$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: qNcenRyN3nxsaBjFhETMybtXW0oy4JYCu80brxBWym8= Subject key identifier: 10:6A:52:E9:55:27:C3:BA:0F:1F:AC:09:90:E8:DB:4B:D4:F3:E5:C6 Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 25A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 2595 Signing time: Fri 24 Jul 2026 15:50:57 +0000 Manifest this update: Fri 24 Jul 2026 15:50:57 +0000 Manifest next update: Fri 31 Jul 2026 15:50:57 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: uBJRgcTKT4swace3Qd5rDhtulsjFyBzBl1NC4Jca3qw=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: rbb9vzT6ZdvpjVZ3GXOm6few5Y28G7tYzO6mN3D77lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9641 (0x25a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Jul 24 15:50:57 2026 GMT Not After : Jul 31 15:50:57 2026 GMT Subject: CN=6a6389e1-5b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e3:89:80:e5:d9:e2:66:7b:d6:ab:76:64:14: d8:68:f7:59:b1:b5:dd:9b:05:20:c4:fc:84:cb:33: 17:b9:12:a8:bc:91:d0:75:8a:c3:26:b9:d0:e7:af: 2e:03:3c:81:23:4f:36:6a:89:a2:56:3b:4f:18:d0: ed:ee:fc:ec:6b:59:e4:b9:1c:df:81:3a:6d:2e:62: 14:8b:37:80:d9:73:4d:9c:0e:93:57:41:a9:4b:96: ee:7e:68:e0:63:ac:87:01:95:ba:4c:c6:29:f6:4f: c1:09:d8:d4:1d:1c:68:7a:b3:db:0a:86:16:d1:37: c7:a2:89:1e:5e:66:74:21:e0:fb:a6:75:72:58:45: 53:0a:15:9b:3f:02:ab:dd:3d:2c:d5:ec:2e:5d:24: 7f:34:24:ba:1b:a8:e4:18:94:73:42:06:df:26:6d: d2:62:7a:fa:11:01:7d:19:72:45:c7:74:59:19:9b: cf:dc:21:88:f3:24:35:41:30:14:34:75:d8:a8:74: 78:8b:92:05:8c:8e:05:83:ff:58:a6:e9:e1:f0:c9: 38:66:5c:99:8c:4d:ac:a2:0b:92:53:85:f8:23:b9: db:cc:93:d6:6c:e5:f0:75:02:52:a9:c0:25:de:86: 2e:84:40:f6:9b:4d:4a:a7:8c:67:79:10:71:ba:3a: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:52:E9:55:27:C3:BA:0F:1F:AC:09:90:E8:DB:4B:D4:F3:E5:C6 X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3b:23:8e:a9:58:77:c6:a6:d0:51:58:58:df:c9:d1:4a:c4: 26:08:dd:93:bb:05:82:15:e9:9b:b1:0d:11:f8:ac:51:ad:67: 82:3d:a4:89:90:62:55:f1:4f:8f:9b:70:72:82:2d:97:be:82: 75:77:a0:53:a6:04:f4:28:45:56:10:e4:82:2f:05:d4:cd:ed: ad:ae:dd:9e:82:05:90:7a:c1:87:e8:01:71:df:c2:ac:ac:66: 98:58:97:c6:dd:15:e5:e3:68:6b:99:e4:c7:8b:bf:6b:09:9c: 28:30:83:c2:85:c9:74:3d:e0:df:1f:59:71:e1:0a:c7:54:88: 70:97:8f:ce:f7:22:ba:5c:a3:76:f9:c4:57:6f:90:5c:f1:ba: eb:15:4d:51:eb:7c:1c:9e:dc:24:cf:d8:e0:2b:f5:d1:b8:c3: d4:3c:af:49:37:1b:fa:51:9d:76:8c:e5:a7:09:bc:8b:c1:03: cd:98:54:c6:5e:f0:3e:3a:83:b0:62:fe:3b:cb:68:ff:6d:de: 39:43:67:b2:31:78:67:1f:93:2a:7b:15:32:93:71:26:ff:73: da:76:e9:54:4c:0e:0e:f5:08:89:4d:68:de:5a:66:8f:9a:b6: ca:31:4f:83:66:74:46:cf:bb:dc:db:ef:11:00:2f:0d:6b:85: 38:1b:99:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjYwNzI0MTU1MDU3WhcNMjYwNzMxMTU1MDU3WjAYMRYwFAYD VQQDEw02YTYzODllMS01YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+OJgOXZ4mZ71qt2ZBTYaPdZsbXdmwUgxPyEyzMXuRKovJHQdYrDJrnQ568u AzyBI082aomiVjtPGNDt7vzsa1nkuRzfgTptLmIUizeA2XNNnA6TV0GpS5bufmjg Y6yHAZW6TMYp9k/BCdjUHRxoerPbCoYW0TfHookeXmZ0IeD7pnVyWEVTChWbPwKr 3T0s1ewuXSR/NCS6G6jkGJRzQgbfJm3SYnr6EQF9GXJFx3RZGZvP3CGI8yQ1QTAU NHXYqHR4i5IFjI4Fg/9Ypunh8Mk4ZlyZjE2soguSU4X4I7nbzJPWbOXwdQJSqcAl 3oYuhED2m01Kp4xneRBxujoZ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBqUulV J8O6Dx+sCZDo20vU8+XGMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUzsjjqlYd8am0FFYWN/J0UrEJgjdk7sFghXpm7ENEfisUa1ngj2kiZBiVfFP j5twcoItl76CdXegU6YE9ChFVhDkgi8F1M3tra7dnoIFkHrBh+gBcd/CrKxmmFiX xt0V5eNoa5nkx4u/awmcKDCDwoXJdD3g3x9ZceEKx1SIcJePzvciulyjdvnEV2+Q XPG66xVNUet8HJ7cJM/Y4Cv10bjD1DyvSTcb+lGddozlpwm8i8EDzZhUxl7wPjqD sGL+O8to/23eOUNnsjF4Zx+TKnsVMpNxJv9z2nbpVEwODvUIiU1o3lpmj5q2yjFP g2Z0Rs+73NvvEQAvDWuFOBuZCw== -----END CERTIFICATE-----Generated at Fri Jul 24 21:38:51 2026 by rpki-client