$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft File: y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json) Hash identifier: U2g9YvW50TnIHZ+o2ij0fPd7J/j9qOuwTvC0NuU0MWQ= Subject key identifier: D8:F7:70:AB:74:72:59:A6:63:7A:8F:B8:5E:21:99:2C:64:8A:E8:DB Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Certificate serial: 1006 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft Manifest number: 0FF5 Signing time: Wed 22 Jul 2026 17:37:53 +0000 Manifest this update: Wed 22 Jul 2026 17:37:52 +0000 Manifest next update: Wed 29 Jul 2026 17:37:52 +0000 Files and hashes: 1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: FsoMFitjUjKux00198JQaCaMxfeB7FrQQwfeFFmvijs=) 2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: RJ14Wr4LV/wXhdMBKMrnSZc5mLGEgm5MX8wuJCoDPHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4102 (0x1006) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5C25, serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Validity Not Before: Jul 22 17:37:52 2026 GMT Not After : Jul 29 17:37:52 2026 GMT Subject: CN=6a60fff1-6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:e0:5c:d4:0c:6e:f0:85:44:5b:76:16:a2: 70:aa:14:a4:cb:5d:bb:d5:05:5d:00:47:e6:12:e1: aa:3b:70:a8:d1:a8:38:71:a8:ee:e9:ec:67:91:3a: e0:b1:38:84:3f:9d:f7:af:f3:d4:5a:0c:5a:24:24: 72:07:51:6a:ba:76:9e:c3:c4:fa:58:96:21:b2:e5: 54:b8:16:71:65:89:e2:89:03:09:03:65:2c:2a:e1: ae:b0:4b:a6:82:03:90:fb:a2:40:34:c2:ea:99:67: f2:17:fe:79:28:b7:07:fb:c8:22:80:4f:7b:c7:bb: 05:5f:37:8f:b9:58:71:d4:29:5e:c9:02:bf:df:a6: 18:8a:7f:8a:12:b7:53:36:4d:a6:90:ec:35:df:df: 01:98:83:07:05:af:47:b4:2a:e3:3f:76:c1:90:e7: 76:11:4c:07:57:53:c7:7b:b5:33:c2:56:1c:99:01: 6b:7d:52:46:8f:41:45:bf:f4:b6:e6:fa:bb:dc:8f: 85:46:7f:97:82:0d:a9:00:fd:7a:08:34:ea:45:ea: 95:c3:e1:34:93:83:d9:c8:ab:37:49:18:fd:5f:82: 82:57:13:2e:15:57:5d:e7:5c:31:2b:99:58:c0:3f: 6f:44:6e:10:15:96:d3:26:34:a7:0b:cc:fd:3c:d0: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F7:70:AB:74:72:59:A6:63:7A:8F:B8:5E:21:99:2C:64:8A:E8:DB X509v3 Authority Key Identifier: keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:84:17:42:88:fc:34:5f:b7:95:d9:c5:38:d1:17:9f:cf:e9: 1b:b5:de:29:cc:2e:04:75:96:4d:0b:52:65:ee:1a:be:23:3d: 7e:d9:98:00:31:3c:87:b9:23:98:66:49:61:62:a0:33:04:90: fb:22:59:2a:8c:af:96:6c:0a:65:e5:94:47:c5:79:56:32:d1: 5b:2b:03:5b:69:5b:29:95:b7:0f:f1:87:35:69:c2:d4:47:1e: 1e:cd:90:e8:39:cf:ef:37:8a:1d:17:97:8e:fc:b9:29:31:28: 71:b7:99:0c:5e:4c:97:da:0a:83:b3:e6:47:ee:5c:ff:d5:a8: d8:95:85:94:21:7d:33:40:85:24:a6:b0:11:7f:b3:3c:91:00: 62:97:20:45:38:cf:00:45:4d:9b:cc:b5:67:35:98:5f:f5:db: 2e:1c:9b:0c:33:39:71:87:42:f2:8a:a3:39:26:4a:78:e3:b6: e5:80:4f:50:8a:e2:70:52:05:a2:e2:f2:4b:08:58:d5:e3:1c: 94:d5:ba:f6:1b:45:9f:07:88:77:a6:cd:65:3e:7e:3d:0f:d2: 96:36:ad:7e:91:ea:a7:b6:ee:0c:59:0b:88:a1:86:e0:bc:35: 88:19:e5:c9:62:e3:ec:a3:08:0d:a1:af:2e:4a:33:14:de:18: ec:64:cd:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVDMjUxMTAvBgNVBAUTKENCRjJBOURBODhBQzA4RjhENTEwNkRFQ0JENzJENkZB MDlDODE4RTkwHhcNMjYwNzIyMTczNzUyWhcNMjYwNzI5MTczNzUyWjAYMRYwFAYD VQQDEw02YTYwZmZmMS02ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGHgXNQMbvCFRFt2FqJwqhSky1271QVdAEfmEuGqO3Co0ag4caju6exnkTrg sTiEP533r/PUWgxaJCRyB1Fqunaew8T6WJYhsuVUuBZxZYniiQMJA2UsKuGusEum ggOQ+6JANMLqmWfyF/55KLcH+8gigE97x7sFXzePuVhx1CleyQK/36YYin+KErdT Nk2mkOw1398BmIMHBa9HtCrjP3bBkOd2EUwHV1PHe7UzwlYcmQFrfVJGj0FFv/S2 5vq73I+FRn+Xgg2pAP16CDTqReqVw+E0k4PZyKs3SRj9X4KCVxMuFVdd51wxK5lY wD9vRG4QFZbTJjSnC8z9PNBokwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNj3cKt0 clmmY3qPuF4hmSxkiujbMB8GA1UdIwQYMBaAFMvyqdqIrAj41RBt7L1y1voJyBjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUMyNS82ODdBMTBBNjc2 NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQalZFRzNzdlhMVy1nbklH T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lfS3Ayb2lzQ1BqVkVHM3N2WExXLWduSUdPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUMyNS82ODdBMTBBNjc2NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQ alZFRzNzdlhMVy1nbklHT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE4QXQoj8NF+3ldnFONEXn8/pG7XeKcwuBHWWTQtSZe4aviM9ftmYADE8h7kj mGZJYWKgMwSQ+yJZKoyvlmwKZeWUR8V5VjLRWysDW2lbKZW3D/GHNWnC1EceHs2Q 6DnP7zeKHReXjvy5KTEocbeZDF5Ml9oKg7PmR+5c/9Wo2JWFlCF9M0CFJKawEX+z PJEAYpcgRTjPAEVNm8y1ZzWYX/XbLhybDDM5cYdC8oqjOSZKeOO25YBPUIricFIF ouLySwhY1eMclNW69htFnweId6bNZT5+PQ/SljatfpHqp7buDFkLiKGG4Lw1iBnl yWLj7KMIDaGvLkozFN4Y7GTNaQ== -----END CERTIFICATE-----Generated at Fri Jul 24 12:26:13 2026 by rpki-client