$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: pfQMQyqUvWAys5ksnH6GooOXEXsiMJqwIfuGp0gxQeo= Subject key identifier: 28:4E:88:C5:39:46:FC:C0:92:0E:98:77:E5:08:EB:27:3F:8F:A2:42 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 08A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 0898 Signing time: Wed 20 May 2026 20:39:33 +0000 Manifest this update: Wed 20 May 2026 20:39:32 +0000 Manifest next update: Wed 27 May 2026 20:39:32 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: 9Ie/W6ZuNjKl1h7XlPJ9iQwqeHSE4upyJGiKW//9En8=) 2: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: /mxloS7ClCcaj5x0floJR4T78S/qjwGI70YG2UCZk8Q=) 3: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: dQd4m5byeKJORC74YKFJB4r+c7cujg4OEtxCIHvr0lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: May 20 20:39:32 2026 GMT Not After : May 27 20:39:32 2026 GMT Subject: CN=6a0e1c05-7a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:ce:96:42:84:c4:5a:47:2c:0b:67:db:e4: c2:c0:39:f8:64:83:ca:e8:59:2d:00:0e:49:e9:a8: 79:55:4d:99:70:cb:ec:59:c1:bd:20:a5:b9:1b:dc: a2:c0:f4:7b:0d:ab:ec:51:90:e3:93:2f:a0:c0:66: e9:e6:ce:ca:f4:be:cd:2e:af:5c:ae:7f:d6:5d:dd: a5:9b:12:47:bc:63:ae:72:70:6a:71:c1:15:91:29: 1f:74:0b:67:73:8d:b3:20:3e:83:ce:02:0f:23:d5: 4d:6f:04:70:12:d2:24:90:8e:a2:7f:d5:cf:f9:69: 62:27:62:20:94:c1:c8:46:d6:25:48:61:9a:ba:e8: af:ed:c7:8d:07:5c:3d:ad:49:5b:35:d8:2e:60:88: 05:a4:f3:1a:f0:ad:cf:9d:cf:2d:cb:2c:14:2b:bb: 29:ae:d7:0c:62:8c:f5:33:41:df:63:66:c4:a0:65: 90:86:84:a1:26:bc:12:2c:ef:82:10:16:79:5b:fb: 73:27:15:70:81:c3:3d:ef:25:1f:b7:b7:40:f7:41: 0d:d0:57:e4:71:93:06:74:1b:e0:06:17:ea:c2:bc: b0:71:1e:52:7b:a9:81:f9:80:a8:1a:4a:a2:e1:10: 51:e8:72:92:f5:0d:d8:08:87:36:9c:15:e3:81:a5: e6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:88:C5:39:46:FC:C0:92:0E:98:77:E5:08:EB:27:3F:8F:A2:42 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c6:22:a2:f4:99:21:54:2d:79:43:9a:de:8e:10:97:1a:7e: 14:fa:39:8b:f7:97:95:3e:72:06:84:4d:c1:24:18:b0:3c:53: 15:fd:dd:b0:73:f4:6c:7f:09:5e:db:fe:ad:a8:ea:58:66:1a: 73:39:79:5d:8f:66:13:f5:0b:b3:fb:e7:1c:e0:e6:5e:50:9a: a7:0a:68:be:b1:29:7e:32:08:2e:70:13:ca:18:7a:78:74:e8: 17:36:25:87:fc:6b:17:2f:7f:5f:d0:72:e6:0c:4e:c8:d5:e8: 74:ef:93:bb:c3:f8:40:ea:d3:68:07:8f:86:68:92:0d:4f:2a: dc:cf:5f:4a:69:5c:60:2a:81:15:2c:9f:cb:f0:58:27:3f:34: 97:32:f4:20:c7:65:dc:c4:ad:ac:ee:1e:b5:9d:ff:6f:3a:34: a8:0e:34:02:14:79:74:f6:e5:ef:0b:0b:9a:f6:09:dc:f0:1d: 9f:5b:37:e0:08:fa:2c:a1:bb:24:ef:42:e1:4e:7e:4f:18:32: 52:5e:d0:95:66:81:79:45:04:d0:17:fb:f4:78:b5:46:cd:c1: 20:ae:4d:df:04:03:02:b3:22:77:9a:f9:05:cc:3e:22:24:df: b7:23:8a:a6:ac:de:9b:16:b2:a0:4c:52:fd:40:24:5e:55:bb: 4c:b4:0a:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwNTIwMjAzOTMyWhcNMjYwNTI3MjAzOTMyWjAYMRYwFAYD VQQDEw02YTBlMWMwNS03YTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRvOlkKExFpHLAtn2+TCwDn4ZIPK6FktAA5J6ah5VU2ZcMvsWcG9IKW5G9yi wPR7DavsUZDjky+gwGbp5s7K9L7NLq9crn/WXd2lmxJHvGOucnBqccEVkSkfdAtn c42zID6DzgIPI9VNbwRwEtIkkI6if9XP+WliJ2IglMHIRtYlSGGauuiv7ceNB1w9 rUlbNdguYIgFpPMa8K3Pnc8tyywUK7sprtcMYoz1M0HfY2bEoGWQhoShJrwSLO+C EBZ5W/tzJxVwgcM97yUft7dA90EN0FfkcZMGdBvgBhfqwrywcR5Se6mB+YCoGkqi 4RBR6HKS9Q3YCIc2nBXjgaXmwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChOiMU5 RvzAkg6Yd+UI6yc/j6JCMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWMYiovSZIVQteUOa3o4Qlxp+FPo5i/eXlT5yBoRNwSQYsDxTFf3dsHP0bH8J Xtv+rajqWGYaczl5XY9mE/ULs/vnHODmXlCapwpovrEpfjIILnATyhh6eHToFzYl h/xrFy9/X9By5gxOyNXodO+Tu8P4QOrTaAePhmiSDU8q3M9fSmlcYCqBFSyfy/BY Jz80lzL0IMdl3MStrO4etZ3/bzo0qA40AhR5dPbl7wsLmvYJ3PAdn1s34Aj6LKG7 JO9C4U5+TxgyUl7QlWaBeUUE0Bf79Hi1Rs3BIK5N3wQDArMid5r5Bcw+IiTftyOK pqzemxayoExS/UAkXlW7TLQKqg== -----END CERTIFICATE-----Generated at Thu May 21 10:53:11 2026 by rpki-client