$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json) Hash identifier: p3v17w+e92bhZrk9/rLV6uF4r9p2zsWqW9IEkMLxWys= Subject key identifier: 41:65:4D:C9:17:1B:BF:49:49:2F:5B:B0:25:7D:FB:27:66:98:5D:1C Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 11C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft Manifest number: 11A5 Signing time: Wed 22 Jul 2026 17:18:46 +0000 Manifest this update: Wed 22 Jul 2026 17:18:45 +0000 Manifest next update: Wed 29 Jul 2026 17:18:45 +0000 Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: iADJpCE+tbMNfX4oN+Dwl1JnJCMtmrFr4ikQdB0i88A=) 2: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: EtRVC+Tnay/XwjjnfrzZ4VWnKxvjsSi9zbht2seIWhQ=) 3: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: tkQkh0SeDKmYlFagbGUi9uFru4fwo8KYtzlYsDdAl6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4547 (0x11c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Validity Not Before: Jul 22 17:18:45 2026 GMT Not After : Jul 29 17:18:45 2026 GMT Subject: CN=6a60fb76-ec2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:c2:d5:5e:f8:e5:91:75:3f:12:13:1e:5b: c5:e2:c7:57:bb:66:e6:ce:91:9a:1d:8f:7f:5c:c1: c9:1d:35:d7:40:00:25:d1:e0:11:ec:83:d6:d1:be: cf:32:16:4c:c6:20:ff:bb:55:8d:26:d6:f6:f5:4f: 56:92:2d:df:7d:f9:11:5f:bd:04:9f:f9:e9:89:24: 3e:6c:7d:ec:ac:b5:ce:c4:c7:bd:94:a8:30:3c:62: e7:f2:aa:ac:e6:3f:8c:f5:23:2c:7e:ee:90:89:45: a2:8e:9a:af:92:21:0c:7e:e4:2d:40:e3:07:af:d9: a8:8c:f9:03:7a:71:7a:98:bb:d4:97:92:38:d8:a6: 36:99:3e:da:64:07:bb:dd:84:71:0f:0d:4e:50:79: c1:67:31:52:a3:4f:85:8f:b8:b5:91:3b:4a:ab:19: 7e:8d:45:70:fc:36:3d:14:1a:87:d8:f8:88:9d:de: c1:b4:da:27:17:f3:f1:69:43:e2:13:e4:e6:f4:74: fd:ec:75:78:cf:3a:38:e1:22:44:f2:6f:65:d4:53: d5:26:03:96:c1:6d:f6:bc:b1:76:a4:2f:84:d6:bb: 55:8a:89:36:ab:f0:5d:f0:84:cb:6b:29:02:76:33: a4:30:7a:df:96:03:b3:64:d7:d5:35:8b:9d:9e:6d: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:65:4D:C9:17:1B:BF:49:49:2F:5B:B0:25:7D:FB:27:66:98:5D:1C X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:81:f7:d3:6a:81:bb:d7:9a:d4:b3:d5:52:f1:32:35:c3:e1: 14:b9:a1:25:3d:a5:de:e1:b7:11:12:63:9d:f9:87:65:ae:dd: 7b:8d:88:e7:00:a3:00:67:67:3d:ce:75:a2:9b:19:6b:06:36: c7:15:53:e1:84:f5:c5:1c:4c:89:54:85:a9:5b:36:7b:55:1d: db:90:55:46:79:df:a0:0c:6d:a3:42:ef:ce:c8:c9:09:43:c8: dc:72:44:a8:24:e6:00:5a:e9:29:45:fa:f4:14:7a:ca:ef:f4: 90:99:67:3c:55:fb:bb:3d:7e:2a:ad:1f:73:c0:2c:5d:3a:ab: c9:45:77:d4:5c:10:72:4a:26:c4:25:24:f2:95:39:fa:34:8f: 03:6d:65:ec:9e:1b:ee:05:82:79:5d:c6:bc:a9:4b:01:3e:09: c9:aa:9f:6b:21:4a:29:ae:3f:62:e4:31:c7:66:1f:ac:0b:a8: 21:1c:f9:3d:3b:db:70:c9:c6:dd:30:df:a3:1d:45:bb:08:e8: ca:41:4f:1c:b7:d2:1f:9d:fb:3e:f0:94:f0:0e:f1:9c:1d:a5: 19:19:e3:94:f0:e6:fe:da:6c:4a:33:c8:3f:48:f3:0a:83:0d: 29:cd:4e:14:e3:ac:10:95:eb:19:a4:9c:b8:f0:9c:d4:7b:2b: 07:c5:1c:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjYwNzIyMTcxODQ1WhcNMjYwNzI5MTcxODQ1WjAYMRYwFAYD VQQDEw02YTYwZmI3Ni1lYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKPC1V745ZF1PxITHlvF4sdXu2bmzpGaHY9/XMHJHTXXQAAl0eAR7IPW0b7P MhZMxiD/u1WNJtb29U9Wki3fffkRX70En/npiSQ+bH3srLXOxMe9lKgwPGLn8qqs 5j+M9SMsfu6QiUWijpqvkiEMfuQtQOMHr9mojPkDenF6mLvUl5I42KY2mT7aZAe7 3YRxDw1OUHnBZzFSo0+Fj7i1kTtKqxl+jUVw/DY9FBqH2PiInd7BtNonF/PxaUPi E+Tm9HT97HV4zzo44SJE8m9l1FPVJgOWwW32vLF2pC+E1rtViok2q/Bd8ITLaykC djOkMHrflgOzZNfVNYudnm2BoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFlTckX G79JSS9bsCV9+ydmmF0cMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQzMS82NUVGMjk2QTIzMTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVw VmxZQ01lZmdNWDVweThiQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZIH302qBu9ea1LPVUvEyNcPhFLmhJT2l3uG3ERJjnfmHZa7de42I5wCjAGdn Pc51opsZawY2xxVT4YT1xRxMiVSFqVs2e1Ud25BVRnnfoAxto0LvzsjJCUPI3HJE qCTmAFrpKUX69BR6yu/0kJlnPFX7uz1+Kq0fc8AsXTqryUV31FwQckomxCUk8pU5 +jSPA21l7J4b7gWCeV3GvKlLAT4JyaqfayFKKa4/YuQxx2YfrAuoIRz5PTvbcMnG 3TDfox1FuwjoykFPHLfSH537PvCU8A7xnB2lGRnjlPDm/tpsSjPIP0jzCoMNKc1O FOOsEJXrGaScuPCc1HsrB8Ucog== -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:20 2026 by rpki-client