$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: i2Fl+voeOr+49nAf7RrtmmC6+otGCIbnRvCZLBASapQ= Subject key identifier: DF:2D:AB:CB:35:E1:8F:01:2D:A4:5A:38:2A:59:D0:70:B3:41:8C:7A Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 1242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 1236 Signing time: Wed 20 May 2026 17:07:20 +0000 Manifest this update: Wed 20 May 2026 17:07:19 +0000 Manifest next update: Wed 27 May 2026 17:07:19 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: PjckG0cqy7Jqk28sbRFyVF1KpPPMYVyvSwPUPxyf7DE=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4674 (0x1242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: May 20 17:07:19 2026 GMT Not After : May 27 17:07:19 2026 GMT Subject: CN=6a0dea47-67f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:ca:39:a9:d3:70:a4:04:83:a5:83:c0:d9: d5:68:eb:10:03:ad:ca:7c:d5:2a:11:44:71:ca:62: 0e:a9:11:b6:48:af:d0:96:be:69:ee:80:3d:eb:c7: bc:34:8e:f4:ad:00:37:3a:4d:fc:6c:6b:15:b8:ef: d4:77:66:ae:b4:b4:69:bc:66:1b:3c:43:6a:18:e5: 83:33:fd:5b:a5:d5:99:15:8a:85:77:4f:94:3e:11: 45:37:89:85:48:93:53:07:ca:d4:f0:41:04:54:99: f5:28:49:dc:1f:5a:31:9b:ce:83:49:d0:ad:aa:05: 20:f8:e4:78:aa:18:1a:83:8a:ee:e9:58:d8:bc:b2: 90:93:89:ad:fe:fe:b0:4a:75:be:d3:74:95:67:28: 2e:e0:a8:81:12:d9:12:38:fe:8b:63:c3:cc:e2:12: 12:f5:f0:66:60:c1:7b:32:86:ff:c7:c2:4b:b4:ef: a6:d8:d8:30:da:94:0e:e3:c0:ea:ba:07:1d:63:f0: 88:f5:1d:60:d9:87:ac:2e:1e:f2:b9:a4:0b:22:85: b7:e1:1f:c7:e5:b1:b0:3d:30:0f:af:42:ce:58:31: d2:dd:a8:27:8d:10:c1:80:04:25:5e:4b:25:d7:f0: 43:d4:42:c0:fb:45:d2:ab:f3:a5:00:51:5c:8b:95: 32:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:AB:CB:35:E1:8F:01:2D:A4:5A:38:2A:59:D0:70:B3:41:8C:7A X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a5:8d:81:62:aa:84:de:58:1a:c2:c1:29:c2:87:c4:1d:d2: 85:15:dc:8d:ea:5e:fc:9b:d5:13:77:c9:ae:48:df:5d:91:f0: be:ad:cc:2e:5f:cd:a4:36:f6:a7:74:09:1c:8f:2b:d9:fb:d0: 42:a9:51:37:ca:20:80:c8:c8:e9:1d:98:78:9c:91:2f:17:1a: a0:04:79:1e:36:a9:2f:11:49:ac:dc:49:f5:53:3c:fe:d3:56: de:39:7a:e9:d3:3f:a1:45:6d:ac:ea:cb:88:93:9b:88:c5:2c: d4:90:3b:4e:b8:28:72:d4:a4:06:0e:58:a5:72:0a:20:f2:81: 90:fd:60:a2:68:e9:21:23:ce:71:41:f6:67:71:d1:96:00:1a: ad:9e:fe:81:55:58:b6:f1:8b:28:9c:91:cc:bd:ca:f8:2c:1c: 76:5a:5e:b9:fc:3f:ec:ac:95:79:1a:41:0d:23:13:fa:c5:83: 9c:9a:c2:fc:8f:57:27:bc:cd:97:bb:80:ea:f3:bf:60:2d:ac: 51:06:fe:23:68:35:ef:8a:62:41:c7:a5:95:e5:14:b7:b6:3c: 06:b6:3b:1f:6d:e0:96:bb:2a:60:0c:e8:49:8c:12:7d:e6:a5: 45:12:d7:a6:5d:dd:ed:67:98:dc:e1:b3:d5:89:ba:1d:b2:7d: c5:a0:b6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjYwNTIwMTcwNzE5WhcNMjYwNTI3MTcwNzE5WjAYMRYwFAYD VQQDEw02YTBkZWE0Ny02N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjnHKOanTcKQEg6WDwNnVaOsQA63KfNUqEURxymIOqRG2SK/Qlr5p7oA968e8 NI70rQA3Ok38bGsVuO/Ud2autLRpvGYbPENqGOWDM/1bpdWZFYqFd0+UPhFFN4mF SJNTB8rU8EEEVJn1KEncH1oxm86DSdCtqgUg+OR4qhgag4ru6VjYvLKQk4mt/v6w SnW+03SVZygu4KiBEtkSOP6LY8PM4hIS9fBmYMF7Mob/x8JLtO+m2Ngw2pQO48Dq ugcdY/CI9R1g2YesLh7yuaQLIoW34R/H5bGwPTAPr0LOWDHS3agnjRDBgAQlXksl 1/BD1ELA+0XSq/OlAFFci5UypwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8tq8s1 4Y8BLaRaOCpZ0HCzQYx6MB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKaWNgWKqhN5YGsLBKcKHxB3ShRXcjepe/JvVE3fJrkjfXZHwvq3MLl/NpDb2 p3QJHI8r2fvQQqlRN8oggMjI6R2YeJyRLxcaoAR5HjapLxFJrNxJ9VM8/tNW3jl6 6dM/oUVtrOrLiJObiMUs1JA7TrgoctSkBg5YpXIKIPKBkP1gomjpISPOcUH2Z3HR lgAarZ7+gVVYtvGLKJyRzL3K+Cwcdlpeufw/7KyVeRpBDSMT+sWDnJrC/I9XJ7zN l7uA6vO/YC2sUQb+I2g174piQcelleUUt7Y8BrY7H23glrsqYAzoSYwSfealRRLX pl3d7WeY3OGz1Ym6HbJ9xaC2xQ== -----END CERTIFICATE-----Generated at Thu May 21 09:36:32 2026 by rpki-client