$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: yyQvlLnpoFhsHgkg+2/a/FeQnzYNxXdAivusSEvLAtA= Subject key identifier: 8E:DD:91:C2:47:EB:C1:08:9F:2D:54:5C:E0:3D:F9:F4:57:82:AD:FA Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0D65 Signing time: Fri 12 Jun 2026 17:59:28 +0000 Manifest this update: Fri 12 Jun 2026 17:59:28 +0000 Manifest next update: Fri 19 Jun 2026 17:59:28 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: ob1xdl+2YCfwVLi5X6inR+WlS2C71bLyrQG+5I4QzUw=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Jun 12 17:59:28 2026 GMT Not After : Jun 19 17:59:28 2026 GMT Subject: CN=6a2c4900-5986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:e1:02:0b:81:ea:cd:90:f6:8d:46:b3:08: e3:41:5b:66:3f:35:05:4a:2c:19:56:73:6f:da:97: bb:98:4f:e7:ca:7f:3b:cf:e2:33:79:2a:77:3d:ca: a5:fe:6c:55:40:70:7a:59:c8:4c:5d:79:4b:69:c8: d7:0d:2e:e6:58:9a:d1:fe:47:22:b4:5c:55:5d:9a: d7:7b:9f:ed:7c:65:3a:a1:87:59:a3:47:e6:24:5b: a2:6f:ea:57:1b:a5:b5:6d:92:c8:8a:76:fd:d6:57: fc:13:88:d6:72:b4:e7:b7:91:dd:59:b6:6a:a2:9a: 23:90:8e:c6:74:88:c8:55:04:d2:66:93:3e:1a:a1: d4:2f:33:43:1b:d1:66:29:d7:57:20:76:68:e9:7d: a4:b8:29:08:f3:3c:77:15:f6:2c:a7:29:e2:18:9b: 99:80:4e:dc:56:0b:96:cd:bd:82:ce:55:68:fe:f7: 9b:62:5e:79:d3:0a:e7:dd:6d:56:ce:6a:16:7c:6a: f1:9d:91:5e:2c:26:0f:2e:05:98:4d:bf:2e:ff:93: a2:a7:5f:02:ff:6b:a5:af:69:04:91:61:77:67:db: 40:f1:ee:64:69:d9:f3:59:3a:ea:4a:25:cc:66:5b: b0:57:08:be:71:26:48:86:ee:d4:84:92:8f:20:ce: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DD:91:C2:47:EB:C1:08:9F:2D:54:5C:E0:3D:F9:F4:57:82:AD:FA X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:43:48:ec:85:98:70:51:bf:6e:60:b9:0a:d6:55:82:56:08: 85:81:4c:ba:64:86:df:55:be:98:18:b5:f7:69:b0:3a:3f:ca: 66:f9:df:20:e5:a8:ac:a3:b7:0c:18:58:83:51:23:1c:1c:0a: 13:f9:4e:e5:96:aa:98:3e:a7:3c:2e:58:a0:86:29:10:93:40: e7:f2:c8:b3:7a:3a:32:e3:01:d2:de:67:52:f4:a5:7d:5d:9e: d0:ea:38:f3:db:d8:c9:75:06:20:35:07:12:fa:f5:6b:76:26: 39:96:c5:0c:d0:39:d4:53:96:2a:d0:09:ff:2c:a7:36:2f:fe: 74:cd:7d:51:7f:b5:b0:d2:41:e1:94:23:74:95:b2:b2:e6:17: 03:df:f9:15:2f:0d:5d:92:11:8a:9b:56:0d:9a:72:34:96:e4: 68:e7:fe:37:7a:11:c4:b1:1d:0e:bc:ae:f3:1f:06:0c:63:12: a1:ec:83:51:59:d1:85:86:2f:e8:32:f1:cd:0a:6a:23:4d:44: 14:94:6b:bd:41:0a:2b:54:16:f7:eb:ca:e3:26:85:ec:79:f0: ac:76:c9:63:b2:e1:5a:b3:88:96:fe:21:0f:89:84:e1:e8:bc: e4:e3:a7:0e:08:e4:76:e5:83:84:6c:c4:ea:73:38:88:e8:ed: ee:c0:bf:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjYwNjEyMTc1OTI4WhcNMjYwNjE5MTc1OTI4WjAYMRYwFAYD VQQDEw02YTJjNDkwMC01OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3nhAguB6s2Q9o1GswjjQVtmPzUFSiwZVnNv2pe7mE/nyn87z+IzeSp3Pcql /mxVQHB6WchMXXlLacjXDS7mWJrR/kcitFxVXZrXe5/tfGU6oYdZo0fmJFuib+pX G6W1bZLIinb91lf8E4jWcrTnt5HdWbZqopojkI7GdIjIVQTSZpM+GqHULzNDG9Fm KddXIHZo6X2kuCkI8zx3FfYspyniGJuZgE7cVguWzb2CzlVo/vebYl550wrn3W1W zmoWfGrxnZFeLCYPLgWYTb8u/5Oip18C/2ulr2kEkWF3Z9tA8e5kadnzWTrqSiXM ZluwVwi+cSZIhu7UhJKPIM4JzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7dkcJH 68EIny1UXOA9+fRXgq36MB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0NI7IWYcFG/bmC5CtZVglYIhYFMumSG31W+mBi192mwOj/KZvnfIOWorKO3 DBhYg1EjHBwKE/lO5ZaqmD6nPC5YoIYpEJNA5/LIs3o6MuMB0t5nUvSlfV2e0Oo4 89vYyXUGIDUHEvr1a3YmOZbFDNA51FOWKtAJ/yynNi/+dM19UX+1sNJB4ZQjdJWy suYXA9/5FS8NXZIRiptWDZpyNJbkaOf+N3oRxLEdDryu8x8GDGMSoeyDUVnRhYYv 6DLxzQpqI01EFJRrvUEKK1QW9+vK4yaF7HnwrHbJY7LhWrOIlv4hD4mE4ei85OOn DgjkduWDhGzE6nM4iOjt7sC/6Q== -----END CERTIFICATE-----Generated at Sat Jun 13 09:31:14 2026 by rpki-client