$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: SO2FTt11xj65/SU+CY6yHmpZe/tptu8riCmnQk7xtDo= Subject key identifier: 60:96:10:82:F1:63:8E:BC:DD:6C:DF:CE:F0:BC:FC:D8:F4:E7:51:33 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0E0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0DFD Signing time: Wed 20 May 2026 17:52:00 +0000 Manifest this update: Wed 20 May 2026 17:51:59 +0000 Manifest next update: Wed 27 May 2026 17:51:59 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: DB4Uxa8h3nOwRqo3jBLJ7npHWJhVvspCUHHXAfkV+9o=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: Hz+NLkk81DlhQAOuS1uMRNHs8Ue2ka70A9UL7rm5PxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: May 20 17:51:59 2026 GMT Not After : May 27 17:51:59 2026 GMT Subject: CN=6a0df4c0-8833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:52:29:e9:a2:e1:06:fa:e3:95:8c:41:f4: 7e:be:45:11:63:3d:ce:9f:6d:ef:55:b5:31:a2:a2: 5f:90:88:69:f1:89:7e:d0:73:9a:7f:56:de:24:4d: 12:52:0b:f6:0a:16:ed:8c:7f:2a:17:d6:16:fd:a9: 1b:41:a9:35:a7:4d:57:19:24:9a:3c:42:14:b5:2e: e7:27:4d:ac:79:aa:a1:26:ff:06:b1:ea:17:61:1f: 80:61:68:18:c8:bb:d6:86:c4:11:9d:8e:00:d1:c3: d7:80:88:3e:1e:3a:80:8b:e4:bd:e5:6c:c2:02:b3: 19:d5:cb:31:af:dd:57:02:22:2a:bb:4b:e9:ca:ad: e6:a5:b1:d8:c7:7b:e5:72:ae:98:ad:5e:d3:86:9d: f6:10:ce:e8:9b:a2:3f:d9:bd:99:b7:61:f3:a0:9e: 0d:41:62:9d:73:c5:e1:7e:e0:0a:78:ed:86:3a:7e: 4a:f8:01:54:71:d6:1d:d4:fe:63:98:cb:cf:6d:07: d7:9b:11:c9:c2:c5:75:5f:ae:10:41:37:ca:8d:f7: a2:34:83:8e:8f:e4:d2:31:11:55:62:19:78:f6:54: d9:1e:c3:4e:59:4c:8b:fc:86:d8:34:45:32:67:82: 8d:41:dc:2a:f6:c0:9c:7a:26:7d:9e:de:d8:ef:2e: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:96:10:82:F1:63:8E:BC:DD:6C:DF:CE:F0:BC:FC:D8:F4:E7:51:33 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:57:aa:7b:39:88:77:9f:b9:35:60:48:3a:1d:da:90:f9:b9: e1:b1:cd:c8:0f:a6:96:1a:2c:f0:d1:10:11:74:70:8f:e7:fc: 73:fa:6c:9f:96:d2:4a:99:a4:8f:80:10:07:7b:ff:db:fd:7f: 4a:90:a2:74:8e:57:79:8e:fd:17:3b:03:d3:14:6b:20:0d:b9: 48:e3:30:8e:aa:a7:0e:bb:02:b5:19:2a:67:7d:c0:ee:c6:49: 07:de:4a:34:a7:c2:34:ab:da:80:a3:85:3f:3a:64:32:cd:d5: 5e:b3:83:3d:b0:f0:d5:90:5a:03:55:4a:67:45:e4:6e:ad:87: 66:81:61:21:6b:39:8b:8f:65:5e:36:1b:32:bb:9f:a1:d6:36: 35:8e:00:ad:72:17:62:72:cf:80:dc:c0:41:09:ef:01:95:4a: 4e:d8:5f:53:85:e8:22:aa:88:68:70:90:fd:00:9d:3d:64:3d: 38:aa:f5:79:2f:07:a0:d5:02:50:00:05:67:0f:ab:3e:56:10: a5:93:14:cf:1a:31:b7:ed:ae:36:a8:c5:37:4f:8e:99:e2:70: 0c:ef:dc:3b:63:68:b7:35:f6:ce:15:04:30:89:83:13:25:cd: ee:ec:cf:65:b1:8d:be:8f:a4:26:18:a1:07:86:cb:3a:eb:7a: 8e:2b:9e:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjYwNTIwMTc1MTU5WhcNMjYwNTI3MTc1MTU5WjAYMRYwFAYD VQQDEw02YTBkZjRjMC04ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxFSKemi4Qb645WMQfR+vkURYz3On23vVbUxoqJfkIhp8Yl+0HOaf1beJE0S Ugv2ChbtjH8qF9YW/akbQak1p01XGSSaPEIUtS7nJ02seaqhJv8GseoXYR+AYWgY yLvWhsQRnY4A0cPXgIg+HjqAi+S95WzCArMZ1csxr91XAiIqu0vpyq3mpbHYx3vl cq6YrV7Thp32EM7om6I/2b2Zt2HzoJ4NQWKdc8XhfuAKeO2GOn5K+AFUcdYd1P5j mMvPbQfXmxHJwsV1X64QQTfKjfeiNIOOj+TSMRFVYhl49lTZHsNOWUyL/IbYNEUy Z4KNQdwq9sCceiZ9nt7Y7y4IpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCWEILx Y4683WzfzvC8/Nj051EzMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdleqezmId5+5NWBIOh3akPm54bHNyA+mlhos8NEQEXRwj+f8c/psn5bSSpmk j4AQB3v/2/1/SpCidI5XeY79FzsD0xRrIA25SOMwjqqnDrsCtRkqZ33A7sZJB95K NKfCNKvagKOFPzpkMs3VXrODPbDw1ZBaA1VKZ0Xkbq2HZoFhIWs5i49lXjYbMruf odY2NY4ArXIXYnLPgNzAQQnvAZVKTthfU4XoIqqIaHCQ/QCdPWQ9OKr1eS8HoNUC UAAFZw+rPlYQpZMUzxoxt+2uNqjFN0+OmeJwDO/cO2NotzX2zhUEMImDEyXN7uzP ZbGNvo+kJhihB4bLOut6jiueHA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:23 2026 by rpki-client