$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: kBM8yH8E/cEKM6JndbpbF2zoVx7eT71u3Q5EOsqmq04= Subject key identifier: 7F:75:39:97:CE:43:83:65:B0:8D:3F:64:6F:D5:51:B3:B9:74:51:99 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 0201 Signing time: Mon 01 Jun 2026 03:57:05 +0000 Manifest this update: Mon 01 Jun 2026 03:57:05 +0000 Manifest next update: Mon 08 Jun 2026 03:57:05 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: jx5SfjxoGpvK51RLNdexI4HVFsvBLJvY6BNnbxot5GM=) 2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Jun 1 03:57:05 2026 GMT Not After : Jun 8 03:57:05 2026 GMT Subject: CN=6a1d0311-27f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:f0:86:88:f4:5d:96:34:41:8b:f8:91:b8: 3e:e5:51:ba:2f:57:c1:e2:a1:f0:50:c8:01:b2:a2: 4f:34:d9:3e:27:56:03:d1:67:d5:c9:4f:84:4d:41: fd:00:94:0b:af:81:8c:14:e2:3e:f9:77:3d:65:14: d8:9b:bf:a9:1d:f4:33:fa:39:8e:c1:57:2c:46:a7: 4d:a1:9b:03:5f:65:f5:cb:75:a7:0c:00:cc:dc:86: 10:6a:a8:4f:76:7f:49:e0:04:7c:d6:cb:7d:ee:ff: be:4c:09:1c:fb:4f:c2:eb:f8:53:3a:6f:94:33:22: f0:99:d7:05:f6:d7:e2:3f:9e:4e:4b:2d:42:15:d7: 1e:a7:d8:c1:9d:88:74:93:ba:7a:07:72:4e:a9:64: 3e:ba:43:82:7b:70:39:83:4a:7e:2f:d9:84:33:3d: 45:c5:49:76:0f:66:12:4f:c0:2d:1f:39:e1:b8:46: bc:70:e3:33:8e:8b:52:65:3d:73:82:5b:6e:04:bf: cf:47:f0:fc:67:10:7f:d4:b8:19:01:e4:c1:f1:51: c2:69:d4:f2:6e:62:fd:c4:03:ee:cc:b5:61:da:b0: 65:f8:bf:14:f4:0c:76:4b:c5:b8:3a:82:68:ff:31: 73:ce:f3:79:f9:b0:f6:54:33:1b:5c:ff:2f:91:3f: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:39:97:CE:43:83:65:B0:8D:3F:64:6F:D5:51:B3:B9:74:51:99 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:ff:06:a3:1e:8a:2e:d6:c4:71:aa:e6:9c:41:15:f2:ae:a1: 9b:b3:19:62:3b:eb:7f:c0:c1:d5:ab:1c:68:ef:a0:57:1e:c4: 48:a6:32:73:af:75:9d:0c:98:86:fb:60:26:f3:c8:52:03:50: 93:58:20:44:19:5e:7a:d8:1f:aa:cf:62:b4:f4:ad:24:c5:28: bb:10:d2:ba:cf:10:96:ae:7f:f7:be:79:c3:02:05:74:f5:a4: d2:1b:e4:21:bc:8f:77:da:03:cb:38:f4:bb:34:b6:82:32:ed: 50:87:a2:b2:e5:fd:42:77:d4:5d:1e:9c:a6:ba:09:85:77:bf: b9:07:56:36:60:cb:6e:4c:a3:24:2f:60:07:fc:8e:85:19:e5: 24:0d:ab:5c:05:9c:1e:07:19:0c:7f:b3:5d:da:d5:0f:96:0f: 30:0c:e1:31:ba:ae:1e:e9:59:5f:37:2f:df:5d:9d:9a:fc:52: d8:ed:26:48:71:da:d6:9e:a8:f4:94:2e:7b:1e:a6:69:95:01: f0:ae:17:79:0d:c0:49:54:59:88:f1:70:74:ad:4b:f3:cc:03: b0:b3:4b:ad:74:30:d4:07:60:83:c5:e5:b6:34:dc:f6:f2:35: 75:b8:a2:a1:76:f2:b6:ec:dd:4f:5c:cd:ba:10:86:da:1e:4b: 55:ed:b5:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwNjAxMDM1NzA1WhcNMjYwNjA4MDM1NzA1WjAYMRYwFAYD VQQDEw02YTFkMDMxMS0yN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IDwhoj0XZY0QYv4kbg+5VG6L1fB4qHwUMgBsqJPNNk+J1YD0WfVyU+ETUH9 AJQLr4GMFOI++Xc9ZRTYm7+pHfQz+jmOwVcsRqdNoZsDX2X1y3WnDADM3IYQaqhP dn9J4AR81st97v++TAkc+0/C6/hTOm+UMyLwmdcF9tfiP55OSy1CFdcep9jBnYh0 k7p6B3JOqWQ+ukOCe3A5g0p+L9mEMz1FxUl2D2YST8AtHznhuEa8cOMzjotSZT1z gltuBL/PR/D8ZxB/1LgZAeTB8VHCadTybmL9xAPuzLVh2rBl+L8U9Ax2S8W4OoJo /zFzzvN5+bD2VDMbXP8vkT+HEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH91OZfO Q4NlsI0/ZG/VUbO5dFGZMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2f8Gox6KLtbEcarmnEEV8q6hm7MZYjvrf8DB1ascaO+gVx7ESKYyc691nQyY hvtgJvPIUgNQk1ggRBleetgfqs9itPStJMUouxDSus8Qlq5/9755wwIFdPWk0hvk IbyPd9oDyzj0uzS2gjLtUIeisuX9QnfUXR6cproJhXe/uQdWNmDLbkyjJC9gB/yO hRnlJA2rXAWcHgcZDH+zXdrVD5YPMAzhMbquHulZXzcv312dmvxS2O0mSHHa1p6o 9JQuex6maZUB8K4XeQ3ASVRZiPFwdK1L88wDsLNLrXQw1Adgg8XltjTc9vI1dbii oXbytuzdT1zNuhCG2h5LVe21yQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:39 2026 by rpki-client