$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: 4Y6P4SDtTUjPsJgTZIaGt5kulsNne00dQ71DoVeXWQE= Subject key identifier: 1A:56:4B:72:57:BB:9B:0A:F5:5C:9C:19:98:C6:49:0E:A7:A2:CE:40 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 18D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 18C2 Signing time: Sat 18 Apr 2026 16:23:22 +0000 Manifest this update: Sat 18 Apr 2026 16:23:22 +0000 Manifest next update: Sat 25 Apr 2026 16:23:22 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: RUoLWBkGbTgzCNEr0W40Quoqwo2uOga7J+cSZEjnWkI=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 16:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6354 (0x18d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Apr 18 16:23:22 2026 GMT Not After : Apr 25 16:23:22 2026 GMT Subject: CN=69e3affa-8797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:45:e2:87:98:76:40:ef:1d:10:cb:ab:fc: 8d:da:82:17:f6:24:c1:e5:ff:79:03:59:2e:e2:12: a2:cb:24:6e:9a:43:d7:19:cd:ec:6e:e6:a8:ac:82: 43:70:5a:f9:4a:aa:1d:2b:06:62:e1:19:7a:ae:93: 57:63:70:58:9f:38:e0:c9:a6:be:88:67:54:a5:54: 33:21:1b:d3:7f:3a:ad:e8:17:b4:40:01:f3:64:fb: 60:d3:ca:77:f5:12:72:54:83:94:ac:45:aa:5b:b7: 1a:90:ad:ce:e7:21:a4:a7:94:09:02:02:76:16:f4: e3:b4:cc:7d:10:f0:66:b7:e9:e0:63:7c:0f:a5:37: f8:34:e9:cf:aa:d7:96:5a:ee:5a:aa:40:25:af:c5: 5a:b5:33:0e:4b:df:d1:12:5f:ff:bb:8f:e5:9e:65: 69:5f:b9:ce:a2:0d:31:3e:0e:8c:b5:7d:98:9b:6f: 8c:0b:3b:0b:37:b2:41:ab:35:92:cb:75:59:30:8a: 57:c5:b4:2d:48:ca:67:c4:d4:a0:8a:0b:bd:7e:57: a2:b1:18:b6:c0:f5:41:7a:f1:6a:f7:d7:db:c5:b0: 68:b5:8f:5e:9b:c4:77:9c:4f:f8:5c:b7:57:df:21: df:7d:e1:fc:f0:bf:0a:1f:bd:44:5c:da:38:53:55: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:56:4B:72:57:BB:9B:0A:F5:5C:9C:19:98:C6:49:0E:A7:A2:CE:40 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:47:a5:48:87:f3:d3:13:8d:4f:f5:3c:e0:20:56:9c:6c:47: ca:16:76:14:60:f7:93:e0:82:a6:4e:67:17:50:92:9d:bc:4e: 56:ae:53:f2:74:ba:0e:58:0d:61:02:50:3b:0a:15:ac:45:64: 9e:0d:09:08:29:83:55:53:83:f9:01:b6:2c:c6:05:c4:a8:2e: c3:4e:03:d3:64:d4:ac:bd:f3:21:f8:9b:9d:05:34:66:32:f7: ba:4b:d8:b5:a9:b0:e2:46:ee:ee:c7:67:19:00:54:05:38:fa: e3:6e:43:53:93:38:54:4b:52:ea:05:29:0f:7e:99:b5:a4:bd: 53:29:4c:e5:66:c5:f7:c0:e9:fe:36:0d:c5:1c:9b:c3:f9:ae: 04:cf:18:15:ff:57:2b:27:72:94:63:42:fd:23:32:8d:e4:1f: 41:bb:c9:c9:00:cf:1f:9c:1c:92:02:49:24:51:75:1a:27:5d: b4:bb:17:ed:17:e5:2c:7f:92:66:8d:24:f9:b8:9d:4a:fb:07: 01:1a:89:76:6f:5b:94:1d:80:bf:67:d3:8b:6c:7b:80:c7:03: fd:46:be:5f:ce:d2:87:0a:02:7b:e9:3f:e0:09:b6:85:2f:2e: c3:5f:0f:f1:2d:55:d6:18:fb:e3:04:ee:da:62:53:db:7e:ba: 5a:af:82:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYwNDE4MTYyMzIyWhcNMjYwNDI1MTYyMzIyWjAYMRYwFAYD VQQDEw02OWUzYWZmYS04Nzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz5F4oeYdkDvHRDLq/yN2oIX9iTB5f95A1ku4hKiyyRumkPXGc3sbuaorIJD cFr5SqodKwZi4Rl6rpNXY3BYnzjgyaa+iGdUpVQzIRvTfzqt6Be0QAHzZPtg08p3 9RJyVIOUrEWqW7cakK3O5yGkp5QJAgJ2FvTjtMx9EPBmt+ngY3wPpTf4NOnPqteW Wu5aqkAlr8VatTMOS9/REl//u4/lnmVpX7nOog0xPg6MtX2Ym2+MCzsLN7JBqzWS y3VZMIpXxbQtSMpnxNSgigu9fleisRi2wPVBevFq99fbxbBotY9em8R3nE/4XLdX 3yHffeH88L8KH71EXNo4U1UKfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpWS3JX u5sK9VycGZjGSQ6nos5AMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUelSIfz0xONT/U84CBWnGxHyhZ2FGD3k+CCpk5nF1CSnbxOVq5T8nS6DlgN YQJQOwoVrEVkng0JCCmDVVOD+QG2LMYFxKguw04D02TUrL3zIfibnQU0ZjL3ukvY tamw4kbu7sdnGQBUBTj6425DU5M4VEtS6gUpD36ZtaS9UylM5WbF98Dp/jYNxRyb w/muBM8YFf9XKydylGNC/SMyjeQfQbvJyQDPH5wckgJJJFF1GiddtLsX7RflLH+S Zo0k+bidSvsHARqJdm9blB2Av2fTi2x7gMcD/Ua+X87ShwoCe+k/4Am2hS8uw18P 8S1V1hj74wTu2mJT2366Wq+CuQ== -----END CERTIFICATE-----Generated at Sun Apr 19 11:18:12 2026 by rpki-client