$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: dI9JAKrIHhvNt+Smh2OvPcFeuBUlJgwOPelhGNTiLZk= Subject key identifier: 53:19:0E:A5:C3:5B:F2:AA:53:CC:29:12:E1:1B:4E:F0:F1:D1:07:E2 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0DAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0D99 Signing time: Tue 22 Sep 2026 17:51:00 +0000 Manifest this update: Tue 22 Sep 2026 17:50:59 +0000 Manifest next update: Tue 29 Sep 2026 17:50:59 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: qD4526CRyahNKvXvZVB4eZQdT4SSOfWKJO1uGQ1E3B4=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3498 (0xdaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Sep 22 17:50:59 2026 GMT Not After : Sep 29 17:50:59 2026 GMT Subject: CN=6ab2c004-ace4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:0f:81:ff:81:5d:ca:ef:ca:e2:14:5d:2a: 29:d4:f7:aa:45:2e:91:e2:70:95:1b:c0:8a:66:64: dd:56:4e:31:bf:c9:2c:40:6a:14:e8:3d:bb:0d:22: f5:32:64:4e:37:6f:31:92:d1:34:af:95:50:5d:fe: 43:2b:ae:71:94:a8:b7:2d:fb:01:98:c7:32:8e:90: ae:aa:1a:c0:8b:60:d8:bb:41:ba:37:c7:f6:a1:37: 12:87:25:f4:50:5e:44:2f:49:55:74:6d:4c:a5:0a: bc:a8:45:49:7b:e3:34:78:78:ca:f0:ec:11:bf:3b: 7a:02:fa:bf:5e:b1:7b:df:80:a2:69:ea:db:0c:2e: 82:28:b7:f8:29:ff:77:38:45:c0:f4:3a:3a:9b:63: 26:20:bc:e5:18:81:c0:4a:14:72:eb:e0:a8:c2:4a: b3:0c:d1:0c:87:8d:d2:93:b3:86:51:db:7d:4d:f2: 9c:2c:79:27:7b:00:ef:b9:ec:40:7f:2c:0d:bf:64: f8:3b:44:dc:54:5e:5f:76:23:98:28:4b:bd:d3:df: de:01:3f:35:96:32:c9:2c:a2:71:7c:c8:5b:6b:ae: 6d:b7:d5:10:45:46:f1:62:5a:2e:96:ac:9f:da:e1: 88:88:46:6e:60:5d:f0:5a:c1:1e:1c:a8:3e:9e:15: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:19:0E:A5:C3:5B:F2:AA:53:CC:29:12:E1:1B:4E:F0:F1:D1:07:E2 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0c:be:19:f8:48:4c:92:0c:9b:18:fa:ce:c1:20:f4:80:2f: 0d:d0:d2:f5:06:bb:d7:ad:c9:d8:b7:9f:1f:6f:95:89:1c:f5: 90:c1:66:75:42:1f:27:13:71:1a:07:2b:00:fe:4e:59:25:11: 99:bd:b2:e8:c2:0b:db:e8:bf:81:61:c3:9e:f7:ff:5e:4e:d1: bd:bb:89:4d:c5:29:1f:c1:f7:aa:d8:68:fe:ef:7e:50:f8:fc: b6:9f:77:94:96:72:3d:69:ad:aa:3f:c2:10:a1:ee:3d:77:10: e4:be:25:df:57:fd:1f:8b:29:a6:7d:aa:7f:1b:fe:c4:a9:64: cb:8b:2c:7d:dc:ba:94:35:a8:df:1e:b2:b2:9e:68:be:fb:e1: fd:36:8e:34:6a:36:87:a8:43:ff:69:d1:0d:2d:db:e1:9d:0a: b7:61:97:c5:e6:ec:3f:15:10:3f:4e:fd:6b:e9:2e:1d:9b:e9: 1a:1f:36:e5:7f:8b:6a:19:47:bd:0f:bf:94:49:24:b1:b3:65: 5e:b2:cf:5a:07:00:8b:9c:65:46:57:f9:39:b2:a5:f9:ba:d0: 8f:41:99:2c:8d:2b:c9:69:d4:64:ce:24:1b:09:68:5f:a9:7b: f4:21:f5:53:71:f9:33:50:0a:35:7e:4d:6c:74:44:81:5c:e7: c7:98:f3:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjYwOTIyMTc1MDU5WhcNMjYwOTI5MTc1MDU5WjAYMRYwFAYD VQQDEw02YWIyYzAwNC1hY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfIPgf+BXcrvyuIUXSop1PeqRS6R4nCVG8CKZmTdVk4xv8ksQGoU6D27DSL1 MmRON28xktE0r5VQXf5DK65xlKi3LfsBmMcyjpCuqhrAi2DYu0G6N8f2oTcShyX0 UF5EL0lVdG1MpQq8qEVJe+M0eHjK8OwRvzt6Avq/XrF734CiaerbDC6CKLf4Kf93 OEXA9Do6m2MmILzlGIHAShRy6+CowkqzDNEMh43Sk7OGUdt9TfKcLHknewDvuexA fywNv2T4O0TcVF5fdiOYKEu909/eAT81ljLJLKJxfMhba65tt9UQRUbxYloulqyf 2uGIiEZuYF3wWsEeHKg+nhXPcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMZDqXD W/KqU8wpEuEbTvDx0QfiMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUwy+GfhITJIMmxj6zsEg9IAvDdDS9Qa7163J2LefH2+ViRz1kMFmdUIfJxNx GgcrAP5OWSURmb2y6MIL2+i/gWHDnvf/Xk7RvbuJTcUpH8H3qtho/u9+UPj8tp93 lJZyPWmtqj/CEKHuPXcQ5L4l31f9H4sppn2qfxv+xKlky4ssfdy6lDWo3x6ysp5o vvvh/TaONGo2h6hD/2nRDS3b4Z0Kt2GXxebsPxUQP079a+kuHZvpGh825X+LahlH vQ+/lEkksbNlXrLPWgcAi5xlRlf5ObKl+brQj0GZLI0ryWnUZM4kGwloX6l79CH1 U3H5M1AKNX5NbHREgVznx5jzFA== -----END CERTIFICATE-----Generated at Wed Sep 23 09:46:56 2026 by rpki-client