$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json) Hash identifier: VIhuBB8sjC6Ya5ES756/J4ei+B4pguewLa70X0bHgo4= Subject key identifier: 83:32:CA:42:32:5B:4D:06:C2:92:7B:62:D4:3F:DF:7D:57:34:ED:DA Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft Manifest number: 0867 Signing time: Wed 22 Jul 2026 21:20:57 +0000 Manifest this update: Wed 22 Jul 2026 21:20:57 +0000 Manifest next update: Wed 29 Jul 2026 21:20:57 +0000 Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: YXHnjSIe/g872DQj2ISNJWdJ92wA/d4ycd5Ky0B903Y=) 2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: ariwM0UNsN9RHsI11tEsRZAkUo+gH7DpYJGLIoLRlPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Validity Not Before: Jul 22 21:20:57 2026 GMT Not After : Jul 29 21:20:57 2026 GMT Subject: CN=6a613439-9a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4d:07:df:f2:ba:87:fc:f2:c1:5d:8c:bd:9a: 8e:59:cf:51:ba:1e:86:6a:49:93:e9:83:99:ed:49: 5d:48:a6:ea:8a:e6:7b:39:b3:41:cd:f4:8b:71:e5: dd:dc:04:1e:21:6a:32:da:6b:d8:c4:2b:e5:9c:39: 25:78:ef:a3:24:2d:18:91:c0:36:68:69:fe:cc:0e: 98:4f:7b:b7:66:7d:c6:81:da:aa:c0:df:ea:4c:2f: 6c:58:41:44:4d:0a:9d:ab:12:81:0e:fc:01:69:db: b5:99:10:5d:e6:d7:ab:92:08:0e:34:f0:e2:e7:88: 14:7c:28:26:31:f0:2e:45:ab:8b:22:44:99:9f:39: 6f:50:2b:ec:c9:8a:0f:95:a8:11:cf:fc:dc:44:04: 78:45:7d:22:d4:58:ee:1f:32:37:3b:20:86:43:c0: f2:2a:25:a2:a9:f2:b3:73:95:da:cd:85:9f:da:39: 77:9f:5d:02:f5:d7:df:44:13:cc:ff:79:17:3d:41: 5e:d1:b5:7b:b2:d9:ad:01:69:9e:ca:aa:53:6d:25: c4:68:2c:8c:58:a7:de:9c:ca:22:99:6d:95:9d:bc: 2d:2e:95:1e:5b:55:b0:80:55:68:6a:1b:9a:64:50: 37:57:36:92:b2:ef:6d:03:a3:a0:b5:66:04:dd:d8: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:32:CA:42:32:5B:4D:06:C2:92:7B:62:D4:3F:DF:7D:57:34:ED:DA X509v3 Authority Key Identifier: keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:05:2e:54:1e:bd:b4:f0:94:c6:db:fa:c5:cf:b3:0e:09:f1: 30:80:05:f6:0a:13:e6:9e:d7:52:35:31:04:73:62:18:39:a4: 44:a5:bf:62:f2:8d:30:76:c2:a8:64:f8:98:0c:8d:cd:38:76: f0:e6:11:04:cd:1d:29:47:bd:31:18:dc:47:4b:32:6a:bd:10: a2:62:7a:74:83:c3:b6:ff:b6:dc:a9:95:dd:94:b0:a5:63:b0: 9d:7a:9f:0f:2c:0d:a3:6d:bb:d3:0f:84:00:fb:c5:f5:e9:0b: e1:ed:e6:1b:b8:0e:94:bf:c4:cc:c1:58:f0:2a:43:a7:98:74: 5d:3d:02:03:65:b7:8d:b1:2c:0b:dd:47:0a:70:cf:f3:41:ed: 4d:bf:c9:11:6e:78:a8:21:f7:9b:6e:3a:96:8a:2e:61:41:81: eb:93:75:08:5f:cb:ae:bc:b7:48:a6:fc:f7:71:b7:7e:b6:5e: 0f:51:45:62:ee:09:29:6c:3a:2a:8b:2d:e5:95:af:d5:86:f4: d4:0c:7b:67:e7:f0:18:3d:21:7f:04:d4:d0:ed:cb:77:04:c2: 75:66:eb:b1:53:ec:c5:5f:41:ca:c1:e6:83:a4:6d:f2:d4:ce: 54:27:e9:46:bb:ae:67:90:72:1f:99:ab:ca:52:f6:df:a8:a5: 23:21:34:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0MkUxMTAvBgNVBAUTKENBODVFMTMzQzFFMjM5NjE0QzlDNTc3ODAxMThCREIz MDk1MjhFNzYwHhcNMjYwNzIyMjEyMDU3WhcNMjYwNzI5MjEyMDU3WjAYMRYwFAYD VQQDEw02YTYxMzQzOS05YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6U0H3/K6h/zywV2MvZqOWc9Ruh6GakmT6YOZ7UldSKbqiuZ7ObNBzfSLceXd 3AQeIWoy2mvYxCvlnDkleO+jJC0YkcA2aGn+zA6YT3u3Zn3GgdqqwN/qTC9sWEFE TQqdqxKBDvwBadu1mRBd5terkggONPDi54gUfCgmMfAuRauLIkSZnzlvUCvsyYoP lagRz/zcRAR4RX0i1FjuHzI3OyCGQ8DyKiWiqfKzc5XazYWf2jl3n10C9dffRBPM /3kXPUFe0bV7stmtAWmeyqpTbSXEaCyMWKfenMoimW2VnbwtLpUeW1WwgFVoahua ZFA3VzaSsu9tA6OgtWYE3diEAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMyykIy W00GwpJ7YtQ/331XNO3aMB8GA1UdIwQYMBaAFMqF4TPB4jlhTJxXeAEYvbMJUo52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQyRS9ENkE3RkY0ODBE MTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9XRk1uRmQ0QVJpOXN3bFNq blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvWGhNOEhpT1dGTW5GZDRBUmk5c3dsU2puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQyRS9ENkE3RkY0ODBEMTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9X Rk1uRmQ0QVJpOXN3bFNqblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfAUuVB69tPCUxtv6xc+zDgnxMIAF9goT5p7XUjUxBHNiGDmkRKW/YvKNMHbC qGT4mAyNzTh28OYRBM0dKUe9MRjcR0syar0QomJ6dIPDtv+23KmV3ZSwpWOwnXqf DywNo2270w+EAPvF9ekL4e3mG7gOlL/EzMFY8CpDp5h0XT0CA2W3jbEsC91HCnDP 80HtTb/JEW54qCH3m246loouYUGB65N1CF/Lrry3SKb893G3frZeD1FFYu4JKWw6 Kost5ZWv1Yb01Ax7Z+fwGD0hfwTU0O3LdwTCdWbrsVPsxV9BysHmg6Rt8tTOVCfp RruuZ5ByH5mrylL236ilIyE0gA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:34 2026 by rpki-client