$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: ExkYD35OZybG+fcWS6ZFo07G+h9DXHxPyxPY9E+mNlw= Subject key identifier: A7:28:C0:5A:1B:64:B6:C1:FA:FE:57:9D:AA:C8:B2:73:C1:AD:60:3A Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 02A3 Signing time: Thu 23 Jul 2026 02:39:52 +0000 Manifest this update: Thu 23 Jul 2026 02:39:52 +0000 Manifest next update: Thu 30 Jul 2026 02:39:52 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: uGLp0XmUXQY7DijGoc9cTGaXwNnd4Z/YG84sqadDtXU=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Jul 23 02:39:52 2026 GMT Not After : Jul 30 02:39:52 2026 GMT Subject: CN=6a617ef8-c4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:da:62:51:fd:2b:73:68:0b:19:63:62:d1:56: 3f:a0:3c:d2:c0:67:96:74:cc:f9:2b:83:68:dd:69: 38:df:5f:7d:2a:6e:e3:67:ec:8e:04:3d:41:2d:29: 80:51:59:aa:7c:03:f8:58:a7:25:8a:0e:09:12:6b: a3:e2:ef:27:ae:15:9a:e3:d3:e6:40:b6:9b:fd:65: 3b:f7:09:5b:61:6f:a9:84:8f:c2:55:d9:b7:e4:ae: 2b:d2:aa:2a:59:c8:21:88:1a:8a:8e:01:03:a1:0b: 59:23:f1:47:a1:ad:17:cd:d9:e9:8c:67:bc:b3:68: 9d:96:f1:b6:01:ec:2b:c6:08:34:7d:ec:a9:28:c6: ee:db:f9:03:6b:37:04:c4:2f:75:51:51:d4:4b:1b: fe:21:c2:65:b4:4b:46:b7:ca:66:b8:a6:71:89:4f: 42:9b:6b:5a:81:d9:a3:b4:74:d0:ba:59:ce:24:85: 7f:b2:b9:79:75:0d:f4:0c:8e:03:e2:0a:28:63:de: 14:28:26:3c:bf:21:78:5c:cc:7c:3d:71:b9:61:c1: 46:fd:ec:e0:48:33:5a:7d:65:ff:b4:2b:e7:d1:5c: 3a:9a:e3:54:59:a5:24:10:98:bb:cc:79:24:7b:46: b5:13:09:fe:6d:ad:29:da:cc:48:5f:05:d6:55:4b: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:28:C0:5A:1B:64:B6:C1:FA:FE:57:9D:AA:C8:B2:73:C1:AD:60:3A X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6c:2e:15:e1:ea:6f:c7:e6:fb:7e:c8:2e:dd:66:c3:64:b4: 4e:a3:20:e0:67:89:02:d6:70:eb:14:d6:a5:c6:f8:67:bd:b9: f8:46:1b:c0:b3:ec:ac:95:4c:3b:fd:74:0a:7d:a0:3c:04:ef: 24:24:a9:03:c8:9d:af:93:2b:e8:a0:52:fb:e5:9f:18:8f:02: 12:c3:94:63:c3:49:a4:62:4c:e1:d1:07:da:fd:34:4c:4c:19: 91:3e:c1:cf:f6:b2:71:27:c0:d1:6f:d8:72:7f:fa:a6:a3:16: 10:01:56:2c:d6:2e:14:37:66:46:3d:44:6c:e3:62:7f:6e:01: aa:18:60:c3:df:23:35:2d:18:50:9d:10:f6:f5:82:7e:5a:d4: 6e:29:43:8f:8f:19:14:71:74:8b:83:3d:8a:73:64:44:1e:63: 44:d1:96:ed:14:23:82:7a:07:06:78:9f:9e:69:6f:3d:1c:3c: d1:10:cf:f7:07:35:0b:8a:f7:70:ee:df:c3:e8:c1:9d:4e:27: c6:b3:46:db:92:80:0f:75:87:38:13:87:49:8b:d4:c3:1f:74: ba:8c:ac:72:e3:b5:7d:40:9e:3f:97:35:58:80:34:b2:23:49: f1:a6:da:fc:2d:c1:a6:ea:77:93:f1:b5:68:04:da:f1:88:0b: 10:c2:83:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjYwNzIzMDIzOTUyWhcNMjYwNzMwMDIzOTUyWjAYMRYwFAYD VQQDEw02YTYxN2VmOC1jNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dpiUf0rc2gLGWNi0VY/oDzSwGeWdMz5K4No3Wk43199Km7jZ+yOBD1BLSmA UVmqfAP4WKclig4JEmuj4u8nrhWa49PmQLab/WU79wlbYW+phI/CVdm35K4r0qoq WcghiBqKjgEDoQtZI/FHoa0XzdnpjGe8s2idlvG2Aewrxgg0feypKMbu2/kDazcE xC91UVHUSxv+IcJltEtGt8pmuKZxiU9Cm2tagdmjtHTQulnOJIV/srl5dQ30DI4D 4gooY94UKCY8vyF4XMx8PXG5YcFG/ezgSDNafWX/tCvn0Vw6muNUWaUkEJi7zHkk e0a1Ewn+ba0p2sxIXwXWVUvmBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcowFob ZLbB+v5XnarIsnPBrWA6MB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfWwuFeHqb8fm+37ILt1mw2S0TqMg4GeJAtZw6xTWpcb4Z725+EYbwLPsrJVM O/10Cn2gPATvJCSpA8idr5Mr6KBS++WfGI8CEsOUY8NJpGJM4dEH2v00TEwZkT7B z/aycSfA0W/Ycn/6pqMWEAFWLNYuFDdmRj1EbONif24Bqhhgw98jNS0YUJ0Q9vWC flrUbilDj48ZFHF0i4M9inNkRB5jRNGW7RQjgnoHBnifnmlvPRw80RDP9wc1C4r3 cO7fw+jBnU4nxrNG25KAD3WHOBOHSYvUwx90uoyscuO1fUCeP5c1WIA0siNJ8aba /C3Bpup3k/G1aATa8YgLEMKDog== -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:41 2026 by rpki-client