$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json) Hash identifier: 3i3UetPR8qx2aDN6+Pmeiw6HQDMC43s7ExrwDmkzyPY= Subject key identifier: 41:47:A8:0A:E5:A3:AF:FC:71:EC:F7:40:66:1F:80:27:29:B5:49:62 Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft Manifest number: 0685 Signing time: Wed 22 Jul 2026 23:14:50 +0000 Manifest this update: Wed 22 Jul 2026 23:14:49 +0000 Manifest next update: Wed 29 Jul 2026 23:14:49 +0000 Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: oe9P4vyWmxjvlY2DzZLr8/arbd5rKccRA+maQvd+CK8=) 2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D Validity Not Before: Jul 22 23:14:49 2026 GMT Not After : Jul 29 23:14:49 2026 GMT Subject: CN=6a614eea-8c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:bb:8d:c4:21:f9:e6:97:14:56:51:d3:19: 7f:08:67:34:f5:c9:e6:f6:b1:72:70:53:27:39:56: 3e:38:00:17:1a:cd:91:60:e6:82:77:b6:20:a5:91: 84:4b:96:02:39:cc:15:f1:d2:6f:bb:45:a1:b4:e3: 27:2b:a2:52:4b:90:48:52:de:f8:86:d1:41:6a:a0: 63:af:21:5c:0a:ef:f8:79:03:18:37:85:3b:01:2e: 31:c0:68:4c:91:b8:74:3f:26:5a:67:b9:f7:52:d1: 2f:68:e2:0a:f0:e9:20:13:ea:0f:03:7d:72:b8:67: 7e:1f:24:c5:fc:3e:2a:87:20:6a:ba:b4:0c:62:27: a9:31:fc:b7:a6:17:43:74:ab:21:34:56:79:22:65: c5:05:d6:bf:e4:32:7b:31:d4:00:65:11:20:a6:7e: a7:b9:ae:a4:7d:45:65:9b:a6:40:ec:18:c5:0f:da: 9d:c5:e8:eb:50:7c:d4:34:6a:e0:68:9c:77:07:e5: 6e:52:b9:b1:fc:e0:43:e8:4d:23:1f:2a:9e:9c:95: d7:92:5f:2b:77:c2:fc:c3:07:dd:c3:5e:cc:2b:d9: 08:db:0e:61:37:46:db:f1:c0:a5:26:cd:46:33:44: 3a:77:4a:78:7d:d2:81:2f:d3:05:7a:49:f5:73:78: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:47:A8:0A:E5:A3:AF:FC:71:EC:F7:40:66:1F:80:27:29:B5:49:62 X509v3 Authority Key Identifier: keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:4a:d0:f6:5e:1a:ea:be:a3:5c:44:ba:bd:a2:2a:e4:2f:68: d6:ef:83:39:e2:f5:4b:74:e0:50:3d:ef:f1:eb:57:03:aa:02: c1:d3:dd:21:97:40:4d:4d:a8:d3:01:27:34:66:69:6b:51:7b: 37:33:46:44:96:9a:39:72:f3:fe:16:30:0d:aa:37:57:4b:5b: 42:98:f2:73:20:fc:ac:49:d3:24:dc:86:3c:a3:ee:6c:fb:b3: eb:71:7d:ff:03:93:1a:65:c4:84:1b:e7:05:1c:d0:41:5e:ef: 29:2c:6f:24:dd:62:78:0f:d8:c1:e7:3e:2f:2b:3f:f5:75:ca: 11:d0:37:9b:94:59:51:79:1a:93:bd:7b:af:f0:83:bb:52:e5: 80:79:f8:f0:06:c1:48:43:00:f2:26:b5:81:05:f1:2c:06:1b: 36:3f:e0:56:ab:7b:f1:04:0e:a0:07:50:c6:29:95:e2:e3:ad: ba:82:c6:94:3e:08:dc:7d:4f:76:0c:92:23:89:af:fe:2c:33: 1f:9f:de:a5:21:39:6f:ea:48:d5:60:17:b6:8a:23:76:45:dd: 9b:3b:72:d3:c7:2c:7d:d7:61:5c:0a:8a:70:0f:13:4e:a4:67: 86:6d:85:a7:32:98:c6:ba:2f:91:d9:7c:f1:cd:d5:3e:b1:17: 7a:38:51:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNTgxMTAvBgNVBAUTKDYzRTQ4NzYyQTg5MzA4MDk2NzczRDlFMUM5RDFBOTk5 ODAzNTY3MEQwHhcNMjYwNzIyMjMxNDQ5WhcNMjYwNzI5MjMxNDQ5WjAYMRYwFAYD VQQDEw02YTYxNGVlYS04Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6e7jcQh+eaXFFZR0xl/CGc09cnm9rFycFMnOVY+OAAXGs2RYOaCd7YgpZGE S5YCOcwV8dJvu0WhtOMnK6JSS5BIUt74htFBaqBjryFcCu/4eQMYN4U7AS4xwGhM kbh0PyZaZ7n3UtEvaOIK8OkgE+oPA31yuGd+HyTF/D4qhyBqurQMYiepMfy3phdD dKshNFZ5ImXFBda/5DJ7MdQAZREgpn6nua6kfUVlm6ZA7BjFD9qdxejrUHzUNGrg aJx3B+VuUrmx/OBD6E0jHyqenJXXkl8rd8L8wwfdw17MK9kI2w5hN0bb8cClJs1G M0Q6d0p4fdKBL9MFekn1c3ihrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFHqArl o6/8cez3QGYfgCcptUliMB8GA1UdIwQYMBaAFGPkh2KokwgJZ3PZ4cnRqZmANWcN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I1OC9BQUMyMUM3RUNB QjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENBbG5jOW5oeWRHcG1ZQTFa dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktU0hZcWlUQ0FsbmM5bmh5ZEdwbVlBMVp3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I1OC9BQUMyMUM3RUNBQjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENB bG5jOW5oeWRHcG1ZQTFadzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABErQ9l4a6r6jXES6vaIq5C9o1u+DOeL1S3TgUD3v8etXA6oCwdPdIZdATU2o 0wEnNGZpa1F7NzNGRJaaOXLz/hYwDao3V0tbQpjycyD8rEnTJNyGPKPubPuz63F9 /wOTGmXEhBvnBRzQQV7vKSxvJN1ieA/Ywec+Lys/9XXKEdA3m5RZUXkak717r/CD u1LlgHn48AbBSEMA8ia1gQXxLAYbNj/gVqt78QQOoAdQximV4uOtuoLGlD4I3H1P dgySI4mv/iwzH5/epSE5b+pI1WAXtoojdkXdmzty08csfddhXAqKcA8TTqRnhm2F pzKYxrovkdl88c3VPrEXejhRaw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:53 2026 by rpki-client