$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft File: yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json) Hash identifier: NFqfhGHlmZjI8o+iXk07x/IdSXFxRteUzybEIpFNlhM= Subject key identifier: 56:22:BF:86:7D:1E:65:EA:97:C9:AE:70:87:92:3D:6D:C2:E3:BE:6A Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft Manifest number: D0 Signing time: Thu 23 Jul 2026 08:34:05 +0000 Manifest this update: Thu 23 Jul 2026 08:34:04 +0000 Manifest next update: Thu 30 Jul 2026 08:34:04 +0000 Files and hashes: 1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: YEfleNhi0g26ULjQ6+tplKTA1nLcmbPbSTVNnNfgUjg=) 2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Validity Not Before: Jul 23 08:34:04 2026 GMT Not After : Jul 30 08:34:04 2026 GMT Subject: CN=6a61d1fc-f984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:41:75:17:31:2c:e9:c0:a1:7a:ea:b6:9b:5f: 10:55:20:c5:9d:b1:77:4a:d7:ad:77:dc:a6:ab:d9: 7b:2e:64:17:96:cf:89:90:9a:06:e3:e6:63:42:e4: 20:df:e0:91:ae:82:77:78:e9:0e:84:ba:53:b2:73: 4d:12:09:c3:72:44:24:86:4e:15:f5:e3:02:49:de: 30:b5:07:6e:4e:8d:b7:1f:03:94:3c:ea:72:91:85: 92:74:a6:0a:54:5f:f2:a5:a2:d7:13:bc:4e:02:c8: 00:31:92:a1:b2:8b:bd:9d:05:f3:9d:13:7b:f5:23: 6c:84:58:79:0e:02:de:f0:b8:3c:ee:0c:20:58:7f: e3:52:97:f9:62:57:75:4a:a6:b2:88:85:0a:eb:2e: 49:85:a1:4a:c9:81:65:ad:bc:e6:6a:17:9f:73:a4: 4f:21:7d:b4:b5:b7:2e:cd:29:ff:b8:59:d5:9d:fa: 69:1e:e5:db:70:58:91:99:34:c7:a3:8b:cb:22:96: 3a:1f:7b:cf:1d:9e:e1:f7:5d:7b:8e:f7:b9:80:be: 85:f4:25:29:2d:9c:3f:7d:8d:c4:69:95:9d:87:fa: e6:73:ba:18:70:45:87:d4:44:84:4f:99:76:80:76: 0f:1d:5d:60:31:88:1a:80:26:f8:d1:1b:43:85:ca: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:22:BF:86:7D:1E:65:EA:97:C9:AE:70:87:92:3D:6D:C2:E3:BE:6A X509v3 Authority Key Identifier: keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:bd:26:75:b9:5b:8e:e1:13:c2:91:25:72:21:21:19:37:4d: 99:17:5f:29:02:b7:36:76:c7:6b:e1:59:93:75:8c:60:d6:ab: a4:77:8e:82:9c:9f:55:7a:85:63:15:13:32:49:ad:77:da:c3: 72:7f:e0:14:19:1e:ab:d0:50:f2:2a:f6:8c:20:0d:99:fb:a1: 06:26:d4:6e:ae:64:6d:e0:70:31:5e:c4:66:d8:66:76:09:c9: 61:1c:b7:1b:3f:a7:58:61:c6:39:6f:36:8a:0e:7e:21:e3:23: 69:32:80:ec:ee:08:61:63:24:b0:7a:ed:4d:89:0e:3f:ef:96: bb:7b:93:33:45:d5:ed:33:e2:88:c4:04:a7:bb:f3:bd:0a:42: 7c:b1:e9:6d:78:81:a2:ee:aa:75:39:86:2b:78:2a:94:bb:db: 97:56:3d:37:e5:a0:aa:f1:b0:35:28:5a:b6:8c:fb:e3:36:fb: b2:7f:43:58:cc:c6:ab:d0:c8:5b:06:40:e4:73:87:e6:4b:cc: 28:cb:0f:03:b0:05:44:e2:21:f8:a1:d3:e9:df:fa:66:e9:14: 6b:8c:9d:57:d3:0c:c5:13:41:09:db:c8:92:73:a2:68:59:ae: fa:69:1c:78:27:d2:47:90:49:6e:4d:4d:85:e9:16:83:8f:d2: 80:4b:41:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3RkUxMTAvBgNVBAUTKEM4MDk3M0QxNkNDQ0M5RTE4QzEzQTY4ODAzM0RDNEQw RjBFNjFDNEEwHhcNMjYwNzIzMDgzNDA0WhcNMjYwNzMwMDgzNDA0WjAYMRYwFAYD VQQDEw02YTYxZDFmYy1mOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kF1FzEs6cCheuq2m18QVSDFnbF3Stetd9ymq9l7LmQXls+JkJoG4+ZjQuQg 3+CRroJ3eOkOhLpTsnNNEgnDckQkhk4V9eMCSd4wtQduTo23HwOUPOpykYWSdKYK VF/ypaLXE7xOAsgAMZKhsou9nQXznRN79SNshFh5DgLe8Lg87gwgWH/jUpf5Yld1 SqayiIUK6y5JhaFKyYFlrbzmahefc6RPIX20tbcuzSn/uFnVnfppHuXbcFiRmTTH o4vLIpY6H3vPHZ7h9117jve5gL6F9CUpLZw/fY3EaZWdh/rmc7oYcEWH1ESET5l2 gHYPHV1gMYgagCb40RtDhcq9cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYiv4Z9 HmXql8mucIeSPW3C475qMB8GA1UdIwQYMBaAFMgJc9FszMnhjBOmiAM9xNDw5hxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdGRS9DMDg3NTcyMjRE OEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXllR01FNmFJQXozRTBQRG1I RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdGRS9DMDg3NTcyMjREOEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXll R01FNmFJQXozRTBQRG1IRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKb0mdblbjuETwpElciEhGTdNmRdfKQK3NnbHa+FZk3WMYNarpHeOgpyfVXqF YxUTMkmtd9rDcn/gFBkeq9BQ8ir2jCANmfuhBibUbq5kbeBwMV7EZthmdgnJYRy3 Gz+nWGHGOW82ig5+IeMjaTKA7O4IYWMksHrtTYkOP++Wu3uTM0XV7TPiiMQEp7vz vQpCfLHpbXiBou6qdTmGK3gqlLvbl1Y9N+WgqvGwNShatoz74zb7sn9DWMzGq9DI WwZA5HOH5kvMKMsPA7AFROIh+KHT6d/6ZukUa4ydV9MMxRNBCdvIknOiaFmu+mkc eCfSR5BJbk1NhekWg4/SgEtBrA== -----END CERTIFICATE-----Generated at Fri Jul 24 19:02:48 2026 by rpki-client