$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: Js8L53ZBWMta0numHy2uHcqZmkRxMZbVqrYBsoVTSCQ= Subject key identifier: EE:FE:17:19:18:38:74:0C:42:A2:08:D7:9E:C5:E1:40:6E:6F:4C:3A Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 02BA Signing time: Wed 23 Sep 2026 01:13:48 +0000 Manifest this update: Wed 23 Sep 2026 01:13:48 +0000 Manifest next update: Wed 30 Sep 2026 01:13:48 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: Y3TW0nXeL+aVz+Quia/yd+YuhaXuBB7CSdmRF2+POfs=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Sep 23 01:13:48 2026 GMT Not After : Sep 30 01:13:48 2026 GMT Subject: CN=6ab327cc-ac7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:6c:e9:e8:52:8d:3d:b4:fe:9c:47:95:d8: 22:e6:43:3f:af:c4:cc:d3:9d:dd:90:aa:f7:d3:37: 95:ee:2e:66:53:84:6f:e3:20:99:59:14:9f:d2:89: 94:b4:c3:23:58:ca:21:a9:64:f9:02:19:16:0b:45: b3:f6:f4:fb:e3:44:64:22:91:9b:4e:48:5b:7e:3a: 8b:6e:78:d2:03:0b:34:4d:7d:7a:f2:51:dd:dd:63: c5:28:7b:bc:f8:b7:47:47:fb:15:a9:14:86:60:de: ac:29:3b:32:7e:a6:da:f6:b2:ca:8f:85:29:62:96: c8:d0:32:ee:e7:14:ae:ea:9d:c9:bc:43:01:5b:e7: 2b:93:18:27:28:c8:f6:02:7c:5a:e8:45:67:c5:af: fc:36:8d:a6:74:68:69:b8:b6:56:e9:7d:ff:79:20: 91:c4:c8:5f:85:a5:a3:04:35:8c:a1:56:f3:22:4d: cd:e8:39:52:e0:64:5e:00:f4:45:58:0e:df:fc:e3: db:a5:5c:ea:9f:95:52:65:e0:c2:14:a0:25:ce:c2: 54:31:9e:de:3f:e7:f8:7b:da:c0:04:e9:3b:11:a5: 91:17:8e:6b:ae:e8:48:cf:de:75:2d:51:a5:7c:da: aa:46:41:dc:77:87:75:4f:60:ab:28:4b:04:d0:e6: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:17:19:18:38:74:0C:42:A2:08:D7:9E:C5:E1:40:6E:6F:4C:3A X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bf:ff:06:09:40:10:a9:16:e0:8a:d7:3a:0f:25:a3:1d:dd: 33:8d:2c:7b:46:22:06:37:08:f5:5c:20:25:35:db:74:e2:2b: 9e:2b:93:f3:39:4c:d0:75:68:72:6a:87:47:29:4c:59:06:a4: 33:bc:5f:e0:a4:47:ba:76:eb:10:d9:ae:bd:bc:f6:f8:76:71: 17:c5:4f:89:c5:e0:23:0d:8a:f4:12:dd:57:04:9e:34:f3:ea: c1:5f:5e:01:94:c8:34:3b:3b:1a:4e:21:90:8f:72:77:32:33: 80:45:4c:b0:b5:46:b0:75:02:57:d5:85:5a:ce:eb:1a:97:f9: e4:84:d3:47:f1:7c:64:ae:ab:20:50:90:60:59:8a:6c:ec:a2: 07:d1:c9:f8:26:3d:ba:b7:10:d4:47:a1:0a:59:ac:ba:2d:3b: c9:0e:e1:8e:3f:eb:37:84:9f:8b:c1:d7:6c:d2:9d:f8:c3:dd: dd:6d:ff:7a:26:a6:a2:39:0f:2e:40:1b:ff:c6:4a:45:1a:cb: 31:7e:0d:32:41:dd:e7:2d:7c:27:e7:8b:37:f4:81:7d:e3:46: 87:12:5b:db:4d:4e:d8:93:b9:3c:60:7c:f0:45:de:44:4a:e3: 4d:ae:ba:7f:e4:ae:5a:f1:91:3c:a1:99:44:bd:b1:71:ca:68: 42:05:00:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjYwOTIzMDExMzQ4WhcNMjYwOTMwMDExMzQ4WjAYMRYwFAYD VQQDEw02YWIzMjdjYy1hYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaps6ehSjT20/pxHldgi5kM/r8TM053dkKr30zeV7i5mU4Rv4yCZWRSf0omU tMMjWMohqWT5AhkWC0Wz9vT740RkIpGbTkhbfjqLbnjSAws0TX168lHd3WPFKHu8 +LdHR/sVqRSGYN6sKTsyfqba9rLKj4UpYpbI0DLu5xSu6p3JvEMBW+crkxgnKMj2 Anxa6EVnxa/8No2mdGhpuLZW6X3/eSCRxMhfhaWjBDWMoVbzIk3N6DlS4GReAPRF WA7f/OPbpVzqn5VSZeDCFKAlzsJUMZ7eP+f4e9rABOk7EaWRF45rruhIz951LVGl fNqqRkHcd4d1T2CrKEsE0ObluwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7+FxkY OHQMQqII157F4UBub0w6MB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACb//BglAEKkW4IrXOg8lox3dM40se0YiBjcI9VwgJTXbdOIrniuT8zlM0HVo cmqHRylMWQakM7xf4KRHunbrENmuvbz2+HZxF8VPicXgIw2K9BLdVwSeNPPqwV9e AZTINDs7Gk4hkI9ydzIzgEVMsLVGsHUCV9WFWs7rGpf55ITTR/F8ZK6rIFCQYFmK bOyiB9HJ+CY9urcQ1EehClmsui07yQ7hjj/rN4Sfi8HXbNKd+MPd3W3/eiamojkP LkAb/8ZKRRrLMX4NMkHd5y18J+eLN/SBfeNGhxJb201O2JO5PGB88EXeRErjTa66 f+SuWvGRPKGZRL2xccpoQgUAFQ== -----END CERTIFICATE-----Generated at Thu Sep 24 06:32:14 2026 by rpki-client