$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: cSWldfcyIInmgN2g2uDEtW+5G0AcLNFTEeNwwCLkzRI= Subject key identifier: 7E:55:F5:49:5F:A2:E9:3D:FF:AE:29:FD:6E:71:FE:23:EB:51:B9:DA Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0BA3 Signing time: Wed 22 Jul 2026 19:29:09 +0000 Manifest this update: Wed 22 Jul 2026 19:29:08 +0000 Manifest next update: Wed 29 Jul 2026 19:29:08 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: pC9auv3g6kEX6MAgknv2sy1dkSt246gH93EMnmAPugM=) 2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) 3: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) 4: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Jul 22 19:29:08 2026 GMT Not After : Jul 29 19:29:08 2026 GMT Subject: CN=6a611a05-84e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:0f:22:2b:e0:40:14:84:3f:8f:34:45:9d: 12:3e:f0:aa:62:31:b0:f7:21:31:ac:0f:98:b9:03: d9:21:65:1c:d1:20:e9:89:b1:52:97:61:99:4e:72: 3b:59:76:f4:12:02:53:0f:76:71:9f:24:b5:6a:57: e4:6c:4b:8a:23:01:2c:ac:85:71:07:ea:94:a9:1a: d6:fb:b1:c3:7c:b4:5d:4e:21:37:2b:07:49:f8:38: 89:14:a2:b0:b2:83:06:33:82:ee:02:73:08:33:fd: 9e:2f:4d:89:69:c8:75:aa:15:1c:0b:03:66:45:9c: f8:1a:bb:2e:5a:cd:b5:e9:ef:fd:51:e9:c4:89:b4: 8f:96:3a:22:b8:89:7c:19:a3:51:45:40:bf:ea:56: 7d:15:67:1d:1f:1d:5a:ae:85:7b:f4:f6:2e:47:bb: b5:4c:51:7d:f8:31:17:36:85:88:e0:65:73:5b:a2: 83:56:4b:1d:ad:dd:69:1e:71:c3:b6:b4:c6:ab:5a: 79:97:cf:e7:3b:dd:23:e6:41:74:96:80:c9:89:84: 58:bd:86:af:2c:34:dd:12:c3:18:2c:cf:75:cb:e3: 0a:e8:6d:07:db:20:32:b4:f0:fb:ba:3c:70:67:16: b7:28:0f:db:2e:71:78:93:cb:eb:eb:7d:36:29:bd: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:F5:49:5F:A2:E9:3D:FF:AE:29:FD:6E:71:FE:23:EB:51:B9:DA X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b7:3d:22:68:9f:95:ed:36:73:3b:fd:d2:c5:5b:b7:63:d2: 39:07:8c:5f:25:0c:b9:87:23:4d:6e:fa:3b:0c:23:78:a1:e7: c6:cd:e5:30:10:f8:7d:ea:9a:a8:2f:c6:42:71:21:11:5b:73: 3a:1b:02:75:c1:4d:18:76:08:98:a9:83:e0:bc:4e:f5:83:8a: 71:a5:14:5c:71:25:1c:fd:81:db:b1:b4:3a:fc:c2:fa:ee:1d: a4:8a:fd:4a:a9:5b:2d:32:30:2c:fb:aa:c5:8a:7b:20:fa:d4: 52:98:d2:14:05:87:54:dc:65:e6:ad:d5:e9:e0:a2:40:cd:7f: 31:df:c4:16:2d:dc:31:39:8c:93:f5:3d:c2:30:d0:cb:d6:85: ec:ec:00:34:f4:95:4b:33:3d:be:7f:27:5a:e8:9a:f1:a2:fa: 64:7c:59:9d:b4:26:b2:49:d0:e5:f0:e3:b2:1f:09:24:b5:cb: e8:27:34:ec:bb:9d:16:a9:3a:1a:1b:ab:f8:9b:90:98:d2:00: b1:4c:75:91:77:22:09:bd:4f:f6:c5:a5:82:76:fd:b4:e9:65: ba:34:d1:fa:6f:31:b0:cc:bc:2d:de:e4:7f:35:0e:7c:2a:dd: 24:cd:d6:ba:d5:3a:3c:2a:00:fc:8f:05:ed:fc:6b:84:0d:fb: 1c:d6:79:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYwNzIyMTkyOTA4WhcNMjYwNzI5MTkyOTA4WjAYMRYwFAYD VQQDEw02YTYxMWEwNS04NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPkPIivgQBSEP480RZ0SPvCqYjGw9yExrA+YuQPZIWUc0SDpibFSl2GZTnI7 WXb0EgJTD3ZxnyS1alfkbEuKIwEsrIVxB+qUqRrW+7HDfLRdTiE3KwdJ+DiJFKKw soMGM4LuAnMIM/2eL02Jach1qhUcCwNmRZz4GrsuWs216e/9UenEibSPljoiuIl8 GaNRRUC/6lZ9FWcdHx1aroV79PYuR7u1TFF9+DEXNoWI4GVzW6KDVksdrd1pHnHD trTGq1p5l8/nO90j5kF0loDJiYRYvYavLDTdEsMYLM91y+MK6G0H2yAytPD7ujxw Zxa3KA/bLnF4k8vr6302Kb21VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5V9Ulf ouk9/64p/W5x/iPrUbnaMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm7c9Imifle02czv90sVbt2PSOQeMXyUMuYcjTW76OwwjeKHnxs3lMBD4feqa qC/GQnEhEVtzOhsCdcFNGHYImKmD4LxO9YOKcaUUXHElHP2B27G0OvzC+u4dpIr9 SqlbLTIwLPuqxYp7IPrUUpjSFAWHVNxl5q3V6eCiQM1/Md/EFi3cMTmMk/U9wjDQ y9aF7OwANPSVSzM9vn8nWuia8aL6ZHxZnbQmsknQ5fDjsh8JJLXL6Cc07LudFqk6 Ghur+JuQmNIAsUx1kXciCb1P9sWlgnb9tOllujTR+m8xsMy8Ld7kfzUOfCrdJM3W utU6PCoA/I8F7fxrhA37HNZ5Tg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:54:37 2026 by rpki-client