$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: IYx1mejVA5dtx11dLSTtqX+ng7OtkttFOYlg2yTqWYw= Subject key identifier: 13:5D:FB:D3:56:E3:F6:C6:BC:C0:27:C5:51:59:EB:B2:80:A3:97:F1 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0EFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 20F5 Signing time: Wed 20 May 2026 17:08:07 +0000 Manifest this update: Wed 20 May 2026 17:08:06 +0000 Manifest next update: Wed 27 May 2026 17:08:06 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: yFQLzm4iZsGhQ1fbw2T3g+7Afuoz02SS3d+yQdWoFg8=) 2: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: 26/ZWw4oGoeZ9a+NcjUDBpBzIAmsMFcj5eQrlSJbZiE=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: eigTt3Trg0Mmz7fJV2kqmCJ3wyWoOHb+0O4sij8n0rA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3839 (0xeff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: May 20 17:08:06 2026 GMT Not After : May 27 17:08:06 2026 GMT Subject: CN=6a0dea76-e909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:c2:aa:c9:67:d8:84:f9:94:58:3e:10:e4: 0a:02:bc:58:a1:1a:ef:a8:38:c1:76:97:55:94:1b: 09:74:dc:e2:80:00:30:e2:53:24:b7:92:11:1f:7a: 3d:f0:94:18:55:61:d9:b5:b8:db:aa:a4:b7:47:d9: c5:b9:d6:a7:a0:16:4a:1e:69:04:eb:04:46:42:55: 91:2b:9a:3f:cf:ea:91:9d:eb:c6:3b:93:1e:1e:d3: 60:36:a1:9d:81:e0:71:b6:c1:fd:2e:6d:c5:24:2c: 7e:19:76:58:58:37:40:c3:ec:c2:3c:dc:06:db:d5: e3:7d:aa:6d:1f:38:64:0f:21:3f:c7:a2:59:3f:f5: 2a:57:04:d8:61:8b:f9:9b:e5:00:b9:c2:f7:3c:77: f3:1b:bc:dd:60:ca:30:7c:3e:41:97:6a:4e:dc:e6: c9:c0:55:12:80:9c:3d:4e:c3:ae:eb:ab:35:35:88: 30:37:df:a0:9c:e5:dd:9b:e4:53:69:64:b1:1b:de: 68:83:00:49:c5:f5:68:c5:8f:c5:07:ae:5b:bf:8a: 41:61:84:2c:92:ff:ad:79:7d:27:7a:01:8a:f0:f1: 4a:ea:32:f3:ab:97:f1:40:3d:a2:f3:06:08:d9:f5: 00:b5:80:23:44:80:78:dc:fb:51:fe:a7:d2:d3:00: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5D:FB:D3:56:E3:F6:C6:BC:C0:27:C5:51:59:EB:B2:80:A3:97:F1 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:00:a3:a3:29:01:16:2e:5a:db:5f:dd:94:15:ef:07:c4:95: 3b:1c:23:f2:64:e7:ae:3d:5f:28:5b:db:6d:ce:31:86:f2:b4: 59:97:6f:38:46:88:ae:24:0f:31:5f:b0:08:8b:5d:46:82:9e: da:0e:ec:19:8a:f9:83:ce:84:c9:46:53:39:57:33:e3:ff:b1: 09:b0:72:f9:a8:ff:a1:ee:17:1e:9b:ed:b6:fa:da:d7:04:04: 66:d9:cb:f2:3e:50:6a:81:be:29:27:21:9c:50:5b:0b:2e:68: 72:ee:06:34:d5:b2:6a:e7:55:d8:6b:a4:23:40:48:53:2a:d7: 40:e9:b5:3f:86:2d:46:21:9f:f1:35:34:7a:4b:43:ff:51:a6: f9:95:48:27:ed:24:99:14:4d:45:5f:6a:9e:f1:38:a2:df:34: a1:5e:87:4e:99:c2:77:06:14:59:5f:d5:71:37:bc:e4:9f:57: a2:a2:55:6a:36:52:63:9b:3d:6b:72:ed:eb:11:7f:84:19:c9: a9:e3:6a:69:75:3f:31:2e:5d:4b:08:07:61:3c:cb:ef:ee:e5: d6:8b:48:d0:66:40:d0:ba:0b:3a:05:d3:df:33:0c:61:6f:30: e8:11:70:7f:6c:97:48:41:ce:fc:b8:25:bc:88:e5:49:29:48: 28:99:ed:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjYwNTIwMTcwODA2WhcNMjYwNTI3MTcwODA2WjAYMRYwFAYD VQQDEw02YTBkZWE3Ni1lOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydfCqsln2IT5lFg+EOQKArxYoRrvqDjBdpdVlBsJdNzigAAw4lMkt5IRH3o9 8JQYVWHZtbjbqqS3R9nFudanoBZKHmkE6wRGQlWRK5o/z+qRnevGO5MeHtNgNqGd geBxtsH9Lm3FJCx+GXZYWDdAw+zCPNwG29XjfaptHzhkDyE/x6JZP/UqVwTYYYv5 m+UAucL3PHfzG7zdYMowfD5Bl2pO3ObJwFUSgJw9TsOu66s1NYgwN9+gnOXdm+RT aWSxG95ogwBJxfVoxY/FB65bv4pBYYQskv+teX0negGK8PFK6jLzq5fxQD2i8wYI 2fUAtYAjRIB43PtR/qfS0wAcGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNd+9NW 4/bGvMAnxVFZ67KAo5fxMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUgCjoykBFi5a21/dlBXvB8SVOxwj8mTnrj1fKFvbbc4xhvK0WZdvOEaIriQP MV+wCItdRoKe2g7sGYr5g86EyUZTOVcz4/+xCbBy+aj/oe4XHpvttvra1wQEZtnL 8j5QaoG+KSchnFBbCy5ocu4GNNWyaudV2GukI0BIUyrXQOm1P4YtRiGf8TU0ektD /1Gm+ZVIJ+0kmRRNRV9qnvE4ot80oV6HTpnCdwYUWV/VcTe85J9XoqJVajZSY5s9 a3Lt6xF/hBnJqeNqaXU/MS5dSwgHYTzL7+7l1otI0GZA0LoLOgXT3zMMYW8w6BFw f2yXSEHO/LglvIjlSSlIKJntxA== -----END CERTIFICATE-----Generated at Thu May 21 10:23:32 2026 by rpki-client