$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: /9HKhBaoT3HlkxcXREK3dl+mD268eW1gTr214J+Zjj8= Subject key identifier: AB:F6:99:EB:E3:A3:60:0B:48:9F:89:33:90:6B:2D:CC:A6:BB:01:75 Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 09E1 Signing time: Thu 21 May 2026 04:17:28 +0000 Manifest this update: Thu 21 May 2026 04:17:28 +0000 Manifest next update: Thu 28 May 2026 04:17:28 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: sjprW9cByPeIi2m/T5RAbaQE3kCP25wn60i9ueAtGKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: May 21 04:17:28 2026 GMT Not After : May 28 04:17:28 2026 GMT Subject: CN=6a0e8758-9cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:dc:9d:23:96:35:98:18:50:07:d0:f1:69: 6b:fd:98:09:5d:0f:77:cd:19:e8:42:e0:a1:e8:28: ad:dd:17:78:1b:5d:a3:05:d3:ed:16:b6:f3:fc:41: 2e:86:58:65:5c:67:51:d7:10:26:16:ba:d2:01:2c: fb:9d:91:86:a9:14:db:ff:04:d6:52:d2:9a:1c:6f: e7:4b:7f:f8:43:c4:47:9d:f1:91:18:85:7b:be:ec: 7b:1f:98:61:c7:13:1f:fe:c6:c7:0f:a8:00:9e:af: 82:e4:c0:a2:00:34:2d:be:e6:d8:7b:9f:79:32:8d: 7f:73:af:59:79:5f:c8:34:3a:a5:d3:17:21:f4:3d: d7:83:59:f0:42:fd:07:fb:3c:bf:98:b2:4e:83:19: 25:ca:78:4c:d1:00:5b:b2:70:28:e1:0c:e2:3e:30: ff:7d:f1:ca:71:df:fe:f4:6e:39:16:90:99:9f:41: f3:44:2e:92:eb:b1:23:96:0a:aa:85:7c:9f:76:2d: c7:13:e6:58:d4:58:02:48:82:27:f3:f9:35:52:5c: b4:a9:42:5a:f7:4e:bf:33:43:0b:8a:fe:90:fd:04: 7a:4c:37:27:54:29:75:a4:e8:d1:fe:3c:2e:5d:23: b3:79:a6:8d:40:24:39:b2:95:c9:e1:4b:9f:5d:dd: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F6:99:EB:E3:A3:60:0B:48:9F:89:33:90:6B:2D:CC:A6:BB:01:75 X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f7:80:58:d9:d5:25:3e:fb:6c:85:f2:57:3a:e1:ee:73:10: 48:a6:8d:0a:fb:1a:ba:61:fc:22:b1:d5:86:49:f5:4e:bf:bf: 4f:b7:5a:27:b7:a8:05:97:fb:bd:a4:80:76:77:29:f3:37:8a: 2c:96:64:31:d0:51:65:56:bd:33:67:5e:56:3b:13:5a:f8:b7: 12:47:19:bc:c0:56:19:ee:85:0b:a4:6f:11:10:b8:6f:bd:1b: 1d:be:aa:9f:d6:09:59:ff:35:56:3f:54:42:d6:ba:8b:00:af: 6f:15:bc:8d:d5:a9:2e:ab:78:57:96:59:b8:e1:2e:02:55:0d: c6:ed:dc:29:eb:32:89:28:22:10:f9:56:26:e5:a1:d0:15:ca: 0a:d8:ab:96:81:ef:5b:f7:31:8f:06:33:d5:7c:04:78:0e:64: 86:ac:cc:99:78:13:72:88:19:90:34:ce:9c:49:e9:cf:cf:8f: 24:a5:6f:ce:9f:73:3f:bd:19:8c:c5:b6:15:a2:b6:b9:4b:5d: b6:58:a9:94:3c:fb:d8:c7:41:25:1e:91:08:cc:8f:97:5e:c7: 2d:88:0a:89:aa:ed:74:53:1f:2e:b0:77:ef:4b:cf:09:98:fb: c1:d1:d2:c6:a9:69:4c:f0:6b:96:26:bc:96:ba:27:6c:28:5b: 1a:1a:3f:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjYwNTIxMDQxNzI4WhcNMjYwNTI4MDQxNzI4WjAYMRYwFAYD VQQDEw02YTBlODc1OC05Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk3cnSOWNZgYUAfQ8Wlr/ZgJXQ93zRnoQuCh6Cit3Rd4G12jBdPtFrbz/EEu hlhlXGdR1xAmFrrSASz7nZGGqRTb/wTWUtKaHG/nS3/4Q8RHnfGRGIV7vux7H5hh xxMf/sbHD6gAnq+C5MCiADQtvubYe595Mo1/c69ZeV/INDql0xch9D3Xg1nwQv0H +zy/mLJOgxklynhM0QBbsnAo4QziPjD/ffHKcd/+9G45FpCZn0HzRC6S67Ejlgqq hXyfdi3HE+ZY1FgCSIIn8/k1Uly0qUJa906/M0MLiv6Q/QR6TDcnVCl1pOjR/jwu XSOzeaaNQCQ5spXJ4UufXd0HIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv2mevj o2ALSJ+JM5BrLcymuwF1MB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPeAWNnVJT77bIXyVzrh7nMQSKaNCvsaumH8IrHVhkn1Tr+/T7daJ7eoBZf7 vaSAdncp8zeKLJZkMdBRZVa9M2deVjsTWvi3EkcZvMBWGe6FC6RvERC4b70bHb6q n9YJWf81Vj9UQta6iwCvbxW8jdWpLqt4V5ZZuOEuAlUNxu3cKesyiSgiEPlWJuWh 0BXKCtirloHvW/cxjwYz1XwEeA5khqzMmXgTcogZkDTOnEnpz8+PJKVvzp9zP70Z jMW2FaK2uUtdtliplDz72MdBJR6RCMyPl17HLYgKiartdFMfLrB370vPCZj7wdHS xqlpTPBrlia8lronbChbGho/ag== -----END CERTIFICATE-----Generated at Thu May 21 11:04:23 2026 by rpki-client