$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: yCF8so5uVzkc2JFFLLerKZs7hkMkWBG/+P+N75wWmX8= Subject key identifier: 42:75:CD:FC:9D:6A:59:DE:7B:C2:46:AE:5B:F4:BF:C2:32:D4:3D:51 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 2190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 2182 Signing time: Wed 20 May 2026 15:54:50 +0000 Manifest this update: Wed 20 May 2026 15:54:50 +0000 Manifest next update: Wed 27 May 2026 15:54:50 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: eb9HM6LHnmmY2+PACQBl5bfbnM7XifLjO/7yEVFq0dY=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: HhQxUt8kfX+mJlXHn9AIcVCVvv1AbgL+l8SBK6m5XSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8592 (0x2190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: May 20 15:54:50 2026 GMT Not After : May 27 15:54:50 2026 GMT Subject: CN=6a0dd94a-b347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:d0:58:89:95:5f:00:88:f3:71:93:bc:22: bd:e8:5c:09:6e:58:be:51:2d:cc:7d:c5:c7:77:cf: 32:f9:c5:68:cf:b7:8f:a0:c9:44:ac:ac:7f:ac:e6: d7:db:c9:6a:ed:0c:72:c6:78:a5:30:d9:85:e9:58: 09:ff:1f:3a:89:a9:75:12:6c:91:6f:09:80:a1:1e: a7:c7:97:c1:a5:16:d3:75:2f:f0:3b:dc:06:59:d3: 31:05:cc:75:f9:ce:fb:5c:c7:96:69:af:c1:c7:88: 7f:18:23:28:9e:62:16:a8:9c:c1:91:c8:94:38:27: a6:c9:c2:c9:b1:7e:37:37:66:eb:f7:94:31:7f:bf: 36:dc:08:f5:29:7f:b7:18:4a:93:6c:0b:fb:1d:fc: d6:8a:d3:11:8d:1c:c7:a7:c9:79:3d:6b:0b:55:19: 9b:1c:46:a5:f5:b9:c5:de:1d:72:a7:d1:5a:16:2f: da:4c:93:db:70:2b:b4:6f:7e:94:91:7c:68:7a:65: 7f:af:90:3d:51:0c:1b:f6:7b:3e:ef:98:bb:5e:9f: b8:16:23:1a:ef:44:e4:c8:bb:f8:1a:ae:78:45:ca: 83:4c:13:67:2f:1f:bf:7b:1a:c2:5a:22:77:d8:ff: fd:c6:f1:6d:e5:38:09:e8:bb:bf:97:b9:e6:fc:d0: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:CD:FC:9D:6A:59:DE:7B:C2:46:AE:5B:F4:BF:C2:32:D4:3D:51 X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:01:e5:b4:39:3f:0b:f3:28:fc:b7:fc:c0:b6:ab:29:23:8a: ab:29:8a:bd:6d:89:1b:b0:3b:ed:63:0c:42:17:3d:c9:ea:ce: a1:e8:9e:c2:30:74:b3:0b:73:66:a1:58:9b:4a:91:a9:c4:d6: a9:e4:cf:46:37:26:fd:9f:1b:e4:6a:25:ef:8c:12:f9:88:19: 40:b3:0e:68:60:0b:4d:12:1f:4c:50:ec:26:ae:1a:c7:31:ce: 99:2d:f0:8e:9f:67:92:53:64:56:ea:d3:eb:5d:a7:10:88:10: 47:b8:15:49:6b:75:df:14:38:33:af:24:5a:33:20:61:ff:eb: b7:88:32:37:dc:c7:05:da:2a:c8:bd:02:d8:90:f1:a8:c6:c2: d1:4d:8c:c7:b9:71:c4:06:62:d7:00:d8:b8:3d:ef:7b:07:b9: b0:e8:c0:37:61:28:df:42:e8:8e:05:82:15:da:13:8b:c5:e4: c3:89:0f:42:8a:d2:2f:6d:40:2b:f4:40:44:b7:0f:92:1d:7c: f1:36:cd:ae:c4:d2:b3:08:b6:eb:29:8f:69:fb:70:95:c7:0e: e0:c8:1e:31:6e:24:2a:f8:19:81:67:23:6d:f5:40:f7:cf:f0: f2:ee:2d:07:ac:5e:e9:c7:be:9b:67:e4:25:51:23:a2:44:41: 2c:5e:30:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjYwNTIwMTU1NDUwWhcNMjYwNTI3MTU1NDUwWjAYMRYwFAYD VQQDEw02YTBkZDk0YS1iMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn7QWImVXwCI83GTvCK96FwJbli+US3MfcXHd88y+cVoz7ePoMlErKx/rObX 28lq7QxyxnilMNmF6VgJ/x86ial1EmyRbwmAoR6nx5fBpRbTdS/wO9wGWdMxBcx1 +c77XMeWaa/Bx4h/GCMonmIWqJzBkciUOCemycLJsX43N2br95Qxf7823Aj1KX+3 GEqTbAv7HfzWitMRjRzHp8l5PWsLVRmbHEal9bnF3h1yp9FaFi/aTJPbcCu0b36U kXxoemV/r5A9UQwb9ns+75i7Xp+4FiMa70TkyLv4Gq54RcqDTBNnLx+/exrCWiJ3 2P/9xvFt5TgJ6Lu/l7nm/NCg/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ1zfyd alnee8JGrlv0v8Iy1D1RMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtwHltDk/C/Mo/Lf8wLarKSOKqymKvW2JG7A77WMMQhc9yerOoeiewjB0swtz ZqFYm0qRqcTWqeTPRjcm/Z8b5Gol74wS+YgZQLMOaGALTRIfTFDsJq4axzHOmS3w jp9nklNkVurT612nEIgQR7gVSWt13xQ4M68kWjMgYf/rt4gyN9zHBdoqyL0C2JDx qMbC0U2Mx7lxxAZi1wDYuD3vewe5sOjAN2Eo30LojgWCFdoTi8Xkw4kPQorSL21A K/RARLcPkh188TbNrsTSswi26ymPaftwlccO4MgeMW4kKvgZgWcjbfVA98/w8u4t B6xe6ce+m2fkJVEjokRBLF4wGA== -----END CERTIFICATE-----Generated at Thu May 21 10:53:43 2026 by rpki-client