$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json) Hash identifier: zuoKtXxfnxQXe2uNK4DfJ0xqIraVHZZhfk3gQm0QbE8= Subject key identifier: 04:68:CC:02:02:1B:E7:2A:A7:4D:1A:16:79:D7:9D:BA:FF:2C:4C:99 Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft Manifest number: 5B Signing time: Thu 21 May 2026 08:17:12 +0000 Manifest this update: Thu 21 May 2026 08:17:12 +0000 Manifest next update: Thu 28 May 2026 08:17:12 +0000 Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: K40WNY8He2rfi6NNy+VQfR4em5b13Cu4UH0+B1PMjUk=) 2: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=) 3: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398 Validity Not Before: May 21 08:17:12 2026 GMT Not After : May 28 08:17:12 2026 GMT Subject: CN=6a0ebf88-4d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:9a:28:91:5c:d6:c7:cc:66:05:29:c4:90: 97:94:0c:2c:61:07:ab:1d:8d:aa:b1:4c:f4:98:3c: f0:01:ed:d1:1d:8c:c4:72:9f:3c:90:d1:fd:40:e0: 25:1a:97:d9:fc:32:12:04:b0:a3:47:d2:75:4b:3a: e3:fc:11:33:81:b5:31:5e:86:9e:57:cd:2c:36:8b: 5a:80:2d:6b:28:ae:c3:24:de:38:30:e0:7b:45:7c: 4d:d5:59:d0:51:74:8e:56:91:d0:d1:48:60:4e:04: 8c:08:64:46:41:69:fd:52:02:09:55:d3:24:98:66: a2:ae:95:fa:2d:48:ad:67:be:75:65:be:15:27:57: 86:85:d0:5b:f4:bf:f4:ee:63:4f:83:93:c7:b1:f0: 53:21:42:4e:c8:15:a6:43:d8:df:65:9b:08:a8:e2: 7e:20:4f:fa:5c:3c:f1:de:3e:e3:91:7f:e4:6b:c2: ef:b3:32:d3:6e:28:ea:0d:70:a9:d1:e4:ba:d1:3b: 07:7b:07:50:d8:59:73:31:16:9d:ff:c9:7c:dc:ba: 56:50:51:a4:2c:3f:db:61:6f:69:78:94:ef:5b:bb: 2b:ca:8f:49:17:4f:cb:d0:00:6e:61:ee:61:e1:78: d0:7e:fd:4e:e5:3e:8e:d1:11:96:2b:12:1f:02:20: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:CC:02:02:1B:E7:2A:A7:4D:1A:16:79:D7:9D:BA:FF:2C:4C:99 X509v3 Authority Key Identifier: keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:31:77:cf:3a:0e:da:59:90:93:d9:ff:ed:96:e6:3a:7e:11: 8d:3b:9d:28:83:1d:56:af:ac:6c:b9:6b:04:d7:c5:ec:6b:93: 90:06:e7:28:de:98:f8:9d:d9:03:5d:9e:2f:26:ac:eb:3f:fe: 22:b8:2e:09:de:28:82:d6:3d:6e:e2:e5:16:c5:f2:98:77:5e: a6:77:fe:27:44:11:5e:5c:75:07:46:88:3c:2d:ef:88:7b:4b: e5:55:70:4f:c4:f7:04:3d:b0:06:42:3c:c6:b1:80:57:79:a8: 21:3c:ba:99:d2:d9:b0:3f:d7:c5:61:09:0b:70:62:6e:8b:66: e4:87:61:c5:45:f4:e9:69:20:4a:95:c1:d8:e4:6c:84:c7:3f: 48:b6:d0:2f:31:76:48:9f:d3:f3:dd:38:89:5d:93:55:7e:b7: 44:14:05:a5:0f:68:9e:cf:e2:81:ff:e4:7b:41:e4:25:06:61: 70:63:95:4e:13:05:c4:00:f4:6e:03:84:3a:e1:39:24:cd:01: 21:fc:dd:17:c8:6d:64:2f:d7:bc:91:e9:0f:98:86:71:7b:c9: 7a:cd:2c:d4:eb:70:38:fa:d1:a8:b0:8d:93:1f:9e:8b:36:e7: 5c:94:0c:23:c0:42:85:bb:eb:a8:6f:99:45:18:b9:66:57:e6: 12:0c:a0:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoNTk4RjU4M0RGQUU5RkM5NERBQTMwQzM3OEIyMTZCRUM5 NzBFMzM5ODAeFw0yNjA1MjEwODE3MTJaFw0yNjA1MjgwODE3MTJaMBgxFjAUBgNV BAMTDTZhMGViZjg4LTRkNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe0pookVzWx8xmBSnEkJeUDCxhB6sdjaqxTPSYPPAB7dEdjMRynzyQ0f1A4CUa l9n8MhIEsKNH0nVLOuP8ETOBtTFehp5XzSw2i1qALWsorsMk3jgw4HtFfE3VWdBR dI5WkdDRSGBOBIwIZEZBaf1SAglV0ySYZqKulfotSK1nvnVlvhUnV4aF0Fv0v/Tu Y0+Dk8ex8FMhQk7IFaZD2N9lmwio4n4gT/pcPPHePuORf+Rrwu+zMtNuKOoNcKnR 5LrROwd7B1DYWXMxFp3/yXzculZQUaQsP9thb2l4lO9buyvKj0kXT8vQAG5h7mHh eNB+/U7lPo7REZYrEh8CIHDRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBGjMAgIb 5yqnTRoWededuv8sTJkwHwYDVR0jBBgwFoAUWY9YPfrp/JTaoww3iyFr7JcOM5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGL0E5NUU5QTI4RDBF QTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pUYW93dzNpeUZyN0pjT001 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV1k5WVBmcnBfSlRhb3d3M2l5RnI3SmNPTTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGL0E5NUU5QTI4RDBFQTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pU YW93dzNpeUZyN0pjT001Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAHMXfPOg7aWZCT2f/tluY6fhGNO50ogx1Wr6xsuWsE18Xsa5OQBuco3pj4ndkD XZ4vJqzrP/4iuC4J3iiC1j1u4uUWxfKYd16md/4nRBFeXHUHRog8Le+Ie0vlVXBP xPcEPbAGQjzGsYBXeaghPLqZ0tmwP9fFYQkLcGJui2bkh2HFRfTpaSBKlcHY5GyE xz9IttAvMXZIn9Pz3TiJXZNVfrdEFAWlD2iez+KB/+R7QeQlBmFwY5VOEwXEAPRu A4Q64TkkzQEh/N0XyG1kL9e8kekPmIZxe8l6zSzU63A4+tGosI2TH56LNudclAwj wEKFu+uob5lFGLlmV+YSDKAG -----END CERTIFICATE-----Generated at Fri May 22 15:18:13 2026 by rpki-client