$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: OEMytoq7kP9XGr1j+/Fiyocm9pgD///SEm8cJRysJFU= Subject key identifier: 24:12:B4:B3:48:A7:C3:8D:C7:6D:1A:93:AD:C2:DC:14:9C:FA:60:D2 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 0126 Signing time: Thu 23 Jul 2026 07:27:50 +0000 Manifest this update: Thu 23 Jul 2026 07:27:50 +0000 Manifest next update: Thu 30 Jul 2026 07:27:50 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: qHR7ds+IQAu5pTQMglCkLEhN1Kin06W/0LfrUGilhVI=) 2: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: Otxavzn9wqai7bz3j2wOAOhJHM7zPHSQjLLYM4IbP1Q=) 3: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: yNjcbXSQe954tG4iPQoh2HGC3/zMHGuxKNsySG8+1DI=) 4: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: XFH0Q1KpeOYZLCrrHNLmbgTNMLaKVPfV4xztcVnCyR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Jul 23 07:27:50 2026 GMT Not After : Jul 30 07:27:50 2026 GMT Subject: CN=6a61c276-faa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:7c:ad:6c:01:fe:f6:28:3f:86:ca:3b:df: 73:cb:14:ec:d3:64:e4:4e:73:a0:b6:c7:0b:79:95: a8:c8:71:ca:7a:42:aa:09:b4:8e:63:0f:ad:29:bb: 91:7c:2f:64:61:79:8e:a8:c9:de:42:f7:9c:a6:bd: 3a:52:35:5b:a6:c8:f1:3b:55:87:e6:f9:56:a2:55: ca:40:74:32:df:9c:7b:5a:5e:2c:87:b4:06:4a:9d: d4:58:cb:ab:a2:5b:c9:ce:f4:9e:e4:b3:94:fc:d5: df:7a:1e:4a:f1:b7:0d:a3:23:54:f0:6c:cc:ea:3d: 5b:19:85:0c:97:86:ca:0a:18:46:a6:b7:2a:07:0c: 21:9e:fd:98:c1:a3:12:9d:eb:ef:85:14:17:87:f1: 8d:73:b6:30:f4:83:b7:0a:a0:6a:99:70:9d:c2:75: 33:f9:04:1d:65:eb:50:72:76:dd:5b:38:33:b1:f3: e6:86:04:58:6f:cb:d8:3e:f1:e9:d6:c4:60:f9:08: 04:8c:50:44:0d:9c:12:54:32:6a:10:78:7b:cf:fa: dd:0c:63:a3:76:ef:54:6e:a1:11:73:f7:d1:27:1b: f7:e3:5b:d0:5c:f1:b0:75:21:57:02:f8:13:5c:40: 9f:92:36:d3:f7:03:16:99:ff:9f:4e:6d:4e:fe:b5: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:B4:B3:48:A7:C3:8D:C7:6D:1A:93:AD:C2:DC:14:9C:FA:60:D2 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:55:c4:c3:a9:0e:11:49:0c:dc:61:33:77:79:38:de:ff:e1: d9:17:7d:3a:2e:f1:64:c0:9c:e4:0e:2c:90:4d:3d:41:56:bd: 12:c6:87:0f:86:84:fb:31:18:32:f9:29:63:ea:42:94:49:2e: b4:f6:74:da:5a:12:1f:43:dc:e1:a2:c3:80:b5:6e:07:6f:71: 63:2b:05:48:cc:fd:1c:08:70:df:b9:cb:28:c2:e3:68:4c:3a: 1e:86:c5:e5:33:46:4d:31:a0:2f:91:dc:5a:f7:7c:92:a4:f8: 5c:fa:12:da:02:d1:c5:71:d0:c8:4e:be:e9:bb:d3:a8:47:01: 77:46:e0:f8:32:66:71:ab:8d:44:67:14:ec:39:4a:a7:8d:a0: 1b:30:bc:f6:64:05:06:02:6a:55:80:bc:d6:d9:f8:2b:78:99: 49:d1:84:a2:4e:9c:dd:6a:da:db:62:58:22:82:e8:6d:6f:3a: d3:69:e9:b2:c8:3c:23:65:45:22:ea:e3:35:9f:da:e0:96:6c: 29:28:24:e3:2e:87:29:2e:0b:59:5a:a8:09:01:ba:41:0f:67: 54:79:77:87:93:3f:b1:c3:8f:58:fe:46:e7:3d:4a:39:1c:57: 62:44:5c:d7:5e:53:ae:60:ea:ef:71:45:71:dc:0a:e6:65:f2: e6:d3:5d:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjYwNzIzMDcyNzUwWhcNMjYwNzMwMDcyNzUwWjAYMRYwFAYD VQQDEw02YTYxYzI3Ni1mYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvF8rWwB/vYoP4bKO99zyxTs02TkTnOgtscLeZWoyHHKekKqCbSOYw+tKbuR fC9kYXmOqMneQvecpr06UjVbpsjxO1WH5vlWolXKQHQy35x7Wl4sh7QGSp3UWMur olvJzvSe5LOU/NXfeh5K8bcNoyNU8GzM6j1bGYUMl4bKChhGprcqBwwhnv2YwaMS nevvhRQXh/GNc7Yw9IO3CqBqmXCdwnUz+QQdZetQcnbdWzgzsfPmhgRYb8vYPvHp 1sRg+QgEjFBEDZwSVDJqEHh7z/rdDGOjdu9UbqERc/fRJxv341vQXPGwdSFXAvgT XECfkjbT9wMWmf+fTm1O/rUdpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQStLNI p8ONx20ak63C3BSc+mDSMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIFXEw6kOEUkM3GEzd3k43v/h2Rd9Oi7xZMCc5A4skE09QVa9EsaHD4aE+zEY MvkpY+pClEkutPZ02loSH0Pc4aLDgLVuB29xYysFSMz9HAhw37nLKMLjaEw6HobF 5TNGTTGgL5HcWvd8kqT4XPoS2gLRxXHQyE6+6bvTqEcBd0bg+DJmcauNRGcU7DlK p42gGzC89mQFBgJqVYC81tn4K3iZSdGEok6c3Wra22JYIoLobW8602npssg8I2VF IurjNZ/a4JZsKSgk4y6HKS4LWVqoCQG6QQ9nVHl3h5M/scOPWP5G5z1KORxXYkRc 115TrmDq73FFcdwK5mXy5tNdUA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:02:58 2026 by rpki-client