$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json) Hash identifier: nYpwBDlRnfJmFKMXDDnQjUMHuFOJwhu3c14HTIaZfDM= Subject key identifier: 8E:19:66:7B:DC:5A:7A:31:20:D7:87:5E:1A:87:66:1C:69:97:28:5F Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft Manifest number: 0145 Signing time: Sun 27 Sep 2026 06:02:21 +0000 Manifest this update: Sun 27 Sep 2026 06:02:20 +0000 Manifest next update: Sun 04 Oct 2026 06:02:20 +0000 Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: upR5e4ItlKx2QMZmvO9MlwCBX6tROjk/gk2hwCDGmZA=) 2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Validity Not Before: Sep 27 06:02:20 2026 GMT Not After : Oct 4 06:02:20 2026 GMT Subject: CN=6ab8b16d-661b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:39:56:15:1f:a1:9f:18:a4:96:3c:82:47: 2f:38:14:03:cb:c1:e3:0f:44:9e:ad:2e:c9:6b:18: a7:cf:d0:7c:fc:d6:53:46:73:02:e4:09:21:6a:d7: f9:9a:5d:b7:d1:a4:f9:9f:1c:e8:cc:86:0e:89:94: 07:8c:42:d7:50:ee:19:82:53:3a:78:68:8b:70:85: 02:8d:18:95:d9:e2:c8:5e:6f:9b:25:4e:fe:6f:3b: e1:ff:cc:5b:f9:95:ba:b6:6a:cc:8d:14:84:7d:0a: 9f:81:4f:7e:c7:30:90:1c:16:05:63:09:ce:26:9b: a8:92:8a:ce:63:a1:ba:8c:7c:2e:8b:cd:55:41:9c: 67:16:4e:b4:f6:8e:aa:6d:91:88:fb:b2:23:1c:bc: 7a:4a:eb:fc:06:92:2a:fd:2d:fb:0c:cb:b0:7c:1c: 86:37:37:38:ce:90:19:a8:e4:e3:fc:4e:9d:35:90: 51:b7:06:4a:ab:41:6b:8f:9a:20:bc:a0:1c:10:98: fb:d6:cd:5a:6c:bc:7c:b0:b2:11:02:26:e5:ed:02: dc:d0:ce:0b:e5:d6:98:42:65:17:d2:b4:c6:4e:e9: 5c:5c:32:78:fe:90:58:1f:25:60:40:04:d8:3d:0d: 04:22:f5:00:93:a4:1b:e3:6f:ce:1e:0b:74:84:b7: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:19:66:7B:DC:5A:7A:31:20:D7:87:5E:1A:87:66:1C:69:97:28:5F X509v3 Authority Key Identifier: keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:44:c0:c1:9c:f4:c4:b3:67:f8:2e:fe:bd:c0:84:91:6a:f8: c0:4e:07:e6:d1:91:af:ba:1d:d3:60:7e:88:b7:ae:30:c1:49: 2f:e5:d1:e3:3e:5b:b3:8f:42:91:34:05:8d:a6:ae:57:f7:2f: ca:ed:b7:5a:32:ce:3e:1a:68:5d:5f:ff:2a:9a:c3:7e:85:c7: 76:f2:f4:35:00:f4:9e:3d:c4:e6:6c:85:0a:4c:16:27:99:84: 4f:ac:03:fc:6e:4b:ff:55:c9:89:bd:c5:c9:78:dc:5f:bf:57: 29:7a:ab:17:21:9d:8a:aa:67:2f:60:8e:46:66:88:8b:95:6d: c2:a7:8f:d4:4c:f2:8e:19:f9:fd:a3:53:dc:a2:00:db:ef:b2: 22:cd:f0:56:aa:71:3d:09:38:0a:ae:09:81:14:1b:51:65:65: d3:9e:30:52:94:56:00:d3:56:e1:a2:31:19:c7:53:60:9c:a3: aa:8f:ca:de:f5:91:ad:a0:3a:29:da:2f:69:86:f3:e0:4b:31: 07:be:50:8a:65:86:d4:20:44:56:4f:b8:8e:cc:2b:b1:83:8c: 72:d3:1a:c1:ed:14:50:91:28:52:25:5f:79:0a:59:31:8f:89: c8:99:c7:4b:c4:04:20:94:cf:08:17:d8:5d:53:c6:ff:cd:af: e7:fb:8c:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx RDg4Q0YwQTYwHhcNMjYwOTI3MDYwMjIwWhcNMjYxMDA0MDYwMjIwWjAYMRYwFAYD VQQDEw02YWI4YjE2ZC02NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yc5VhUfoZ8YpJY8gkcvOBQDy8HjD0SerS7Jaxinz9B8/NZTRnMC5Akhatf5 ml230aT5nxzozIYOiZQHjELXUO4ZglM6eGiLcIUCjRiV2eLIXm+bJU7+bzvh/8xb +ZW6tmrMjRSEfQqfgU9+xzCQHBYFYwnOJpuokorOY6G6jHwui81VQZxnFk609o6q bZGI+7IjHLx6Suv8BpIq/S37DMuwfByGNzc4zpAZqOTj/E6dNZBRtwZKq0Frj5og vKAcEJj71s1abLx8sLIRAibl7QLc0M4L5daYQmUX0rTGTulcXDJ4/pBYHyVgQATY PQ0EIvUAk6Qb42/OHgt0hLcJsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4ZZnvc WnoxINeHXhqHZhxplyhfMB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu R3k1ckYzUUpGQ1VkaU04S1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXUTAwZz0xLNn+C7+vcCEkWr4wE4H5tGRr7od02B+iLeuMMFJL+XR4z5bs49C kTQFjaauV/cvyu23WjLOPhpoXV//KprDfoXHdvL0NQD0nj3E5myFCkwWJ5mET6wD /G5L/1XJib3FyXjcX79XKXqrFyGdiqpnL2CORmaIi5VtwqeP1Ezyjhn5/aNT3KIA 2++yIs3wVqpxPQk4Cq4JgRQbUWVl054wUpRWANNW4aIxGcdTYJyjqo/K3vWRraA6 KdovaYbz4EsxB75QimWG1CBEVk+4jswrsYOMctMawe0UUJEoUiVfeQpZMY+JyJnH S8QEIJTPCBfYXVPG/82v5/uMRw== -----END CERTIFICATE-----Generated at Sun Sep 27 12:10:42 2026 by rpki-client