$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: XYvAsBAH7xEmpJqWJ2Ynayfjccm0SfH1ThJAOmTcwLE= Subject key identifier: 59:61:24:22:C7:5E:1A:00:49:95:E6:6D:40:2C:1E:4B:8F:86:BF:86 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 18B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 18A7 Signing time: Sat 28 Feb 2026 16:32:09 +0000 Manifest this update: Sat 28 Feb 2026 16:32:09 +0000 Manifest next update: Sat 07 Mar 2026 16:32:09 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: ifA5tHqRVhhiE3sWjkr9FXT4dvRveVkLSzXZNgKUrzk=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: XNKpRb8/02tHDrrS9S3tLwWbmiJabIsnKyEKhJUYUM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6325 (0x18b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Feb 28 16:32:09 2026 GMT Not After : Mar 7 16:32:09 2026 GMT Subject: CN=69a31889-5f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:d1:82:3f:ea:49:e9:3d:dd:d0:91:08:f6: 6a:f1:22:a2:e0:4f:f0:9b:89:94:c2:a6:79:bc:b5: 0a:28:90:28:1e:5a:4e:e9:9b:a8:df:d7:ce:e7:74: e4:59:c4:ac:92:aa:a5:cb:ad:9a:66:33:db:4c:79: ef:18:32:96:c4:b7:07:f2:06:9b:f7:bc:ae:d1:07: 42:76:67:63:1f:f0:88:e4:72:d7:e4:f6:9f:c6:4d: 50:86:cc:25:d2:de:27:97:62:b8:82:c0:3e:ed:a3: 3f:77:93:47:ea:7f:6a:ca:f4:37:76:5f:03:84:e7: bc:41:19:11:64:bf:ed:63:af:52:cc:d6:99:df:00: 70:6d:19:02:02:ea:12:60:9b:a5:3c:2a:d4:6e:fe: 68:1c:97:75:98:9b:f3:5e:92:11:5b:d2:33:68:cc: f7:7a:8c:0f:8f:86:d7:de:80:e8:29:2f:9c:94:50: 2c:9d:9a:5d:ff:d0:5c:24:a2:64:b0:08:19:0d:a8: 11:05:7d:be:61:03:e7:2f:d5:9c:7c:72:99:5b:ec: c1:5f:01:c1:45:da:3c:cf:80:67:19:81:e0:a3:1f: 40:03:ab:be:18:77:e1:89:71:3a:1b:5c:1f:69:c2: 37:55:7c:ef:11:63:51:e0:02:47:73:84:df:14:e9: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:24:22:C7:5E:1A:00:49:95:E6:6D:40:2C:1E:4B:8F:86:BF:86 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9a:c6:32:7f:ac:62:3e:be:b0:87:c3:3b:48:90:f9:27:1f: 1d:24:3b:6a:17:a4:24:c7:b7:87:5e:8c:80:74:fb:0c:a8:c1: 11:83:77:5a:3e:05:45:52:a7:96:3d:74:3e:aa:14:c4:d9:4e: 8f:18:b0:6f:0d:f3:50:46:e1:eb:83:97:06:53:e6:2e:4c:c2: 33:57:80:87:ce:e4:3d:0e:22:16:06:a4:f7:b8:da:ab:f7:df: d5:ac:68:96:80:78:73:88:28:00:44:ff:7e:1f:98:e5:56:44: 47:c5:b2:81:54:7e:b7:71:6a:e1:23:1f:b3:6e:f2:f4:f3:b2: c6:09:32:76:c6:d0:a1:29:32:b8:94:5c:2e:b7:cd:ab:b9:99: 94:f6:5d:2c:c2:fe:3c:4c:01:61:60:48:ed:f8:bd:2e:d0:f8: df:a2:b0:6d:59:08:27:d0:6a:17:04:1b:b1:e9:dc:a7:13:12: 16:16:29:41:42:e3:48:66:28:ad:86:16:f1:12:82:88:c9:60: c5:75:a9:c1:80:53:ad:75:7b:f9:24:6c:34:2b:31:77:39:fc: 4b:2d:cb:39:82:f0:07:06:fd:c3:d1:69:c0:d2:ce:da:27:6a: 69:1d:07:7d:a6:a0:aa:17:9d:b3:3d:7c:de:ff:2f:8c:e3:17: 9e:d0:41:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYwMjI4MTYzMjA5WhcNMjYwMzA3MTYzMjA5WjAYMRYwFAYD VQQDDA02OWEzMTg4OS01ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpTRgj/qSek93dCRCPZq8SKi4E/wm4mUwqZ5vLUKKJAoHlpO6Zuo39fO53Tk WcSskqqly62aZjPbTHnvGDKWxLcH8gab97yu0QdCdmdjH/CI5HLX5Pafxk1Qhswl 0t4nl2K4gsA+7aM/d5NH6n9qyvQ3dl8DhOe8QRkRZL/tY69SzNaZ3wBwbRkCAuoS YJulPCrUbv5oHJd1mJvzXpIRW9IzaMz3eowPj4bX3oDoKS+clFAsnZpd/9BcJKJk sAgZDagRBX2+YQPnL9WcfHKZW+zBXwHBRdo8z4BnGYHgox9AA6u+GHfhiXE6G1wf acI3VXzvEWNR4AJHc4TfFOnHBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlhJCLH XhoASZXmbUAsHkuPhr+GMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZrGMn+sYj6+sIfDO0iQ+ScfHSQ7ahekJMe3h16MgHT7DKjBEYN3Wj4FRVKn lj10PqoUxNlOjxiwbw3zUEbh64OXBlPmLkzCM1eAh87kPQ4iFgak97jaq/ff1axo loB4c4goAET/fh+Y5VZER8WygVR+t3Fq4SMfs27y9POyxgkydsbQoSkyuJRcLrfN q7mZlPZdLML+PEwBYWBI7fi9LtD436KwbVkIJ9BqFwQbsencpxMSFhYpQULjSGYo rYYW8RKCiMlgxXWpwYBTrXV7+SRsNCsxdzn8Sy3LOYLwBwb9w9FpwNLO2idqaR0H faagqhedsz183v8vjOMXntBBQA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:28 2026 by rpki-client