$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: Rfi0EWsSFm7gP9w9Y7a6oOXe/P2baAUFlQXwEU8rhzY= Subject key identifier: 8D:85:FA:D3:38:F6:68:C2:A4:E1:34:68:4F:D0:A5:12:05:00:90:4C Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0212 Signing time: Thu 23 Jul 2026 04:22:19 +0000 Manifest this update: Thu 23 Jul 2026 04:22:18 +0000 Manifest next update: Thu 30 Jul 2026 04:22:18 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: iugcy9Lts9iq2/ZGrkf/9KgdSY7fhqNYRSqJJgvHEnk=) 2: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 3: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Jul 23 04:22:18 2026 GMT Not After : Jul 30 04:22:18 2026 GMT Subject: CN=6a6196fb-f744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:2c:a7:16:60:f0:13:3b:d7:75:66:c0:0a: ab:c1:bf:a1:1d:b2:a6:2a:d5:eb:3c:65:ec:27:58: c1:23:b4:34:e5:95:80:eb:b9:00:70:23:d9:38:ac: 89:3b:c9:dd:fc:7f:14:7a:e9:e7:09:9f:f6:a0:b5: ba:50:b3:9e:52:1b:ad:9e:ef:10:00:c2:97:e7:60: 58:6f:b4:da:79:ee:d1:8d:b9:c9:ff:5c:d1:4f:42: 36:41:ef:38:ed:ae:ac:b0:5c:95:3e:6a:2d:15:12: ac:0c:3a:b4:f2:74:d2:1a:0f:c4:aa:56:5c:df:ce: 15:53:72:f6:d9:be:96:18:8b:37:ae:7c:bf:69:4d: 94:8b:d0:e7:c5:36:03:9f:aa:f3:8f:98:ed:47:80: 8c:32:a9:a4:4a:20:f7:66:db:1e:5b:a5:ba:c3:30: a2:3c:b5:be:8b:de:59:69:56:25:70:5c:6c:05:6c: 41:19:c7:9b:5e:4c:ce:12:80:5f:c2:7e:2f:7f:fd: 77:34:b1:f1:76:5e:4b:f9:ab:3c:49:ad:74:b1:6e: 7a:ce:8b:f5:fe:64:d9:42:58:b2:36:c0:a6:0c:9a: 75:28:14:36:c0:b0:a5:19:3d:99:f4:eb:db:ae:ae: d8:34:ab:95:60:c5:f4:a3:32:d7:49:12:5a:cb:26: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:FA:D3:38:F6:68:C2:A4:E1:34:68:4F:D0:A5:12:05:00:90:4C X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7e:a5:c9:20:ed:55:7a:b0:a0:96:25:2e:e2:d3:04:de:3e: 67:8d:39:6a:8d:9e:e4:17:a9:bf:57:52:93:8b:ec:c1:7c:8b: 58:c7:7c:74:38:b0:9b:10:96:81:09:67:db:a5:06:24:07:44: 83:75:8c:a1:63:70:6d:0a:23:6c:b6:e4:e8:9d:93:45:80:87: 70:f3:87:75:4d:fb:0a:6c:29:30:2f:68:ca:75:5a:ca:57:3e: b4:42:93:fa:c8:18:40:99:81:19:ed:46:cf:7c:ce:ac:0c:30: 0a:67:96:1a:3a:dd:79:32:87:f1:73:19:05:e2:fe:84:be:77: 1c:45:c0:22:8b:3a:70:4f:c2:22:fd:7a:37:55:68:92:5b:66: e8:6f:6c:90:d1:7d:8f:7f:18:24:ab:4b:6d:34:e9:94:fd:f7: 64:f0:d1:54:dc:71:70:50:db:4e:89:28:5a:14:a8:ab:18:7f: 22:49:7e:c0:55:16:a2:dd:99:e3:0d:fc:77:9f:04:9d:b3:1d: 87:79:07:58:1f:c5:0c:65:5d:49:6e:f7:52:7c:d3:65:ee:36: 5a:f5:13:e4:61:be:14:34:5f:73:58:a9:26:01:fe:06:ac:9f: e1:e6:ca:11:61:30:6a:8b:fb:73:14:5a:8d:90:89:52:bc:dd: 13:c7:8c:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwNzIzMDQyMjE4WhcNMjYwNzMwMDQyMjE4WjAYMRYwFAYD VQQDEw02YTYxOTZmYi1mNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMYspxZg8BM713VmwAqrwb+hHbKmKtXrPGXsJ1jBI7Q05ZWA67kAcCPZOKyJ O8nd/H8UeunnCZ/2oLW6ULOeUhutnu8QAMKX52BYb7Taee7RjbnJ/1zRT0I2Qe84 7a6ssFyVPmotFRKsDDq08nTSGg/EqlZc384VU3L22b6WGIs3rny/aU2Ui9DnxTYD n6rzj5jtR4CMMqmkSiD3ZtseW6W6wzCiPLW+i95ZaVYlcFxsBWxBGcebXkzOEoBf wn4vf/13NLHxdl5L+as8Sa10sW56zov1/mTZQliyNsCmDJp1KBQ2wLClGT2Z9Ovb rq7YNKuVYMX0ozLXSRJayybfbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2F+tM4 9mjCpOE0aE/QpRIFAJBMMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfX6lySDtVXqwoJYlLuLTBN4+Z405ao2e5Bepv1dSk4vswXyLWMd8dDiwmxCW gQln26UGJAdEg3WMoWNwbQojbLbk6J2TRYCHcPOHdU37CmwpMC9oynVaylc+tEKT +sgYQJmBGe1Gz3zOrAwwCmeWGjrdeTKH8XMZBeL+hL53HEXAIos6cE/CIv16N1Vo kltm6G9skNF9j38YJKtLbTTplP33ZPDRVNxxcFDbTokoWhSoqxh/Ikl+wFUWot2Z 4w38d58EnbMdh3kHWB/FDGVdSW73UnzTZe42WvUT5GG+FDRfc1ipJgH+Bqyf4ebK EWEwaov7cxRajZCJUrzdE8eMgQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:17:59 2026 by rpki-client