$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: EjD+5fEQH6fDbFtNp6rO68xsDDzdW07MfHSKu5k61F0= Subject key identifier: 41:8C:B8:10:45:94:4A:56:7A:4B:2E:F0:63:9E:1A:F2:E2:98:BC:2E Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0233 Signing time: Fri 25 Sep 2026 02:48:59 +0000 Manifest this update: Fri 25 Sep 2026 02:48:58 +0000 Manifest next update: Fri 02 Oct 2026 02:48:58 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: GM48Q31TgOPcJ8VoRdw4d/f4GXlHPPa09JhrFA+ELS4=) 2: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 3: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Sep 25 02:48:58 2026 GMT Not After : Oct 2 02:48:58 2026 GMT Subject: CN=6ab5e11b-e7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:2e:c8:e0:17:b2:33:e1:8c:6b:89:25:78: 8c:03:16:ec:fd:56:54:84:68:09:a3:0d:ce:a6:70: 3f:57:2d:f8:89:79:4a:eb:08:a3:f9:ab:fc:d6:ba: 4f:ff:53:f2:95:bf:46:42:a0:2e:3c:46:50:46:6f: f5:7e:f9:d1:81:dd:14:2f:a8:a1:f2:8c:83:55:f8: 17:1f:a9:de:52:6b:1a:a0:2c:f2:ac:21:fc:5c:54: 84:31:51:17:38:fb:59:4a:49:44:c0:98:1d:c7:34: 94:3e:5b:91:ed:6d:d5:42:3a:53:a8:70:15:d7:ed: ed:d7:0d:6f:8c:42:02:a3:5b:d1:77:bc:4d:b9:51: 3f:bb:70:3f:fc:1e:9f:dc:ca:6a:2c:78:fa:18:28: 67:bd:4a:5a:64:4b:98:97:5f:f4:fc:c4:3b:40:b1: 32:76:79:99:ee:66:8a:31:c4:8f:45:5d:b0:9f:e5: f9:d1:21:8c:e5:3f:16:0f:6b:22:90:f2:f9:3b:25: cf:e8:df:49:0a:45:84:25:86:24:ed:ff:03:78:64: de:3d:ea:4b:76:1f:5a:5e:0a:5c:06:8c:f8:75:42: ed:2c:43:02:9f:25:b1:41:af:0d:24:5d:2b:60:77: 48:23:0d:ce:0b:37:00:42:f4:52:4e:ba:6a:fe:64: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:B8:10:45:94:4A:56:7A:4B:2E:F0:63:9E:1A:F2:E2:98:BC:2E X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:67:35:b3:3c:ed:e7:99:9a:b5:dd:aa:a2:9a:9d:9e:f3:78: 6d:00:b5:47:f3:82:7a:56:f4:37:46:32:30:a7:5d:f3:42:2c: d3:ca:84:4a:aa:91:0b:f1:9c:f9:87:0c:60:ea:4d:63:d9:fa: 54:f5:ec:e8:f9:74:b3:e8:db:36:1a:60:7b:65:92:be:5b:b4: 3c:78:04:77:de:df:c9:01:fc:72:18:24:61:12:81:49:f9:45: 49:7f:81:d9:49:9f:c1:a5:4f:10:9d:76:d1:d3:a9:14:55:eb: 62:70:a2:35:9f:f1:c2:78:df:f3:c4:0f:b7:dc:69:b7:33:fa: 8a:d7:a9:c9:ed:c8:58:f9:2b:28:de:16:77:4b:e4:62:3c:66: c3:ef:29:73:9f:9d:b9:14:06:a0:96:f0:23:f6:3a:20:c8:b4: c2:d0:42:a4:ec:e1:b0:54:2b:f0:6e:89:a8:93:05:78:d0:a2: bd:c5:27:3c:a9:5b:c5:7c:d5:8b:84:fa:ec:17:db:f6:68:60: b5:b5:d6:5c:a8:4b:58:aa:78:92:04:73:cb:73:ef:20:6a:03: b2:13:74:20:04:6d:f6:88:46:ed:29:d5:64:3c:90:b6:4f:0b: b0:9c:82:de:57:6d:17:41:46:00:3c:d8:54:1c:26:bf:fd:79: ba:5f:bf:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwOTI1MDI0ODU4WhcNMjYxMDAyMDI0ODU4WjAYMRYwFAYD VQQDEw02YWI1ZTExYi1lN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdAuyOAXsjPhjGuJJXiMAxbs/VZUhGgJow3OpnA/Vy34iXlK6wij+av81rpP /1Pylb9GQqAuPEZQRm/1fvnRgd0UL6ih8oyDVfgXH6neUmsaoCzyrCH8XFSEMVEX OPtZSklEwJgdxzSUPluR7W3VQjpTqHAV1+3t1w1vjEICo1vRd7xNuVE/u3A//B6f 3MpqLHj6GChnvUpaZEuYl1/0/MQ7QLEydnmZ7maKMcSPRV2wn+X50SGM5T8WD2si kPL5OyXP6N9JCkWEJYYk7f8DeGTePepLdh9aXgpcBoz4dULtLEMCnyWxQa8NJF0r YHdIIw3OCzcAQvRSTrpq/mRAFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGMuBBF lEpWeksu8GOeGvLimLwuMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWc1szzt55matd2qopqdnvN4bQC1R/OCelb0N0YyMKdd80Is08qESqqRC/Gc +YcMYOpNY9n6VPXs6Pl0s+jbNhpge2WSvlu0PHgEd97fyQH8chgkYRKBSflFSX+B 2UmfwaVPEJ120dOpFFXrYnCiNZ/xwnjf88QPt9xptzP6itepye3IWPkrKN4Wd0vk Yjxmw+8pc5+duRQGoJbwI/Y6IMi0wtBCpOzhsFQr8G6JqJMFeNCivcUnPKlbxXzV i4T67Bfb9mhgtbXWXKhLWKp4kgRzy3PvIGoDshN0IARt9ohG7SnVZDyQtk8LsJyC 3ldtF0FGADzYVBwmv/15ul+/ug== -----END CERTIFICATE-----Generated at Sun Sep 27 04:34:40 2026 by rpki-client