$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: LNvdEtPsDew4oEWbvJ4pPl9bN8PXjp2F0cLKeOmh15M= Subject key identifier: 39:4F:8C:C8:8E:E8:27:31:8A:A8:A1:60:AC:52:53:A0:C4:28:3D:07 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: C2 Signing time: Thu 23 Jul 2026 08:46:56 +0000 Manifest this update: Thu 23 Jul 2026 08:46:56 +0000 Manifest next update: Thu 30 Jul 2026 08:46:56 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: nDPVe9k3JzebqVmY+Vsz8DU9cRKy6eagsFRANI7lXac=) 2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=) 3: 21C5B04263A311F096468248C4F9AE02.roa (hash: ZAT1gq4fsyyEvWAh5Wb9WrqtHt9uUHF0Lm9+fNRhxOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Jul 23 08:46:56 2026 GMT Not After : Jul 30 08:46:56 2026 GMT Subject: CN=6a61d500-449b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:df:0c:97:77:c6:12:5a:ea:f3:14:63:57: 91:74:fc:6a:70:59:98:ce:2a:35:2f:eb:cc:ca:9c: cb:92:9f:2f:42:82:2e:38:6c:2c:9e:ed:04:d0:47: 7e:f1:79:59:14:a2:f8:29:62:cd:6a:30:74:2d:47: b1:17:57:db:6d:cc:70:5c:32:25:be:35:14:23:65: d6:08:f3:2e:9a:79:f8:ff:35:ce:98:9b:c9:77:8a: c3:47:55:8d:2a:b7:c2:14:d7:ce:2c:22:c0:1f:3c: 77:f2:ab:f1:60:ca:9a:fb:52:bf:dd:ec:ed:46:3f: 25:cd:8f:ed:be:f4:83:b0:97:58:81:e1:b6:68:c9: c6:4f:bc:a9:34:3c:89:ad:a4:0f:64:e2:3e:42:bb: c6:46:a8:68:ac:ee:61:ab:d5:40:e8:16:55:ce:f3: d3:01:a7:ff:9f:28:33:c9:fc:14:0f:1e:6d:ec:c0: 2f:b0:8b:0b:fb:f2:ee:7b:6f:23:62:b1:75:bb:dc: 8a:0f:83:ce:64:67:ab:51:b1:43:11:38:dc:93:ad: 84:b9:e2:74:a2:37:96:30:d6:34:04:5a:3a:f1:f3: 0a:9a:22:4e:07:6e:e5:b4:11:fd:b9:82:89:74:09: 0c:5a:89:6a:9e:b8:db:3a:fe:7d:2e:53:aa:20:a2: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:8C:C8:8E:E8:27:31:8A:A8:A1:60:AC:52:53:A0:C4:28:3D:07 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d1:c2:11:81:aa:e6:a4:e6:59:f2:82:1b:03:f7:37:f4:76: 2a:f4:0b:d4:82:97:b4:2b:e3:a1:f6:df:b1:46:1a:78:81:f7: 3d:3f:32:92:46:f2:89:58:a8:c9:98:48:70:fa:b0:34:7a:42: 0a:fc:6e:69:a1:7b:93:30:e8:20:58:03:2b:d0:34:86:49:36: a9:c7:99:15:1d:4b:f2:04:2c:11:ec:df:f0:4b:00:03:19:d9: 8c:1d:25:65:7c:4c:3a:2c:d9:5c:11:f6:d4:fe:85:a3:0f:99: 34:2b:6e:a7:ff:02:08:5d:1b:20:6b:99:16:27:a3:27:7d:c7: 1a:24:14:15:c2:11:d7:ef:d8:8f:1e:e8:f7:39:35:05:c6:3a: 81:dd:83:27:e4:11:ab:6c:0f:6c:c3:ce:28:4b:0e:a1:56:a9: 05:f5:c9:2d:65:83:53:c0:cc:2c:97:77:ba:2b:7f:e7:5f:f6: a7:ff:b9:c5:ad:c4:6c:07:29:2e:35:e5:2b:9f:96:47:be:dd: 86:c9:55:3e:41:58:f8:72:b3:c4:37:ef:45:d8:b5:e2:c6:bc: fe:71:fd:1f:9b:88:e2:64:9c:39:0e:86:61:e7:32:6a:43:51: 85:76:11:a5:6b:8a:57:d8:a0:9e:1f:1f:c4:18:1d:e8:25:57: 15:05:97:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkzMDkxMTAvBgNVBAUTKDdEOEZBMEJFRjZBRUY3MUJERjg4Mzg1OEY3MzYxOUQz QjU5RTI3NzcwHhcNMjYwNzIzMDg0NjU2WhcNMjYwNzMwMDg0NjU2WjAYMRYwFAYD VQQDEw02YTYxZDUwMC00NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyffDJd3xhJa6vMUY1eRdPxqcFmYzio1L+vMypzLkp8vQoIuOGwsnu0E0Ed+ 8XlZFKL4KWLNajB0LUexF1fbbcxwXDIlvjUUI2XWCPMumnn4/zXOmJvJd4rDR1WN KrfCFNfOLCLAHzx38qvxYMqa+1K/3eztRj8lzY/tvvSDsJdYgeG2aMnGT7ypNDyJ raQPZOI+QrvGRqhorO5hq9VA6BZVzvPTAaf/nygzyfwUDx5t7MAvsIsL+/Lue28j YrF1u9yKD4POZGerUbFDETjck62EueJ0ojeWMNY0BFo68fMKmiJOB27ltBH9uYKJ dAkMWolqnrjbOv59LlOqIKIEkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlPjMiO 6CcxiqihYKxSU6DEKD0HMB8GA1UdIwQYMBaAFH2PoL72rvcb34g4WPc2GdO1nid3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTMwOS85ODkxRTkyRTYx M0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4dmZpRGhZOXpZWjA3V2VK M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUozYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4 dmZpRGhZOXpZWjA3V2VKM2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgNHCEYGq5qTmWfKCGwP3N/R2KvQL1IKXtCvjofbfsUYaeIH3PT8ykkbyiVio yZhIcPqwNHpCCvxuaaF7kzDoIFgDK9A0hkk2qceZFR1L8gQsEezf8EsAAxnZjB0l ZXxMOizZXBH21P6Fow+ZNCtup/8CCF0bIGuZFiejJ33HGiQUFcIR1+/Yjx7o9zk1 BcY6gd2DJ+QRq2wPbMPOKEsOoVapBfXJLWWDU8DMLJd3uit/51/2p/+5xa3EbAcp LjXlK5+WR77dhslVPkFY+HKzxDfvRdi14sa8/nH9H5uI4mScOQ6GYecyakNRhXYR pWuKV9ignh8fxBgd6CVXFQWXAw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:25:58 2026 by rpki-client