$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: Fsc5u3gOGBFiOUiH/7NUTWM3qA/B+idnraRo5m3XgA4= Subject key identifier: 08:8E:7C:6C:11:6E:F3:FD:29:3D:AD:4E:F1:4E:31:6C:5B:27:41:36 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 029A Signing time: Thu 23 Jul 2026 02:44:39 +0000 Manifest this update: Thu 23 Jul 2026 02:44:39 +0000 Manifest next update: Thu 30 Jul 2026 02:44:39 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: rNBShRmhXqFurPbARGuAv/Gsg5m6rrrM2beVIanSvCs=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Jul 23 02:44:39 2026 GMT Not After : Jul 30 02:44:39 2026 GMT Subject: CN=6a618017-baa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:6f:bd:76:84:76:d9:b3:e8:f6:f0:fd:01: f6:e6:25:cc:9b:4a:73:19:9e:e2:d3:b7:71:db:9e: 8b:d9:90:18:30:ee:1b:7b:92:0c:f7:ae:11:f3:3f: c4:1e:b3:4c:15:59:dd:ea:84:9d:d1:71:8c:5c:f2: 8c:b7:4c:66:61:b3:4e:84:cc:6b:d3:4f:45:a3:48: 3b:5e:0a:9e:a5:f7:ea:43:72:d5:ee:ca:f8:10:da: e9:30:d0:d2:ee:16:08:c1:a4:af:ee:f7:67:d5:e0: fd:ae:d2:a6:72:a3:e1:17:a1:b0:73:40:94:11:23: 86:89:60:ce:a8:33:31:91:7d:98:2d:d6:6f:f8:c7: 66:42:15:70:ec:71:81:2b:ff:fa:cd:a1:84:a2:d4: d3:c8:19:5a:af:c1:a9:80:63:41:24:ed:3c:54:fc: b1:0b:07:35:c7:50:e6:70:6b:b5:6c:d6:f4:26:76: 1c:6a:28:1a:0a:cc:17:9b:cc:a8:5a:69:55:af:1d: 46:8f:8f:34:49:4d:59:cb:db:2d:a4:a4:7d:65:4c: 99:70:fa:25:f0:52:9b:8a:8f:6f:9b:cd:43:99:1b: 8c:ea:1a:d7:32:b1:96:64:7d:2c:cb:f9:fe:36:8a: be:f1:fd:a2:f5:f4:d6:15:99:75:39:7f:b0:ad:da: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8E:7C:6C:11:6E:F3:FD:29:3D:AD:4E:F1:4E:31:6C:5B:27:41:36 X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b9:e5:09:29:77:e3:91:81:9f:02:b5:d8:4f:a5:72:15:3e: 12:ef:e6:23:a8:b6:60:f9:81:2e:0e:3a:75:dd:67:3d:08:ee: 37:80:c2:c4:e1:a7:8b:07:42:dc:d0:a1:7e:e4:c3:d0:31:47: 8f:2c:12:ee:e3:43:8b:9e:4e:de:c1:59:fc:cc:b8:e8:b3:d1: 95:cd:c1:ce:c2:4e:2d:0a:16:80:10:0c:8a:ff:b7:87:e6:20: 16:ac:a8:15:70:72:44:aa:29:1e:6d:6e:0c:bf:50:3c:08:50: 77:c1:55:66:0d:ef:63:5d:82:74:73:f4:46:86:67:0a:ac:3f: 24:e4:78:e8:b1:c4:0d:d3:ab:a6:ab:43:76:07:e4:51:1a:96: 9b:a5:b0:1a:f9:0e:74:99:9a:dc:93:40:e9:4e:58:9a:2f:0b: 0b:c5:e5:55:dd:09:3a:99:57:17:b2:ca:4e:2b:87:1d:57:07: ea:42:75:5e:57:19:e3:42:3a:15:2e:f2:03:6b:1d:84:69:b9: 34:be:a7:88:68:7d:be:c8:a4:93:30:50:76:41:a1:2c:06:ac: b0:f9:d4:35:8d:d1:50:14:d1:4a:69:35:af:e9:b1:0a:cf:87: 11:a2:f0:e5:71:59:38:28:e9:33:c4:b2:2b:35:f7:5e:8e:a8: 2c:7e:da:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjYwNzIzMDI0NDM5WhcNMjYwNzMwMDI0NDM5WjAYMRYwFAYD VQQDEw02YTYxODAxNy1iYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JJvvXaEdtmz6Pbw/QH25iXMm0pzGZ7i07dx256L2ZAYMO4be5IM964R8z/E HrNMFVnd6oSd0XGMXPKMt0xmYbNOhMxr009Fo0g7XgqepffqQ3LV7sr4ENrpMNDS 7hYIwaSv7vdn1eD9rtKmcqPhF6Gwc0CUESOGiWDOqDMxkX2YLdZv+MdmQhVw7HGB K//6zaGEotTTyBlar8GpgGNBJO08VPyxCwc1x1DmcGu1bNb0JnYcaigaCswXm8yo WmlVrx1Gj480SU1Zy9stpKR9ZUyZcPol8FKbio9vm81DmRuM6hrXMrGWZH0sy/n+ Noq+8f2i9fTWFZl1OX+wrdo2kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiOfGwR bvP9KT2tTvFOMWxbJ0E2MB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbbnlCSl345GBnwK12E+lchU+Eu/mI6i2YPmBLg46dd1nPQjuN4DCxOGniwdC 3NChfuTD0DFHjywS7uNDi55O3sFZ/My46LPRlc3BzsJOLQoWgBAMiv+3h+YgFqyo FXByRKopHm1uDL9QPAhQd8FVZg3vY12CdHP0RoZnCqw/JOR46LHEDdOrpqtDdgfk URqWm6WwGvkOdJma3JNA6U5Ymi8LC8XlVd0JOplXF7LKTiuHHVcH6kJ1XlcZ40I6 FS7yA2sdhGm5NL6niGh9vsikkzBQdkGhLAassPnUNY3RUBTRSmk1r+mxCs+HEaLw 5XFZOCjpM8SyKzX3Xo6oLH7atA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:23:58 2026 by rpki-client