$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: R1LbdU9ZPPTPQl42fMqwkaw0F2otL8Q6eoQ0VtAawvM= Subject key identifier: 3B:E3:3C:10:EA:F7:D0:18:BF:F2:DC:89:81:C1:72:76:04:81:D4:2F Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 0820 Signing time: Sat 20 Jun 2026 21:05:38 +0000 Manifest this update: Sat 20 Jun 2026 21:05:38 +0000 Manifest next update: Sat 27 Jun 2026 21:05:38 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: KXJQr71hGzTsjF5hdM+x7DmXT6+mxn3F06sLuuVb0rY=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: zGjBv3KjTdJ9K8ezQZ4lGTuieMHEGvxttP2L5olrWPo=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: Bjs5lfBqpZzgmWDJV0Xu1gn8UB3T2IWjUyjfP7AxZYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 21:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Jun 20 21:05:38 2026 GMT Not After : Jun 27 21:05:38 2026 GMT Subject: CN=6a3700a2-bc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:52:c1:05:6a:2f:6b:ec:35:9d:38:81:2d: 02:a3:3e:9a:ea:df:56:25:78:e4:6e:79:ed:4f:c8: 9b:d2:49:bc:e8:c0:b6:65:e5:e9:d2:1e:7f:14:34: ff:74:35:3b:68:d2:c9:7e:31:d9:6b:18:0e:bb:8d: 40:a6:f4:f4:39:d5:8a:bd:b7:a0:42:f9:20:68:b5: de:b7:ac:8f:29:9d:7e:b7:4b:20:7f:d9:73:48:a0: 99:09:b1:29:c8:a1:61:9b:c8:d1:3a:dd:99:96:3e: d9:19:49:5a:ee:37:df:2b:fa:68:8b:6e:0a:b7:3e: 7b:b9:b2:a8:56:b4:fc:a0:3c:ee:90:11:50:83:63: e9:db:ab:e5:bd:31:98:95:92:24:40:8c:24:b9:fa: 37:31:3c:da:fd:dc:04:88:83:57:bc:a9:68:74:1d: 0d:8b:c6:06:c2:ba:ca:cb:af:fe:67:f3:0d:24:0c: 5d:a5:57:38:6c:a4:35:a9:36:06:17:20:83:c8:97: 43:3c:60:72:8b:02:ea:dc:da:e5:7b:18:b7:19:25: 08:64:47:c3:91:94:f6:1d:34:45:16:8d:e2:34:f1: ca:bd:c1:b2:a8:73:98:73:27:6b:19:02:71:12:9f: 2d:88:63:a9:6b:35:ad:2a:a6:ee:66:44:08:49:eb: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:3C:10:EA:F7:D0:18:BF:F2:DC:89:81:C1:72:76:04:81:D4:2F X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:74:fb:6a:45:1c:05:0c:c9:28:01:73:86:5e:7c:91:6b:83: fa:f4:ca:8f:cd:2c:a4:d1:a7:fa:28:0c:dd:b5:f4:69:0c:de: 34:42:82:e2:35:00:3e:eb:a5:8c:63:4f:32:3a:7a:5a:ac:cc: 07:62:76:e3:61:a5:cd:19:74:3f:56:4c:3f:ee:be:7d:92:53: bb:3b:7b:2e:fe:4d:e2:19:51:e5:50:76:90:c9:23:82:ec:9f: 60:ce:ae:83:aa:2d:63:62:b9:6d:91:d7:3f:21:cb:e9:14:c0: 13:a6:c8:3d:86:eb:18:e6:09:2a:29:24:ee:38:86:67:ae:c8: d2:79:bd:2c:54:37:ce:bd:7c:f0:d7:e7:ca:4a:70:19:83:78: 31:f2:2b:1b:de:e0:3c:c4:0d:56:dd:dd:23:ef:fc:fd:fd:a7: 07:24:34:45:f7:d6:da:4b:70:09:a3:54:6b:c3:8b:33:21:15: 2c:fa:fc:16:53:9b:bc:c0:9e:62:0b:68:54:86:23:73:b0:74: c5:05:d2:39:d2:4b:8a:04:71:93:da:31:11:37:90:50:e9:eb: 4d:be:05:3e:2d:3a:be:d0:14:9e:80:60:87:97:c7:07:74:80: 94:a4:7d:db:0e:d3:68:4f:02:2b:b4:62:b6:50:b5:e0:b6:15: 32:b0:33:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjYwNjIwMjEwNTM4WhcNMjYwNjI3MjEwNTM4WjAYMRYwFAYD VQQDEw02YTM3MDBhMi1iYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUZSwQVqL2vsNZ04gS0Coz6a6t9WJXjkbnntT8ib0km86MC2ZeXp0h5/FDT/ dDU7aNLJfjHZaxgOu41ApvT0OdWKvbegQvkgaLXet6yPKZ1+t0sgf9lzSKCZCbEp yKFhm8jROt2Zlj7ZGUla7jffK/poi24Ktz57ubKoVrT8oDzukBFQg2Pp26vlvTGY lZIkQIwkufo3MTza/dwEiINXvKlodB0Ni8YGwrrKy6/+Z/MNJAxdpVc4bKQ1qTYG FyCDyJdDPGByiwLq3Nrlexi3GSUIZEfDkZT2HTRFFo3iNPHKvcGyqHOYcydrGQJx Ep8tiGOpazWtKqbuZkQISet/MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvjPBDq 99AYv/LciYHBcnYEgdQvMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnT7akUcBQzJKAFzhl58kWuD+vTKj80spNGn+igM3bX0aQzeNEKC4jUAPuul jGNPMjp6WqzMB2J242GlzRl0P1ZMP+6+fZJTuzt7Lv5N4hlR5VB2kMkjguyfYM6u g6otY2K5bZHXPyHL6RTAE6bIPYbrGOYJKikk7jiGZ67I0nm9LFQ3zr188Nfnykpw GYN4MfIrG97gPMQNVt3dI+/8/f2nByQ0RffW2ktwCaNUa8OLMyEVLPr8FlObvMCe YgtoVIYjc7B0xQXSOdJLigRxk9oxETeQUOnrTb4FPi06vtAUnoBgh5fHB3SAlKR9 2w7TaE8CK7RitlC14LYVMrAz3A== -----END CERTIFICATE-----Generated at Mon Jun 22 12:49:57 2026 by rpki-client