$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json) Hash identifier: C89yln7yA3PIlC+4OJkUTF5UtHr+AhW6UWzmoBK6t78= Subject key identifier: A0:C8:F2:93:94:61:E7:B4:39:3F:59:69:CD:7F:60:35:D1:99:EC:A5 Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft Manifest number: 0123 Signing time: Thu 23 Jul 2026 07:37:36 +0000 Manifest this update: Thu 23 Jul 2026 07:37:36 +0000 Manifest next update: Thu 30 Jul 2026 07:37:36 +0000 Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: VHeuMxZhI+ewUr3glqGc2WHZpHn+AFZSdrHxuVjSmaI=) 2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Validity Not Before: Jul 23 07:37:36 2026 GMT Not After : Jul 30 07:37:36 2026 GMT Subject: CN=6a61c4c0-0ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:67:bd:44:5f:7e:64:dc:48:35:9c:86:4e: 25:c3:90:58:76:4b:66:23:6b:e1:ba:b1:0c:96:cb: 75:fe:6d:a5:70:b9:da:34:cd:a5:85:0e:9b:52:d7: c0:04:7e:54:5b:1c:64:6c:81:2d:fb:fc:6b:b6:4c: 79:08:3a:11:28:68:ee:18:45:0f:f6:92:b5:94:66: 91:a6:42:02:b9:d6:4f:57:0e:27:2c:8d:99:fb:5c: 5b:b7:88:ac:f8:6c:8e:d3:f1:38:cb:8a:26:9d:79: 64:b0:de:61:86:0a:2d:2c:50:80:a4:2a:97:af:04: 2c:5b:3a:77:4e:53:d8:70:e5:6b:ce:e9:38:d3:75: 15:82:c1:ec:9a:1f:d2:78:31:ed:a8:ee:23:97:bf: 4c:2b:c7:3c:b9:7b:31:54:08:3c:9c:45:25:71:e9: 7f:9d:5f:64:4b:d5:db:c4:0b:32:a6:3e:3e:e1:3a: 68:31:9d:d5:79:f5:58:e8:d6:43:b3:aa:3e:60:09: 1d:49:bd:42:07:44:76:8c:42:09:ad:2c:ab:bc:82: 70:3c:f5:7b:1b:77:aa:4d:a7:fb:a8:96:39:dc:2d: 06:ad:c9:bb:2f:35:ed:5a:5d:24:c1:7f:53:23:d3: 12:6c:ca:ac:41:1b:c8:cd:43:1c:86:1e:0c:8d:53: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C8:F2:93:94:61:E7:B4:39:3F:59:69:CD:7F:60:35:D1:99:EC:A5 X509v3 Authority Key Identifier: keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:43:50:f8:2c:b3:0e:43:46:5c:89:1d:bd:ca:56:e6:53:32: 54:45:8a:3e:ea:7d:6b:7c:f1:51:77:b5:89:9e:12:78:51:23: 3c:6a:1f:7b:0c:db:e7:73:60:8f:c7:e1:0d:e5:85:c0:58:0e: ae:0d:b9:13:25:4f:6e:51:ba:d8:cd:e1:bc:90:be:99:d4:d2: 6b:b9:3e:85:49:2c:ca:66:ec:5e:de:0d:32:66:96:10:7d:c7: 07:58:2e:48:df:5e:e5:8f:14:da:16:ec:32:e3:65:72:bb:3d: 7c:a8:eb:71:4d:ca:3c:6c:47:b8:0d:2f:30:e0:da:25:0b:70: 97:78:71:80:41:90:f4:39:d7:9f:97:e3:7d:14:63:e2:c1:7b: 67:1f:da:07:7e:99:c1:d9:bb:7f:d3:5d:5a:1d:7f:a1:16:94: 17:9b:e0:41:b0:2a:8a:60:59:10:94:31:35:9a:75:5f:22:c7: e9:d2:d8:7c:46:7f:9a:60:5f:f3:a7:e6:92:71:33:c6:c2:fa: 83:7a:86:83:ee:55:de:1c:d8:be:70:39:75:a7:bc:b3:6d:df: 8a:d9:dc:86:7e:46:55:f1:6a:83:a7:b2:88:f1:ab:68:d0:47: 2c:3f:f6:a9:14:bc:af:54:0e:e5:b7:de:9a:6d:c6:65:b7:a3: c7:02:ee:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx RDg4Q0YwQTYwHhcNMjYwNzIzMDczNzM2WhcNMjYwNzMwMDczNzM2WjAYMRYwFAYD VQQDEw02YTYxYzRjMC0wYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE1nvURffmTcSDWchk4lw5BYdktmI2vhurEMlst1/m2lcLnaNM2lhQ6bUtfA BH5UWxxkbIEt+/xrtkx5CDoRKGjuGEUP9pK1lGaRpkICudZPVw4nLI2Z+1xbt4is +GyO0/E4y4omnXlksN5hhgotLFCApCqXrwQsWzp3TlPYcOVrzuk403UVgsHsmh/S eDHtqO4jl79MK8c8uXsxVAg8nEUlcel/nV9kS9XbxAsypj4+4TpoMZ3VefVY6NZD s6o+YAkdSb1CB0R2jEIJrSyrvIJwPPV7G3eqTaf7qJY53C0Grcm7LzXtWl0kwX9T I9MSbMqsQRvIzUMchh4MjVOquwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDI8pOU Yee0OT9Zac1/YDXRmeylMB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu R3k1ckYzUUpGQ1VkaU04S1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtkNQ+CyzDkNGXIkdvcpW5lMyVEWKPup9a3zxUXe1iZ4SeFEjPGofewzb53Ng j8fhDeWFwFgOrg25EyVPblG62M3hvJC+mdTSa7k+hUksymbsXt4NMmaWEH3HB1gu SN9e5Y8U2hbsMuNlcrs9fKjrcU3KPGxHuA0vMODaJQtwl3hxgEGQ9DnXn5fjfRRj 4sF7Zx/aB36Zwdm7f9NdWh1/oRaUF5vgQbAqimBZEJQxNZp1XyLH6dLYfEZ/mmBf 86fmknEzxsL6g3qGg+5V3hzYvnA5dae8s23fitnchn5GVfFqg6eyiPGraNBHLD/2 qRS8r1QO5bfemm3GZbejxwLugQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:53:39 2026 by rpki-client