$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json) Hash identifier: Vv4lEiq1o4nljy5cDhAi+vjGmIDDPUsVqhqiRDoM41c= Subject key identifier: 50:87:AD:BF:5F:A3:D2:7D:79:4E:97:20:15:6A:64:8B:91:41:47:F2 Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft Manifest number: 21 Signing time: Thu 04 Jun 2026 16:07:56 +0000 Manifest this update: Thu 04 Jun 2026 16:07:55 +0000 Manifest next update: Thu 11 Jun 2026 16:07:55 +0000 Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: SVJL0216avshQ/5P+4yUQGkrkfzKh2JD2+lqemmxPqo=) 2: CB53532C4A9711F184FA30B7B0833773.roa (hash: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=) 3: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=) 4: E685F69A372D11F1A4767B088F833773.roa (hash: FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 16:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Jun 4 16:07:55 2026 GMT Not After : Jun 11 16:07:55 2026 GMT Subject: CN=6a21a2db-bf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:9f:4d:49:ce:b7:02:5f:ff:a6:ae:b1:10: 34:27:9f:ed:2c:95:1a:6a:22:b6:0c:ca:22:ae:7e: e7:a5:ea:cd:6e:f2:97:1e:c1:6f:12:3b:4b:ed:a6: c3:08:55:2a:b4:a6:5e:09:0a:0f:ca:d4:4f:99:06: 8c:e9:a0:92:e2:23:0d:76:38:f8:fc:ed:8e:8c:31: f2:66:7b:68:56:08:95:73:a9:16:b2:7e:d6:13:60: 76:cd:90:0d:30:27:de:82:a5:75:79:f0:47:36:2b: 5b:20:8d:3f:1c:0b:20:94:da:f9:6d:d3:4e:2b:52: 36:2d:a7:6c:f8:9d:10:48:c7:f8:e9:3e:97:63:33: a8:8b:3c:a2:39:5c:95:12:4e:e0:6d:e2:53:3a:f8: 87:68:6d:65:fd:16:f2:1d:0f:e0:b6:ab:84:9f:13: 07:a6:31:dc:fc:a0:5a:c3:6f:92:92:e1:d9:74:58: 3d:d6:c1:fd:05:80:03:41:fb:24:1c:d7:79:e8:00: 8d:3d:66:61:e4:09:97:ec:48:50:bd:28:57:53:e4: 71:67:06:df:e0:14:62:28:e5:6a:9d:43:98:78:0f: cb:99:c2:21:54:31:55:52:0a:44:4f:75:08:89:49: f5:a3:5d:03:c6:3a:ff:ab:7b:d8:40:0b:c4:7f:82: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:87:AD:BF:5F:A3:D2:7D:79:4E:97:20:15:6A:64:8B:91:41:47:F2 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bc:c0:37:b9:aa:75:a3:28:71:36:ae:76:50:42:1b:58:34: 61:01:46:b3:1e:77:c7:96:6c:61:7d:8b:46:b0:17:cc:e6:d0: 81:bc:5f:d3:71:f7:48:8a:1d:b6:4c:fe:2e:75:23:d2:14:c6: 25:d2:cf:df:64:93:5b:ec:4b:9b:bb:57:2f:84:a9:fe:07:30: fe:7a:1b:31:f2:bd:2c:10:c7:c9:4b:54:2f:c8:6e:c7:c8:34: 3d:8c:ba:62:3d:c9:06:6f:7b:5b:49:49:9e:1b:da:e6:6b:5e: 6a:0d:05:84:53:ed:f9:19:83:5b:95:30:21:02:65:39:e8:e3: bb:7e:70:d4:58:84:d1:a9:87:20:58:c1:38:a9:61:41:9f:f4: 4e:e6:21:4c:64:16:a1:46:64:d6:6f:09:32:91:26:b5:86:8a: 3d:ae:3a:98:8f:28:ae:22:be:b0:f7:cc:14:d2:f9:16:aa:52: b9:b9:00:92:c0:ec:b7:f0:23:d8:2e:6a:f7:b3:2a:d7:76:40: 9a:88:f3:65:df:db:c3:35:aa:bb:df:b8:5c:87:86:2c:a2:37: ce:00:e4:af:d9:8b:2e:22:79:83:f1:30:52:97:b1:78:ec:f6: d2:c0:db:93:e3:53:62:b7:f6:70:10:d8:37:e5:cf:73:0a:85: 99:07:55:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy RkJEOTYyRDAeFw0yNjA2MDQxNjA3NTVaFw0yNjA2MTExNjA3NTVaMBgxFjAUBgNV BAMTDTZhMjFhMmRiLWJmN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPPZ9NSc63Al//pq6xEDQnn+0slRpqIrYMyiKufuel6s1u8pcewW8SO0vtpsMI VSq0pl4JCg/K1E+ZBozpoJLiIw12OPj87Y6MMfJme2hWCJVzqRayftYTYHbNkA0w J96CpXV58Ec2K1sgjT8cCyCU2vlt004rUjYtp2z4nRBIx/jpPpdjM6iLPKI5XJUS TuBt4lM6+IdobWX9FvIdD+C2q4SfEwemMdz8oFrDb5KS4dl0WD3Wwf0FgANB+yQc 13noAI09ZmHkCZfsSFC9KFdT5HFnBt/gFGIo5WqdQ5h4D8uZwiFUMVVSCkRPdQiJ SfWjXQPGOv+re9hAC8R/gj2XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUIetv1+j 0n15TpcgFWpki5FBR/IwHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB ODRBLzc3QUM3QkQyMzRGNzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhY SjVyQ0oyVFRMWGktOWxpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArvMA3uap1oyhxNq52UEIbWDRhAUazHnfHlmxhfYtGsBfM5tCBvF/TcfdIih22 TP4udSPSFMYl0s/fZJNb7Eubu1cvhKn+BzD+ehsx8r0sEMfJS1QvyG7HyDQ9jLpi PckGb3tbSUmeG9rma15qDQWEU+35GYNblTAhAmU56OO7fnDUWITRqYcgWME4qWFB n/RO5iFMZBahRmTWbwkykSa1hoo9rjqYjyiuIr6w98wU0vkWqlK5uQCSwOy38CPY Lmr3syrXdkCaiPNl39vDNaq737hch4YsojfOAOSv2YsuInmD8TBSl7F47PbSwNuT 41Nit/ZwENg35c9zCoWZB1Wl -----END CERTIFICATE-----Generated at Sat Jun 6 10:57:14 2026 by rpki-client