$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: I9oKHqIC6AMeR4o4w7DlaOaAzEdj5a4lKBFEPwXPb9U= Subject key identifier: B1:AC:BE:87:F5:D8:C2:B0:D1:2A:D0:98:C4:EB:FE:68:FA:3C:CD:0D Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 014B Signing time: Sat 03 Oct 2026 06:03:25 +0000 Manifest this update: Sat 03 Oct 2026 06:03:24 +0000 Manifest next update: Sat 10 Oct 2026 06:03:24 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: A1VWpNqF+oyuuAwoEgsnu2ox/asM9EfeeFmyM/kciho=) 2: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: Otxavzn9wqai7bz3j2wOAOhJHM7zPHSQjLLYM4IbP1Q=) 3: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: XFH0Q1KpeOYZLCrrHNLmbgTNMLaKVPfV4xztcVnCyR8=) 4: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: yNjcbXSQe954tG4iPQoh2HGC3/zMHGuxKNsySG8+1DI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Oct 3 06:03:24 2026 GMT Not After : Oct 10 06:03:24 2026 GMT Subject: CN=6ac09aac-2d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:ff:62:1b:8c:2e:bc:09:36:3f:03:6b:cd: ff:02:4d:1f:6a:0c:4d:30:88:e8:d2:33:0d:10:f3: 5a:02:b3:c9:17:eb:48:10:fb:5f:0c:63:bc:29:d3: 19:f3:48:77:97:a1:1d:32:78:39:8b:01:07:2f:09: b1:ee:cc:12:ac:b7:fc:2d:e6:ce:ca:e0:1a:a5:99: c3:78:56:ca:b6:6a:61:86:db:3c:3b:64:33:4a:24: e4:0e:a7:e3:5d:c1:f5:23:32:ff:02:82:ea:8d:bb: 13:0b:b7:62:b2:44:bb:88:43:3e:95:95:7b:b4:09: 55:7d:b0:6d:13:a4:9c:a1:04:8c:0b:de:1b:dd:2f: 88:4f:cc:23:56:fe:c4:fb:e4:b8:0d:d0:06:a4:78: ca:6d:cc:e5:66:d8:fb:4a:01:0b:95:b2:31:a9:92: 8e:ed:d1:6f:ea:b8:9b:9d:f6:61:b4:35:5b:c7:d8: f0:1e:68:7d:94:96:51:f7:28:a1:81:1b:b8:f0:55: 11:ab:1f:9c:01:e7:dc:79:53:17:91:c9:26:3e:56: d2:c6:3f:b5:d6:c8:51:82:f1:02:bc:2d:3b:49:61: e0:fd:ac:77:82:e6:78:a6:9a:cb:b2:ab:9f:26:2c: 11:e6:00:69:91:02:33:66:67:52:63:43:06:9a:48: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AC:BE:87:F5:D8:C2:B0:D1:2A:D0:98:C4:EB:FE:68:FA:3C:CD:0D X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:17:21:d8:73:4c:92:b7:67:76:59:b4:bb:c0:9a:e1:99:12: b9:4f:26:20:a0:5d:c5:b7:98:5e:ba:b8:54:39:4f:6e:52:cd: d7:6e:63:34:37:91:6f:e6:37:37:3f:f6:dd:fc:77:8d:43:8b: 2c:e4:25:bb:df:49:29:81:29:3f:5d:95:ac:4b:fa:9f:10:6b: 68:28:50:9c:58:5d:0f:f9:5e:e2:e8:2a:1e:af:40:0f:e0:a1: b3:ed:9a:c0:59:f1:7b:3f:af:47:49:26:fe:d5:2c:fd:78:ea: f5:ce:46:00:d2:47:af:99:48:84:eb:db:bb:1b:c6:05:79:fd: 31:02:d9:49:8f:c9:e0:56:f4:7f:40:54:55:87:7b:66:8f:8c: 75:d7:8e:f8:a6:89:f4:ae:a0:e1:e2:31:bb:7c:c8:d8:a6:76: 02:89:52:c3:71:3a:16:97:18:4c:5d:35:f2:7c:98:dd:e6:42: 0e:4c:78:d7:88:60:df:ae:44:7f:16:1b:93:c2:5a:94:21:65: 56:3c:72:da:2e:ad:c8:24:99:c2:79:79:72:e4:9b:d6:62:cb: ea:ad:d1:06:62:dd:7a:d1:f7:06:6d:0f:0f:3a:4a:ff:ca:86: 61:ee:f9:74:3c:5f:45:99:60:c6:9d:08:b7:25:69:cc:2d:4d: 73:74:1f:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjYxMDAzMDYwMzI0WhcNMjYxMDEwMDYwMzI0WjAYMRYwFAYD VQQDEw02YWMwOWFhYy0yZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKP/YhuMLrwJNj8Da83/Ak0fagxNMIjo0jMNEPNaArPJF+tIEPtfDGO8KdMZ 80h3l6EdMng5iwEHLwmx7swSrLf8LebOyuAapZnDeFbKtmphhts8O2QzSiTkDqfj XcH1IzL/AoLqjbsTC7diskS7iEM+lZV7tAlVfbBtE6ScoQSMC94b3S+IT8wjVv7E ++S4DdAGpHjKbczlZtj7SgELlbIxqZKO7dFv6ribnfZhtDVbx9jwHmh9lJZR9yih gRu48FURqx+cAefceVMXkckmPlbSxj+11shRgvECvC07SWHg/ax3guZ4pprLsquf JiwR5gBpkQIzZmdSY0MGmkhLyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGsvof1 2MKw0SrQmMTr/mj6PM0NMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASBch2HNMkrdndlm0u8Ca4ZkSuU8mIKBdxbeYXrq4VDlPblLN125jNDeRb+Y3 Nz/23fx3jUOLLOQlu99JKYEpP12VrEv6nxBraChQnFhdD/le4ugqHq9AD+Chs+2a wFnxez+vR0km/tUs/Xjq9c5GANJHr5lIhOvbuxvGBXn9MQLZSY/J4Fb0f0BUVYd7 Zo+MddeO+KaJ9K6g4eIxu3zI2KZ2AolSw3E6FpcYTF018nyY3eZCDkx414hg365E fxYbk8JalCFlVjxy2i6tyCSZwnl5cuSb1mLL6q3RBmLdetH3Bm0PDzpK/8qGYe75 dDxfRZlgxp0ItyVpzC1Nc3QfBA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:33:40 2026 by rpki-client