$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: GOwYCbRKEjA+u+0g3IXUyJ6nMwa9kwwIil36rn0ihNQ= Subject key identifier: 10:C3:A2:68:4D:1C:1E:AA:97:FE:0C:2D:19:DA:E7:82:1B:22:6B:A3 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 0584 Signing time: Thu 23 Jul 2026 00:06:19 +0000 Manifest this update: Thu 23 Jul 2026 00:06:18 +0000 Manifest next update: Thu 30 Jul 2026 00:06:18 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: QtFTFIhriLdAzYskGoMDnutZZ/1HN5uEZP0Y6VF/ZE8=) 2: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) 3: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Jul 23 00:06:18 2026 GMT Not After : Jul 30 00:06:18 2026 GMT Subject: CN=6a615afb-143b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:be:36:c6:c5:87:f2:66:c9:09:ff:37:53: 3b:c3:79:88:ca:6f:e9:ee:53:48:e1:b5:cc:d5:ea: 51:47:03:7b:d2:e9:57:1c:1e:6d:38:0c:ed:be:24: 2f:f3:76:a9:e6:68:f1:69:84:d7:1a:07:8e:51:7f: 33:db:ac:1e:7e:99:2c:26:e2:25:95:c5:d8:d8:2d: 88:a4:75:f7:02:f6:ef:80:1e:66:35:4d:30:19:36: 9a:dd:25:70:2d:3c:f8:d4:ff:dd:88:fa:ac:07:80: 76:2f:0e:18:41:02:89:b6:70:24:3c:08:33:48:48: 05:9f:a3:f6:c5:28:95:8d:24:51:05:ff:b0:97:3e: 5b:30:6e:a5:1b:ae:72:4c:aa:68:1b:18:78:5a:65: 4b:7f:9e:20:b9:00:b5:15:72:0c:b0:7b:ec:00:c7: 3f:ed:5b:88:62:34:a3:47:d2:aa:78:91:dd:61:28: f0:c5:f4:e6:5a:6f:79:41:bf:5d:69:af:e9:36:54: 37:40:0a:6a:0b:51:d7:3f:d4:8e:8d:7f:f8:d6:c1: a7:3b:73:e6:ac:c3:d5:0d:7c:c0:f9:2d:23:67:de: 05:2c:e7:95:8c:d8:c7:a6:e3:a0:57:85:63:75:60: 29:c3:5e:e2:6b:47:b2:18:28:1f:02:13:3d:2e:fb: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C3:A2:68:4D:1C:1E:AA:97:FE:0C:2D:19:DA:E7:82:1B:22:6B:A3 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:61:6b:e3:a9:1e:7b:fb:e9:26:49:3c:e4:c5:aa:a8:ab:39: 0f:0a:ba:e6:95:68:05:9a:23:01:81:bb:ea:b8:00:08:09:63: cf:84:37:e7:be:3c:3d:5b:b1:29:60:f7:cb:01:7c:a1:64:46: c6:97:8a:8e:91:dd:5c:7d:51:6d:d7:f2:33:6a:0f:d5:b3:d5: 08:40:be:3b:88:a8:aa:75:4d:ea:ee:ea:41:ec:5e:15:7f:ce: b0:40:35:6f:e1:7a:0f:36:75:38:4d:ef:cc:0c:e4:d0:66:2a: 6f:80:bc:ad:e3:39:84:ee:b5:32:4a:6c:da:d8:9d:e2:c8:1a: af:66:7d:76:d5:a6:c5:8c:79:2e:f3:98:08:cd:d7:a4:ac:d7: 71:30:09:51:77:25:9e:ba:a8:14:f3:cf:c7:40:81:38:25:33: ab:49:08:25:a1:bd:23:7f:38:b3:10:b0:a3:8d:28:d9:08:7a: 29:7d:21:bc:07:3b:97:b2:ca:3c:5e:9a:74:5c:7e:fd:95:fc: 1c:2c:89:9f:9d:51:9a:99:8a:7c:16:f3:7c:85:a8:ff:9a:01: 8f:33:0f:f4:79:d3:27:af:c8:a9:b5:3d:e8:cb:1b:1c:7c:d8: 32:48:50:5e:95:a7:ec:5e:a6:52:31:24:25:ed:9c:74:8d:43: 77:5c:7b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwNzIzMDAwNjE4WhcNMjYwNzMwMDAwNjE4WjAYMRYwFAYD VQQDEw02YTYxNWFmYi0xNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YG+NsbFh/JmyQn/N1M7w3mIym/p7lNI4bXM1epRRwN70ulXHB5tOAztviQv 83ap5mjxaYTXGgeOUX8z26wefpksJuIllcXY2C2IpHX3AvbvgB5mNU0wGTaa3SVw LTz41P/diPqsB4B2Lw4YQQKJtnAkPAgzSEgFn6P2xSiVjSRRBf+wlz5bMG6lG65y TKpoGxh4WmVLf54guQC1FXIMsHvsAMc/7VuIYjSjR9KqeJHdYSjwxfTmWm95Qb9d aa/pNlQ3QApqC1HXP9SOjX/41sGnO3PmrMPVDXzA+S0jZ94FLOeVjNjHpuOgV4Vj dWApw17ia0eyGCgfAhM9LvvhyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDDomhN HB6ql/4MLRna54IbImujMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWGFr46kee/vpJkk85MWqqKs5Dwq65pVoBZojAYG76rgACAljz4Q35748PVux KWD3ywF8oWRGxpeKjpHdXH1RbdfyM2oP1bPVCEC+O4ioqnVN6u7qQexeFX/OsEA1 b+F6DzZ1OE3vzAzk0GYqb4C8reM5hO61Mkps2tid4sgar2Z9dtWmxYx5LvOYCM3X pKzXcTAJUXclnrqoFPPPx0CBOCUzq0kIJaG9I384sxCwo40o2Qh6KX0hvAc7l7LK PF6adFx+/ZX8HCyJn51RmpmKfBbzfIWo/5oBjzMP9HnTJ6/IqbU96MsbHHzYMkhQ XpWn7F6mUjEkJe2cdI1Dd1x7yA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:55:33 2026 by rpki-client