$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: opOH3Hl0PYikSchbBQQsNTghE3DHZVHd3UQL0VJ5HxY= Subject key identifier: 0A:87:A6:AB:E0:00:3C:80:B4:96:30:2F:D1:74:72:96:21:AE:03:7A Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 0157 Signing time: Wed 23 Sep 2026 04:58:15 +0000 Manifest this update: Wed 23 Sep 2026 04:58:14 +0000 Manifest next update: Wed 30 Sep 2026 04:58:14 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: T8ctHw8vpEzC6iKhAA8PgaCfFm78rvH2IUC/gjV+YkQ=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: ReDU3pM6puyTOqvPDYn/OPZQZEhbfRxZyleb6fyedWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Sep 23 04:58:14 2026 GMT Not After : Sep 30 04:58:14 2026 GMT Subject: CN=6ab35c66-42d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:d8:86:7d:d2:31:4d:9f:25:b2:89:70:96: f1:6c:96:98:0f:3e:b3:ca:68:37:fe:60:45:7a:fe: 98:41:65:01:f3:7e:d3:2c:e1:3e:05:64:91:2b:18: 66:16:38:98:0d:e5:5e:db:5c:ff:a9:d3:41:7d:a5: ff:d9:c3:ba:bb:a4:5c:c2:98:ee:7b:2e:ee:c7:28: 27:4f:2d:5d:08:e5:e0:8d:a4:31:4e:db:55:e5:da: 22:41:e3:80:ab:ab:dc:d7:39:ce:df:0d:9b:c8:a0: 96:58:2e:5f:2d:a1:f6:4a:d2:45:00:d1:ed:8d:39: db:87:17:9d:21:39:f3:e3:b1:ce:68:d4:55:86:86: b3:f9:fa:b5:09:59:30:73:1f:65:fb:5e:76:03:4a: ab:ca:7b:83:57:e0:83:2b:13:2b:30:93:c7:2c:d6: b3:41:d4:7e:64:6c:92:7d:85:1b:df:08:5a:b8:c2: 59:d2:10:8d:28:ea:e7:31:da:eb:1d:14:f2:77:6d: 60:ca:04:82:da:04:0c:46:7f:8a:69:61:7b:64:df: af:e4:12:73:ee:c2:f6:6e:5f:c3:de:79:07:69:30: 07:6f:83:d5:c5:b2:e9:9f:71:d1:30:9e:1c:cc:e5: 95:1f:65:f5:50:59:f5:ab:5a:84:1b:87:45:8f:3c: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:A6:AB:E0:00:3C:80:B4:96:30:2F:D1:74:72:96:21:AE:03:7A X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d8:a7:a5:cb:01:17:3f:c9:22:4c:9d:44:74:cb:a9:36:e4: 13:d8:43:2f:44:a0:3d:db:e6:e6:38:06:c3:07:c6:08:8a:a6: 77:2c:f7:dd:49:e8:d7:6c:b1:a3:20:36:b1:fd:3a:85:25:19: 13:4b:33:b8:67:08:f6:4a:c5:c7:41:c2:99:b1:cf:43:4c:eb: f3:bf:59:30:8c:7f:8d:b4:65:db:15:ce:8f:81:bf:63:f7:44: 6f:7b:f1:ff:b5:64:01:81:d2:8b:99:71:75:46:0f:e3:ae:16: 7b:26:41:9b:b9:3b:22:12:61:7f:1e:06:3d:bd:e8:83:20:51: 30:0b:2b:11:60:ac:78:e9:a3:80:dc:3c:88:02:2e:c0:ef:d1: 3e:e2:90:90:af:1a:1a:5d:b3:f2:d8:aa:a3:12:2f:8d:0a:1d: 39:75:6b:bd:89:fa:53:ba:23:e6:84:5a:54:dd:89:67:d3:fa: b0:64:3e:96:47:c7:86:92:83:91:e0:68:aa:23:53:ce:90:c5: 59:c3:a8:7b:57:2b:35:8e:ad:9f:c6:b4:ac:89:2d:0e:c3:1a: de:f2:4d:7d:d0:73:d5:da:b0:8b:d2:e7:85:de:70:98:5d:c7: 3b:2b:31:1a:36:d5:fb:66:a7:8e:9a:9e:e2:d6:59:39:82:91: b1:09:b2:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJGQzUxMTAvBgNVBAUTKEZEODhERUY5QTZCRERCRUE1OTM4OUVEQzYxNzFBQURD QTEwNkI1MDkwHhcNMjYwOTIzMDQ1ODE0WhcNMjYwOTMwMDQ1ODE0WjAYMRYwFAYD VQQDEw02YWIzNWM2Ni00MmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+XYhn3SMU2fJbKJcJbxbJaYDz6zymg3/mBFev6YQWUB837TLOE+BWSRKxhm FjiYDeVe21z/qdNBfaX/2cO6u6Rcwpjuey7uxygnTy1dCOXgjaQxTttV5doiQeOA q6vc1znO3w2byKCWWC5fLaH2StJFANHtjTnbhxedITnz47HOaNRVhoaz+fq1CVkw cx9l+152A0qrynuDV+CDKxMrMJPHLNazQdR+ZGySfYUb3whauMJZ0hCNKOrnMdrr HRTyd21gygSC2gQMRn+KaWF7ZN+v5BJz7sL2bl/D3nkHaTAHb4PVxbLpn3HRMJ4c zOWVH2X1UFn1q1qEG4dFjzyn4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqHpqvg ADyAtJYwL9F0cpYhrgN6MB8GA1UdIwQYMBaAFP2I3vmmvdvqWTie3GFxqtyhBrUJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FREFCRDIzMEFC M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTItcFpPSjdjWVhHcTNLRUd0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkZDNS9FREFCRDIzMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTIt cFpPSjdjWVhHcTNLRUd0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAENinpcsBFz/JIkydRHTLqTbkE9hDL0SgPdvm5jgGwwfGCIqmdyz33Uno12yx oyA2sf06hSUZE0szuGcI9krFx0HCmbHPQ0zr879ZMIx/jbRl2xXOj4G/Y/dEb3vx /7VkAYHSi5lxdUYP464WeyZBm7k7IhJhfx4GPb3ogyBRMAsrEWCseOmjgNw8iAIu wO/RPuKQkK8aGl2z8tiqoxIvjQodOXVrvYn6U7oj5oRaVN2JZ9P6sGQ+lkfHhpKD keBoqiNTzpDFWcOoe1crNY6tn8a0rIktDsMa3vJNfdBz1dqwi9Lnhd5wmF3HOysx GjbV+2anjpqe4tZZOYKRsQmySw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:08:53 2026 by rpki-client