$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: O70ccuCkyrmhCIeX10GGjYXgD6dzNG9JE/rq4JdrqOg= Subject key identifier: D4:D8:13:0A:78:1E:CE:88:73:A8:2B:A4:52:F2:84:C7:DA:96:19:B7 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 021B Signing time: Thu 23 Jul 2026 04:12:26 +0000 Manifest this update: Thu 23 Jul 2026 04:12:26 +0000 Manifest next update: Thu 30 Jul 2026 04:12:26 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: NCl2iAm9fFXXfX07PwJlHE4BtMH6bjbCYEtdN3CRnZo=) 2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) 4: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Jul 23 04:12:26 2026 GMT Not After : Jul 30 04:12:26 2026 GMT Subject: CN=6a6194aa-1fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:f0:50:38:4e:d4:5f:e6:be:62:a7:8b:a8: 37:98:52:7b:42:1e:d3:7c:9d:2d:32:44:56:1a:8d: 0b:9b:90:c2:f4:19:ac:e1:8d:33:56:ce:b1:cd:66: 12:2e:75:9b:ee:54:cc:46:55:86:29:eb:7c:05:13: a5:4c:92:70:52:7b:7a:84:e0:9c:8f:e9:d8:fa:1b: 7a:de:78:32:a2:05:b5:32:7c:1e:a2:fc:a2:14:83: 7c:b0:cd:da:74:f9:ad:61:fe:9f:c8:88:07:79:9c: 1b:9d:30:8d:b7:6c:f8:93:8f:fc:31:ff:87:72:78: e1:26:c9:f6:70:e8:92:0e:08:82:8e:2a:7b:9b:d7: 5b:7d:09:44:69:00:df:53:02:ac:f0:dd:cc:f2:8f: 30:7b:2c:8d:2f:7b:e4:e8:82:23:e7:40:42:da:6f: 53:12:13:e5:87:63:7e:56:ee:cb:92:5d:e0:82:d4: 45:43:fb:26:bb:89:84:8b:f4:13:77:a0:03:75:ba: 54:64:c7:6c:40:b6:35:1d:84:54:e2:51:fc:7c:46: ee:cc:56:57:33:a8:85:24:e6:98:f6:dd:7b:a3:37: fb:52:c0:bd:f5:cb:2e:71:a3:9e:f4:e7:c8:3f:74: fd:5a:41:aa:20:9c:65:67:e9:a4:8e:a2:ed:53:c7: 98:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:13:0A:78:1E:CE:88:73:A8:2B:A4:52:F2:84:C7:DA:96:19:B7 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:15:82:aa:33:32:59:02:91:a6:c9:56:8e:13:82:30:f9:95: 38:f7:b4:ed:9a:6e:fc:ac:f4:6e:a6:9e:b6:d7:2a:f0:df:de: bd:db:9a:14:42:cf:60:e3:85:e1:0a:20:46:d3:a9:28:a0:4c: 2b:53:c2:ff:1c:43:a3:90:8f:ba:64:65:b7:46:34:b6:cf:d3: 44:21:c0:cb:87:8e:09:b3:65:ac:7e:3b:93:37:aa:1f:51:51: 1a:8f:f6:f6:2c:09:0f:41:f8:fe:1e:f9:5a:93:6f:4a:87:4e: 23:92:0d:ee:be:e5:e7:04:ca:e2:c8:b2:af:eb:67:1a:a7:a0: f3:cf:30:a0:d8:da:31:84:7b:b2:99:67:c9:65:6b:42:b5:92: ef:54:46:89:76:73:90:cf:12:5f:70:44:40:10:90:3b:63:7d: 65:e6:6b:7d:3b:65:4d:7c:50:bd:95:8c:67:04:bc:38:4f:b0: c1:81:e4:fc:61:7b:fb:41:00:f6:a7:6a:5f:fd:2a:72:b2:3b: 40:21:60:ce:0d:a1:c7:f0:29:96:02:4f:e0:ca:b6:00:b1:0b: a3:7f:8f:6d:c3:88:b5:49:0c:79:d4:a3:90:56:14:27:3d:1e: 27:f6:48:19:38:be:16:5b:9f:d4:44:59:ad:3a:46:35:46:f0: da:f2:ab:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwNzIzMDQxMjI2WhcNMjYwNzMwMDQxMjI2WjAYMRYwFAYD VQQDEw02YTYxOTRhYS0xZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunnwUDhO1F/mvmKni6g3mFJ7Qh7TfJ0tMkRWGo0Lm5DC9Bms4Y0zVs6xzWYS LnWb7lTMRlWGKet8BROlTJJwUnt6hOCcj+nY+ht63ngyogW1MnweovyiFIN8sM3a dPmtYf6fyIgHeZwbnTCNt2z4k4/8Mf+HcnjhJsn2cOiSDgiCjip7m9dbfQlEaQDf UwKs8N3M8o8weyyNL3vk6IIj50BC2m9TEhPlh2N+Vu7Lkl3ggtRFQ/smu4mEi/QT d6ADdbpUZMdsQLY1HYRU4lH8fEbuzFZXM6iFJOaY9t17ozf7UsC99csucaOe9OfI P3T9WkGqIJxlZ+mkjqLtU8eYKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNTYEwp4 Hs6Ic6grpFLyhMfalhm3MB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4xWCqjMyWQKRpslWjhOCMPmVOPe07Zpu/Kz0bqaettcq8N/evduaFELPYOOF 4QogRtOpKKBMK1PC/xxDo5CPumRlt0Y0ts/TRCHAy4eOCbNlrH47kzeqH1FRGo/2 9iwJD0H4/h75WpNvSodOI5IN7r7l5wTK4siyr+tnGqeg888woNjaMYR7splnyWVr QrWS71RGiXZzkM8SX3BEQBCQO2N9ZeZrfTtlTXxQvZWMZwS8OE+wwYHk/GF7+0EA 9qdqX/0qcrI7QCFgzg2hx/AplgJP4Mq2ALELo3+PbcOItUkMedSjkFYUJz0eJ/ZI GTi+Fluf1ERZrTpGNUbw2vKrBg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:27 2026 by rpki-client