:9a:25:62:76:62:f6: af:80:1c:ee:f0:7b:3b:63:25:08:5b:44:7a:0f:c2: ff:03:68:8f:bf:28:8e:7d:42:f7:7c:d5:86:8f:cc: 1d:ed:3c:88:f7:4b:98:8f:34:9d:c9:f7:75:6a:b5: 01:a0:b2:65:b7:81:9d:ca:56:4d:33:cd:a3:ea:1a: 0a:aa:03:9c:66:66:d3:75:83:bd:93:2c:5d:53:01: f3:aa:43:15:ba:f8:98:ed:9e:47:68:0e:9d:99:df: bf:11:29:8a:90:6e:e8:18:5b:20:0c:7c:64:fd:6f: 59:53:74:a8:17:ef:16:8f:ab:c3:b5:6a:fb:76:7c: f7:83:d9:0d:c8:9d:c4:f0:85:dc:91:97:06:e1:4c: 34:f7:59:89:28:71:d7:60:b0:e8:16:f9:ea:b6:a2: fb:f5:94:26:84:e7:89:64:8a:39:4f:f8:f7:f2:91: b9:6f:82:69:5a:d6:dd:06:f4:41:19:c2:ad:7f:04: 7a:dd:78:d9:5a:e6:99:b7:8a:38:41:b1:87:88:69: 08:92:8e:85:5f:3c:81:bb:1c:6c:b0:c4:7b:7a:e5: 01:05:90:39:6b:53:09:49:21:a6:60:7b:2f:3d:4e: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:20:F2:3F:F9:07:6F:BE:2F:26:89:95:86:0E:BB:F6:16:9B:41:B2 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9a:d0:49:7a:3b:90:79:62:cb:97:f0:df:0a:98:24:a2:56: 25:e2:4b:96:81:5a:aa:a3:e9:60:cb:fb:f5:8d:c3:97:72:de: d7:d0:8a:01:d8:d6:07:7a:51:21:cd:04:a6:54:c8:17:c0:70: 50:d6:77:62:70:79:a3:d7:fa:9d:3c:48:81:18:f4:3f:f9:2d: 41:a8:60:62:1d:69:6b:4d:40:e1:56:12:2d:6c:03:7e:fa:6f: a5:7a:21:c9:84:ea:d0:f5:7f:49:24:79:e1:94:0f:1b:7e:38: ea:0a:75:f6:01:fd:66:d6:00:62:28:da:64:d2:37:af:01:bf: 71:34:aa:43:9f:48:69:b7:16:a1:65:55:99:fa:d7:37:4c:d0: 78:2d:94:03:d8:91:dd:73:07:d1:2f:47:e0:12:bb:c1:eb:0c: 11:aa:80:48:87:2a:ca:23:43:aa:c8:7a:e0:fa:b7:1b:2a:d7: ef:bc:47:5d:e0:f7:ad:31:22:8e:4a:06:f5:73:80:88:50:41: c2:bf:f9:6c:b2:1e:78:31:4f:b7:d2:32:38:ab:96:e0:62:24: ca:7e:39:10:d2:b1:73:c0:50:30:a6:08:16:f4:38:02:32:d7: 51:2b:f6:cd:05:15:ec:ed:a8:d6:31:5a:ed:c4:03:ec:31:a6: 99:66:66:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwNjExMDUyODAxWhcNMjYwNjE4MDUyODAxWjAYMRYwFAYD VQQDEw02YTJhNDc2MS1kNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZR1BOzawHMdYDwFsVhju3+VGU9IRHyaJWJ2YvavgBzu8Hs7YyUIW0R6D8L/ A2iPvyiOfUL3fNWGj8wd7TyI90uYjzSdyfd1arUBoLJlt4GdylZNM82j6hoKqgOc ZmbTdYO9kyxdUwHzqkMVuviY7Z5HaA6dmd+/ESmKkG7oGFsgDHxk/W9ZU3SoF+8W j6vDtWr7dnz3g9kNyJ3E8IXckZcG4Uw091mJKHHXYLDoFvnqtqL79ZQmhOeJZIo5 T/j38pG5b4JpWtbdBvRBGcKtfwR63XjZWuaZt4o4QbGHiGkIko6FXzyBuxxssMR7 euUBBZA5a1MJSSGmYHsvPU5FrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQg8j/5 B2++LyaJlYYOu/YWm0GyMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH5rQSXo7kHliy5fw3wqYJKJWJeJLloFaqqPpYMv79Y3Dl3Le19CKAdjWB3pR Ic0EplTIF8BwUNZ3YnB5o9f6nTxIgRj0P/ktQahgYh1pa01A4VYSLWwDfvpvpXoh yYTq0PV/SSR54ZQPG3446gp19gH9ZtYAYijaZNI3rwG/cTSqQ59IabcWoWVVmfrX N0zQeC2UA9iR3XMH0S9H4BK7wesMEaqASIcqyiNDqsh64Pq3GyrX77xHXeD3rTEi jkoG9XOAiFBBwr/5bLIeeDFPt9IyOKuW4GIkyn45ENKxc8BQMKYIFvQ4AjLXUSv2 zQUV7O2o1jFa7cQD7DGmmWZmpg== -----END CERTIFICATE-----Generated at Fri Jun 12 18:14:14 2026 by rpki-client