$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: hi6rEyFciBslqJwaB209n06mLA7UyYyfkiBYzCRZg1k= Subject key identifier: 70:EF:B5:C4:5F:98:9A:E2:6F:35:C5:F6:E9:ED:A9:86:27:C4:02:33 Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 0137 Signing time: Thu 23 Jul 2026 07:09:08 +0000 Manifest this update: Thu 23 Jul 2026 07:09:07 +0000 Manifest next update: Thu 30 Jul 2026 07:09:07 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: 3QElTaqtZx8Pt0HMdVQnPBX7McomIbE5RaDSjccDizk=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: ReDU3pM6puyTOqvPDYn/OPZQZEhbfRxZyleb6fyedWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Jul 23 07:09:07 2026 GMT Not After : Jul 30 07:09:07 2026 GMT Subject: CN=6a61be13-e0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:a7:03:38:4c:ad:21:75:c3:d9:d8:a9:e5: c5:d4:b6:cc:5f:ba:75:8d:0c:e9:9b:97:e6:f4:49: f4:0e:23:1f:09:a8:93:59:50:23:e7:91:70:f0:d1: ec:c7:f0:0d:09:10:be:8f:0a:65:84:21:d2:3b:f6: 82:5e:42:f6:47:27:c4:a5:ff:b2:71:8c:1e:8a:14: aa:6d:54:54:f2:9e:fb:9b:93:2d:38:9c:db:4c:e9: 43:3a:27:5a:a9:bd:ab:a8:2a:bc:11:bc:17:56:1c: b0:4a:9b:ec:11:83:89:ab:3b:6c:5a:8c:8a:f8:52: a0:c5:cd:03:d7:6d:a2:29:a2:08:be:47:f9:98:dd: 92:87:f2:5f:df:c8:df:fb:f9:f5:dd:06:f2:76:82: 24:e9:0e:61:13:79:ba:fb:2a:c4:08:76:2e:48:97: e9:8f:7a:64:45:42:a6:9f:17:9a:85:f8:e9:98:c7: d9:a6:ac:d7:49:0f:d9:d6:58:65:4c:7d:3d:62:dd: 8a:42:82:05:4b:6e:7e:86:2c:03:2d:0e:18:8d:99: 27:e4:ba:9e:81:c0:36:9d:7d:97:9b:bd:8a:d1:97: 59:87:48:25:13:c9:6e:21:b0:55:67:7c:ef:ac:3f: 4f:19:b8:cc:85:3a:c4:34:f2:da:e1:19:d9:10:37: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EF:B5:C4:5F:98:9A:E2:6F:35:C5:F6:E9:ED:A9:86:27:C4:02:33 X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:39:9f:9a:63:19:11:cc:2c:7a:41:8c:b1:67:87:4c:ae:1e: 06:65:44:62:07:78:a4:ce:87:5e:56:97:2f:e5:ce:79:6d:a1: 7e:2f:24:1c:3c:e7:4b:4b:3d:54:38:cd:c3:45:73:2d:74:22: ca:1c:6d:31:2a:f1:62:38:27:16:a3:10:b2:e4:b7:62:d0:7d: c2:37:d0:0a:b7:03:b8:b0:58:e0:22:45:bb:32:25:3c:1c:03: 1a:62:d0:71:da:97:9a:99:42:22:67:9d:67:3e:d8:28:1d:4b: 56:e9:40:de:d0:17:b0:50:66:aa:2c:48:1d:0c:2e:1c:c1:f2: 1c:fc:5c:4e:b0:92:b0:8f:6d:36:4c:f5:66:3f:68:bb:b2:bd: fa:b8:07:41:f8:66:6e:e5:a1:7a:5f:f4:63:51:c1:22:9e:7e: 2a:10:86:56:66:b0:72:ee:d9:53:6f:6e:2b:5e:60:ad:8b:b6: 0b:89:c8:7f:14:7c:e0:aa:54:1b:09:cb:1c:e8:70:2a:d0:b7: 75:79:92:a6:09:0c:95:45:86:f1:7e:3d:98:6d:d6:64:bb:f0: 24:d2:53:8d:8f:14:0b:2e:43:aa:91:d2:f7:20:de:62:85:16: 10:87:71:97:81:63:65:43:ee:a1:97:80:66:cb:92:01:ff:b4: 85:7a:45:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJGQzUxMTAvBgNVBAUTKEZEODhERUY5QTZCRERCRUE1OTM4OUVEQzYxNzFBQURD QTEwNkI1MDkwHhcNMjYwNzIzMDcwOTA3WhcNMjYwNzMwMDcwOTA3WjAYMRYwFAYD VQQDEw02YTYxYmUxMy1lMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubGnAzhMrSF1w9nYqeXF1LbMX7p1jQzpm5fm9En0DiMfCaiTWVAj55Fw8NHs x/ANCRC+jwplhCHSO/aCXkL2RyfEpf+ycYweihSqbVRU8p77m5MtOJzbTOlDOida qb2rqCq8EbwXVhywSpvsEYOJqztsWoyK+FKgxc0D122iKaIIvkf5mN2Sh/Jf38jf +/n13QbydoIk6Q5hE3m6+yrECHYuSJfpj3pkRUKmnxeahfjpmMfZpqzXSQ/Z1lhl TH09Yt2KQoIFS25+hiwDLQ4YjZkn5LqegcA2nX2Xm72K0ZdZh0glE8luIbBVZ3zv rD9PGbjMhTrENPLa4RnZEDdcHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDvtcRf mJribzXF9untqYYnxAIzMB8GA1UdIwQYMBaAFP2I3vmmvdvqWTie3GFxqtyhBrUJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FREFCRDIzMEFC M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTItcFpPSjdjWVhHcTNLRUd0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkZDNS9FREFCRDIzMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTIt cFpPSjdjWVhHcTNLRUd0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEzmfmmMZEcwsekGMsWeHTK4eBmVEYgd4pM6HXlaXL+XOeW2hfi8kHDznS0s9 VDjNw0VzLXQiyhxtMSrxYjgnFqMQsuS3YtB9wjfQCrcDuLBY4CJFuzIlPBwDGmLQ cdqXmplCImedZz7YKB1LVulA3tAXsFBmqixIHQwuHMHyHPxcTrCSsI9tNkz1Zj9o u7K9+rgHQfhmbuWhel/0Y1HBIp5+KhCGVmawcu7ZU29uK15grYu2C4nIfxR84KpU GwnLHOhwKtC3dXmSpgkMlUWG8X49mG3WZLvwJNJTjY8UCy5DqpHS9yDeYoUWEIdx l4FjZUPuoZeAZsuSAf+0hXpF0Q== -----END CERTIFICATE-----Generated at Thu Jul 23 22:57:38 2026 by rpki-client