$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: vjMTwhXYZM/kk2j0L0AukGC4ndqJJ/s4scBroncbX+A= Subject key identifier: 34:CF:79:25:03:37:F5:7D:37:39:02:2B:9D:22:F8:C9:AE:31:5F:C1 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0404 Signing time: Thu 21 May 2026 00:32:39 +0000 Manifest this update: Thu 21 May 2026 00:32:39 +0000 Manifest next update: Thu 28 May 2026 00:32:39 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: NCHUst3JDVu+Tz4wqhWtvxAzcHiP2z6s3aVESdysS6A=) 2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: rpZGhIKFCgIxWTbQKzN+z1Oy8oMiVDudLIk2WruPJmM=) 3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: tXiBPn9WKqPR3A495dpcgE5SO+VgxVPY4ijGQaSknoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 21 00:32:39 2026 GMT Not After : May 28 00:32:39 2026 GMT Subject: CN=6a0e52a7-fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:25:4e:9a:1f:9d:a9:28:83:63:c2:1b:64: 56:d7:6c:9e:e3:15:4f:1f:b9:da:75:6d:c7:6f:e6: 63:1a:89:ff:3e:67:d1:f4:33:30:a1:fc:35:ed:c0: e2:ee:f6:97:ce:82:aa:ec:dd:75:0d:d7:5e:e1:41: 2b:b9:d2:fc:ba:d1:44:05:3c:7c:12:c5:4a:ce:cc: 29:3d:ff:f2:a2:1b:6d:88:2e:7f:7b:92:e7:b7:b5: 97:3f:79:c3:a6:f3:98:00:e9:f0:6e:2e:96:56:bb: ad:b4:b8:9f:98:f6:53:f8:76:e9:1e:9e:95:66:60: ad:82:2f:56:7a:50:f7:63:f3:bb:be:2c:d6:4e:70: 2f:26:cf:20:3d:71:ba:f7:de:72:c0:92:6f:7a:46: 38:30:78:d5:0d:0c:d9:50:cd:32:ec:5f:d6:f8:51: 1b:5d:10:8d:fc:29:3c:db:80:6b:2e:1e:39:e4:da: e0:da:e3:42:23:d3:9d:63:1c:5c:da:f8:9d:d7:cf: 64:31:d4:59:6d:be:45:10:bd:cc:39:bc:b2:ba:4d: 16:43:1e:ed:97:b8:56:c9:f2:6d:84:cb:b8:52:78: f7:ed:55:01:57:84:27:75:7a:40:16:0e:07:d5:1f: ca:d7:45:09:0d:18:b3:60:5b:c1:02:e7:13:14:d1: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:79:25:03:37:F5:7D:37:39:02:2B:9D:22:F8:C9:AE:31:5F:C1 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:94:d0:ec:52:6c:5a:b8:70:c6:14:53:0f:9d:e2:a8:d7:fc: 46:f3:56:2f:a3:ac:ff:f3:ec:39:4e:14:b1:b1:cb:86:9b:1d: 71:d9:91:6f:08:4e:0f:f8:64:a2:c7:85:5f:f2:c5:88:12:2e: ee:fa:6d:ec:6d:19:17:7e:fa:8e:fe:7f:39:81:07:40:b8:dc: 10:b9:87:09:6d:63:04:a1:80:e0:a8:a1:5d:c7:ea:fa:5a:fb: e8:f8:62:9f:e9:d9:29:c8:48:9b:30:9f:b5:eb:7a:76:2b:4d: 45:fb:4b:78:1e:bc:91:83:1b:96:74:c5:18:a6:7b:c9:4e:eb: f3:9e:7a:dc:af:ac:ff:87:49:c4:c2:51:92:e6:c8:28:ed:92: 87:32:1c:6f:fa:17:b6:fe:cc:1f:21:fa:7b:61:64:5c:3d:56: 40:cb:c1:3f:2e:b4:63:b7:c4:8b:82:6d:17:51:b1:8b:31:e8: 75:f9:f3:e2:1d:9a:ae:e7:81:d1:f7:8d:56:d4:17:85:81:0f: 15:ca:e0:42:70:aa:50:c8:e2:a8:7a:01:0f:0f:e3:1e:ea:a9: 5d:bb:9b:a5:71:66:96:34:f2:45:f0:f9:a8:5f:e8:e2:92:9d: 9f:c0:3a:11:df:35:7d:63:53:06:98:bd:e2:4c:72:4e:f6:c6: 91:c2:7e:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwNTIxMDAzMjM5WhcNMjYwNTI4MDAzMjM5WjAYMRYwFAYD VQQDEw02YTBlNTJhNy1mYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4wlTpofnakog2PCG2RW12ye4xVPH7nadW3Hb+ZjGon/PmfR9DMwofw17cDi 7vaXzoKq7N11Ddde4UErudL8utFEBTx8EsVKzswpPf/yohttiC5/e5Lnt7WXP3nD pvOYAOnwbi6WVruttLifmPZT+HbpHp6VZmCtgi9WelD3Y/O7vizWTnAvJs8gPXG6 995ywJJvekY4MHjVDQzZUM0y7F/W+FEbXRCN/Ck824BrLh455Nrg2uNCI9OdYxxc 2vid189kMdRZbb5FEL3MObyyuk0WQx7tl7hWyfJthMu4Unj37VUBV4QndXpAFg4H 1R/K10UJDRizYFvBAucTFNGYMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTPeSUD N/V9NzkCK50i+MmuMV/BMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtpTQ7FJsWrhwxhRTD53iqNf8RvNWL6Os//PsOU4UsbHLhpsdcdmRbwhOD/hk oseFX/LFiBIu7vpt7G0ZF376jv5/OYEHQLjcELmHCW1jBKGA4KihXcfq+lr76Phi n+nZKchImzCftet6ditNRftLeB68kYMblnTFGKZ7yU7r85563K+s/4dJxMJRkubI KO2ShzIcb/oXtv7MHyH6e2FkXD1WQMvBPy60Y7fEi4JtF1GxizHodfnz4h2arueB 0feNVtQXhYEPFcrgQnCqUMjiqHoBDw/jHuqpXbubpXFmljTyRfD5qF/o4pKdn8A6 Ed81fWNTBpi94kxyTvbGkcJ+fA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:44 2026 by rpki-client