$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: 1TJJSB0YLeI6ZByNh7cM6hsrkG0wHeDrGUWFarF+4SE= Subject key identifier: 1D:84:A7:F1:F5:12:FA:29:D9:DA:56:D3:4A:A2:D3:68:C6:D4:46:D9 Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 022B Signing time: Thu 21 May 2026 02:43:23 +0000 Manifest this update: Thu 21 May 2026 02:43:22 +0000 Manifest next update: Thu 28 May 2026 02:43:22 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: dYUzLtMrtbiH/NGWRWAp2MNf6yT3jYbKliSevnPBS6Q=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: 5fifaPRrFceGCt70sRJhbrpTj9UeWe6iM70GaUCgY1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: May 21 02:43:22 2026 GMT Not After : May 28 02:43:22 2026 GMT Subject: CN=6a0e714b-c3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:f2:a9:da:87:d5:f3:73:31:20:51:79:4d: d0:60:be:51:b9:ee:a9:6d:70:b6:30:89:f7:b2:48: 64:8e:32:48:8c:61:5b:a6:6a:5f:45:e8:eb:ae:17: 46:3e:a6:80:c1:c1:8a:14:12:dc:94:4c:0d:74:26: 06:e4:d8:45:ba:7d:95:65:13:03:28:1d:14:7c:4d: 93:f2:97:39:c0:e8:59:b4:c4:5e:a6:5b:94:b3:13: d7:f2:cb:2c:fd:9c:25:51:6c:c9:1d:ce:cb:cc:3f: 9c:74:24:15:52:cd:a1:40:98:94:1e:dd:5f:12:74: 22:b3:9a:e8:16:8b:73:56:97:cf:55:43:b4:3e:33: f4:f0:73:2d:0a:0c:7d:d2:38:99:76:89:18:3d:66: 1d:02:e7:ab:0b:98:19:61:1e:35:79:b2:18:07:e3: 66:26:97:59:2d:9a:d1:bf:7d:0f:89:53:13:74:0d: f0:37:60:c8:2e:8d:d9:14:ba:be:53:d7:bd:20:d5: c5:a0:cc:46:79:d2:a5:c1:d8:84:b5:19:be:ac:34: b8:d1:3c:86:15:99:56:b2:39:ce:dc:8b:57:8d:23: d5:11:64:58:7f:6b:8d:93:a5:fc:3a:03:d7:40:59: fe:b9:d9:67:35:44:d2:7f:5e:47:00:92:cd:26:da: 50:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:A7:F1:F5:12:FA:29:D9:DA:56:D3:4A:A2:D3:68:C6:D4:46:D9 X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:91:5a:27:dc:f1:84:65:38:09:3c:3c:54:4a:ef:c0:32:3d: b6:5a:94:ef:be:4a:1b:1a:2e:e7:06:68:fe:86:2b:3e:27:90: 70:cd:a7:c5:53:c4:0f:20:df:2f:b5:a0:d7:6e:65:e4:d2:7f: f9:63:26:16:11:9d:53:3c:12:b1:db:b8:1e:67:04:b3:fd:49: a7:f0:27:e4:32:5e:4f:6d:db:c4:8d:ea:76:51:dd:74:df:30: d9:b6:44:60:cb:50:19:47:c6:9b:b4:9b:a3:32:da:4f:93:a5: ef:a6:12:7b:de:e8:cd:29:41:c1:ee:ab:64:07:3f:37:28:b1: 71:02:0d:98:72:67:dd:24:57:38:d7:c6:57:6c:46:b7:ea:0a: 6c:e6:60:ea:59:28:54:02:5e:21:a5:a1:31:1f:d3:6f:b3:0a: 1c:db:69:82:b0:51:6e:31:76:c2:9e:0a:41:62:1c:aa:6c:af: b0:e9:b9:03:6d:36:78:e0:e7:06:6e:4e:ac:e3:78:fb:31:9a: 05:70:0f:e1:ee:d6:70:9b:7b:28:e0:02:b2:3e:9d:62:16:db: 7e:90:ce:04:01:3d:c5:cd:72:67:ce:53:2c:91:10:2d:3d:3a: 7c:c1:93:22:1d:8e:3d:3e:2b:00:24:a2:51:03:a0:38:44:9a: 63:05:1f:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjYwNTIxMDI0MzIyWhcNMjYwNTI4MDI0MzIyWjAYMRYwFAYD VQQDEw02YTBlNzE0Yi1jM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAknfyqdqH1fNzMSBReU3QYL5Rue6pbXC2MIn3skhkjjJIjGFbpmpfRejrrhdG PqaAwcGKFBLclEwNdCYG5NhFun2VZRMDKB0UfE2T8pc5wOhZtMRepluUsxPX8sss /ZwlUWzJHc7LzD+cdCQVUs2hQJiUHt1fEnQis5roFotzVpfPVUO0PjP08HMtCgx9 0jiZdokYPWYdAuerC5gZYR41ebIYB+NmJpdZLZrRv30PiVMTdA3wN2DILo3ZFLq+ U9e9INXFoMxGedKlwdiEtRm+rDS40TyGFZlWsjnO3ItXjSPVEWRYf2uNk6X8OgPX QFn+udlnNUTSf15HAJLNJtpQdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2Ep/H1 Evop2dpW00qi02jG1EbZMB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZFaJ9zxhGU4CTw8VErvwDI9tlqU775KGxou5wZo/oYrPieQcM2nxVPEDyDf L7Wg125l5NJ/+WMmFhGdUzwSsdu4HmcEs/1Jp/An5DJeT23bxI3qdlHddN8w2bZE YMtQGUfGm7SbozLaT5Ol76YSe97ozSlBwe6rZAc/NyixcQINmHJn3SRXONfGV2xG t+oKbOZg6lkoVAJeIaWhMR/Tb7MKHNtpgrBRbjF2wp4KQWIcqmyvsOm5A202eODn Bm5OrON4+zGaBXAP4e7WcJt7KOACsj6dYhbbfpDOBAE9xc1yZ85TLJEQLT06fMGT Ih2OPT4rACSiUQOgOESaYwUfdA== -----END CERTIFICATE-----Generated at Thu May 21 12:18:06 2026 by rpki-client