$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: kP0lo23hiYQkH30D6ifPJbhhp5FhM2GX8BOs+tIQmIo= Subject key identifier: 40:EF:E6:D8:8F:E5:39:4F:45:5F:E2:82:0D:1C:69:61:5B:DA:F1:80 Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0AE6 Signing time: Wed 22 Jul 2026 19:45:58 +0000 Manifest this update: Wed 22 Jul 2026 19:45:57 +0000 Manifest next update: Wed 29 Jul 2026 19:45:57 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: vIkwzi0H50wLkF5OZ/nj376exRMepmFhwudes6xpnjg=) 2: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: 1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=) 3: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: B7PIpT06o5yz5X0ICfGhNE1RjQ8ofk6sdiEjNK1EArU=) 4: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: 9jHgiW6B1sqLvSJnd17xl6prg5mUxXRdfL0P2w6JRHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Jul 22 19:45:57 2026 GMT Not After : Jul 29 19:45:57 2026 GMT Subject: CN=6a611df5-6b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:39:87:ec:a8:d6:cc:55:0d:3a:fd:e3:d1: b7:1d:18:df:fb:83:d6:22:dc:45:e3:c1:81:a6:b5: 68:e9:42:a8:e6:8d:dd:4f:c4:4b:cd:28:44:a6:17: 15:17:3f:ea:1e:d3:71:fa:98:b3:42:60:b7:d6:d0: 45:d7:22:09:63:2c:f2:81:ee:ed:34:a7:d8:f8:3c: 1a:ee:5e:7c:37:d8:27:d8:87:fe:fe:e9:18:8b:01: c5:ca:a4:89:17:62:5c:ae:52:72:21:f5:f2:69:1c: 35:b0:c6:8c:5f:b9:77:7e:31:7c:09:a5:6c:3c:b2: 20:2d:be:06:de:ec:09:59:00:b3:de:79:84:75:2a: da:fe:5c:da:ad:99:7f:61:2a:64:46:50:85:8e:13: bb:a0:2c:85:14:e3:28:08:68:7a:ce:cb:1b:43:9d: ac:62:ec:1f:44:34:a2:b4:b4:e4:cd:4f:05:7a:ce: 46:62:fc:92:ac:1a:a1:37:d3:13:9e:2f:88:85:00: cf:0d:0d:6d:9d:7e:4f:93:50:13:d5:4a:92:8e:5a: e5:ab:f0:a0:3a:14:81:19:65:ee:c2:4a:25:ee:1e: a2:b9:05:f0:ff:c6:d9:e8:c5:49:58:dd:6f:ef:dc: a5:16:bf:cb:1e:5a:0f:8b:0d:88:cf:00:6e:fe:ae: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:E6:D8:8F:E5:39:4F:45:5F:E2:82:0D:1C:69:61:5B:DA:F1:80 X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:dc:6e:07:93:ee:e6:65:5d:75:19:f6:7a:01:4b:83:e1:38: 1c:a7:c9:7d:fa:e2:4d:b0:47:94:db:98:21:38:ab:f1:89:87: 63:46:48:6a:e2:38:10:13:7c:6e:c7:52:a0:77:71:2c:79:73: 2a:5b:80:4f:c8:76:02:f2:91:12:57:70:9e:3d:63:95:9c:d1: 2f:7f:3e:e8:32:61:02:e1:07:65:ba:6b:66:32:17:f0:92:c0: 09:08:fb:46:52:2b:2a:22:d4:6a:35:9f:c0:12:b6:00:f2:a9: 4c:cf:91:c3:cc:2a:1c:f3:bc:9f:04:c9:3e:1a:cb:b8:e8:20: 85:b8:5b:9a:a7:2e:f4:f1:c4:bd:12:e0:f6:26:ba:3c:fc:bb: b8:8a:30:c8:8d:86:86:cd:89:f3:2b:20:97:6f:6e:9e:bd:36: 18:62:1a:f3:b4:de:1b:e9:37:9b:2a:0c:a0:f5:44:48:73:12: 36:3d:1b:c7:1a:3c:90:d9:6d:04:4e:92:48:4a:32:a5:3a:8e: 6d:bc:42:73:0f:62:d3:c7:dd:82:13:be:a9:ea:73:8b:f0:cf: 9a:a3:e5:09:3f:9a:3e:3a:15:43:55:a1:24:77:28:86:8a:46: 31:65:20:e7:8e:42:37:ce:09:cc:fa:73:9f:1f:4e:e2:32:d3: 18:96:fa:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYwNzIyMTk0NTU3WhcNMjYwNzI5MTk0NTU3WjAYMRYwFAYD VQQDEw02YTYxMWRmNS02YjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXk5h+yo1sxVDTr949G3HRjf+4PWItxF48GBprVo6UKo5o3dT8RLzShEphcV Fz/qHtNx+pizQmC31tBF1yIJYyzyge7tNKfY+Dwa7l58N9gn2If+/ukYiwHFyqSJ F2JcrlJyIfXyaRw1sMaMX7l3fjF8CaVsPLIgLb4G3uwJWQCz3nmEdSra/lzarZl/ YSpkRlCFjhO7oCyFFOMoCGh6zssbQ52sYuwfRDSitLTkzU8Fes5GYvySrBqhN9MT ni+IhQDPDQ1tnX5Pk1AT1UqSjlrlq/CgOhSBGWXuwkol7h6iuQXw/8bZ6MVJWN1v 79ylFr/LHloPiw2IzwBu/q66cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDv5tiP 5TlPRV/igg0caWFb2vGAMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAdxuB5Pu5mVddRn2egFLg+E4HKfJffriTbBHlNuYITir8YmHY0ZIauI4EBN8 bsdSoHdxLHlzKluAT8h2AvKREldwnj1jlZzRL38+6DJhAuEHZbprZjIX8JLACQj7 RlIrKiLUajWfwBK2APKpTM+Rw8wqHPO8nwTJPhrLuOgghbhbmqcu9PHEvRLg9ia6 PPy7uIowyI2Ghs2J8ysgl29unr02GGIa87TeG+k3myoMoPVESHMSNj0bxxo8kNlt BE6SSEoypTqObbxCcw9i08fdghO+qepzi/DPmqPlCT+aPjoVQ1WhJHcohopGMWUg 545CN84JzPpznx9O4jLTGJb6Gw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:38:41 2026 by rpki-client