$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: ua0+0EtY05E7CyumdNQslzPEfpcha2qXgpgNhxmysJ4= Subject key identifier: 18:DC:17:73:4D:B0:6B:29:31:33:6F:02:76:00:9D:62:D5:F8:15:22 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0A42 Signing time: Wed 20 May 2026 17:13:41 +0000 Manifest this update: Wed 20 May 2026 17:13:40 +0000 Manifest next update: Wed 27 May 2026 17:13:40 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: lDnGG9Ks1BX3O8yKA+UXblZwGJeyLcbcgYrosn9/pbk=) 2: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=) 3: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: May 20 17:13:40 2026 GMT Not After : May 27 17:13:40 2026 GMT Subject: CN=6a0debc5-773e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:4a:34:4d:58:b1:c4:37:29:c8:4a:0e:22: 3c:82:e2:e8:55:5e:50:25:86:46:75:02:73:5b:f1: a5:b1:c9:7d:af:44:58:45:b5:1a:f1:4c:da:2d:d7: a9:c4:96:78:97:99:8c:96:fb:e1:93:e9:87:58:59: 69:c5:35:84:39:95:88:a9:43:7d:cd:bd:2e:77:a5: ed:54:d1:95:06:a2:c4:67:d3:71:ba:cc:e8:c0:0f: 87:71:5d:34:d5:2f:c6:61:5b:df:0a:d0:2a:7e:ea: a5:6e:f9:a3:a5:df:2a:3e:88:33:f1:ac:a8:71:61: 98:0e:b6:4f:d2:5d:2c:51:aa:85:4c:8a:5d:ac:fe: 56:5f:5a:e7:77:75:cc:c0:66:10:5e:6a:f5:f0:f7: a7:15:64:3f:c7:95:68:f5:dc:0e:ec:c1:83:5b:3c: f6:7c:06:a0:ed:5f:84:1e:45:a3:81:06:d8:3a:c1: 47:11:d2:da:7b:21:4a:1e:cd:27:cd:c6:63:71:30: 82:78:ff:9e:73:30:62:cf:48:34:51:26:95:e7:9a: fe:a8:d7:b1:93:d1:cd:b5:26:95:8b:ec:2a:b5:d8: a3:ce:06:bc:d4:3f:0a:b0:c7:9b:d5:b9:d1:7b:fc: 88:4f:b7:c9:78:c0:3e:a1:36:5e:d1:e3:7f:ea:3d: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:17:73:4D:B0:6B:29:31:33:6F:02:76:00:9D:62:D5:F8:15:22 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:12:44:18:2f:98:db:b3:d6:66:73:e0:10:fb:98:a5:b8:21: 5b:63:8c:c5:20:96:2c:23:1c:a1:69:4f:b7:21:b9:63:5c:ad: 57:39:6b:fe:82:9e:a2:f3:0c:5c:0b:78:9c:d7:d3:6e:80:c1: f5:49:69:bf:bc:ff:ff:72:fb:5c:b9:da:c8:59:58:ea:8e:b8: c8:81:7e:1b:2c:76:30:f7:5f:b3:29:9a:ec:b2:5c:44:d7:67: 26:b5:8d:c9:08:04:32:d1:de:33:d2:38:d1:c5:3e:44:6b:bd: 90:3c:0d:1b:88:a2:ff:79:cd:80:35:a2:45:19:80:cf:14:b3: b7:71:44:62:8b:26:b5:2d:37:f8:9f:88:2d:af:c8:17:3a:27: 9c:ca:a5:a5:6d:40:a6:1c:60:d5:c5:42:d1:df:59:9a:12:bf: 81:d0:8d:76:47:97:48:d1:d6:8b:77:f2:c2:22:5c:98:15:c5: 29:fd:59:26:a2:31:97:ae:e5:56:6d:d9:42:dd:2a:ca:be:66: d9:d7:68:a5:51:46:b3:f3:fb:57:4c:7b:ae:80:ab:97:88:e6: 00:8e:aa:92:17:6b:52:d3:d9:53:08:c1:a0:cd:38:1e:b5:4b: 66:17:ed:76:43:c7:e4:54:3c:c7:bb:27:e3:27:cd:da:df:8a: cd:22:d5:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjYwNTIwMTcxMzQwWhcNMjYwNTI3MTcxMzQwWjAYMRYwFAYD VQQDEw02YTBkZWJjNS03NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqBKNE1YscQ3KchKDiI8guLoVV5QJYZGdQJzW/Glscl9r0RYRbUa8UzaLdep xJZ4l5mMlvvhk+mHWFlpxTWEOZWIqUN9zb0ud6XtVNGVBqLEZ9NxuszowA+HcV00 1S/GYVvfCtAqfuqlbvmjpd8qPogz8ayocWGYDrZP0l0sUaqFTIpdrP5WX1rnd3XM wGYQXmr18PenFWQ/x5Vo9dwO7MGDWzz2fAag7V+EHkWjgQbYOsFHEdLaeyFKHs0n zcZjcTCCeP+eczBiz0g0USaV55r+qNexk9HNtSaVi+wqtdijzga81D8KsMeb1bnR e/yIT7fJeMA+oTZe0eN/6j1q7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjcF3NN sGspMTNvAnYAnWLV+BUiMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvhJEGC+Y27PWZnPgEPuYpbghW2OMxSCWLCMcoWlPtyG5Y1ytVzlr/oKeovMM XAt4nNfTboDB9Ulpv7z//3L7XLnayFlY6o64yIF+Gyx2MPdfsyma7LJcRNdnJrWN yQgEMtHeM9I40cU+RGu9kDwNG4ii/3nNgDWiRRmAzxSzt3FEYosmtS03+J+ILa/I FzonnMqlpW1Aphxg1cVC0d9ZmhK/gdCNdkeXSNHWi3fywiJcmBXFKf1ZJqIxl67l Vm3ZQt0qyr5m2ddopVFGs/P7V0x7roCrl4jmAI6qkhdrUtPZUwjBoM04HrVLZhft dkPH5FQ8x7sn4yfN2t+KzSLVYw== -----END CERTIFICATE-----Generated at Thu May 21 10:29:12 2026 by rpki-client