$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft File: yCFQSaXsETZftnQLghcGdiaArRc.mft (raw, json) Hash identifier: LPwA4fzbkUVm0zXKfOjnOyIUvJ3/xPOD96eeS9aqdJY= Subject key identifier: 8E:8A:CB:25:76:A2:9A:CF:12:6F:54:E3:9D:3C:56:64:09:89:CE:25 Authority key identifier: C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17 Certificate issuer: /CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft Manifest number: 01AC Signing time: Thu 23 Jul 2026 05:28:44 +0000 Manifest this update: Thu 23 Jul 2026 05:28:43 +0000 Manifest next update: Thu 30 Jul 2026 05:28:43 +0000 Files and hashes: 1: yCFQSaXsETZftnQLghcGdiaArRc.crl (hash: UvGlFwmBeDLKCZEI9SRXUmOeZd8v/+lNSanKQHv1a/8=) 2: 264C45FAFA3F11EE8A884F09C4F9AE02.roa (hash: 5wpit00HjrDdtoq3eiW6to5uWB0TX3js4LGWC8s6SMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC459, serialNumber=C8215049A5EC11365FB6740B821706762680AD17 Validity Not Before: Jul 23 05:28:43 2026 GMT Not After : Jul 30 05:28:43 2026 GMT Subject: CN=6a61a68c-a62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:e8:6d:bd:ea:4e:ea:e5:bb:cb:62:ea:0c: 73:38:0d:9c:0e:9b:bc:4e:2e:83:db:ba:9a:21:8a: f0:2c:fb:75:2a:bc:17:d7:42:a8:05:11:b6:71:8f: 12:c5:65:de:1a:23:a9:78:4c:6a:ee:52:25:b8:54: 98:13:1c:e4:64:97:ba:ae:c0:de:55:58:7a:6a:4e: ad:5a:7b:ea:fd:00:7c:58:f2:9b:31:72:da:7b:5f: 51:40:81:20:fe:2e:c7:25:a9:fd:94:59:8c:65:89: ef:59:c9:4f:66:c9:7a:ce:52:0c:b6:dc:7d:c9:6d: 2b:d9:1a:f4:d1:c8:89:ca:9e:22:29:e8:17:0c:b9: 52:aa:4b:6a:35:79:71:c0:1b:81:4b:23:c4:9f:5e: ee:6b:0b:f0:f1:e4:bb:0e:4e:2c:43:13:1b:e3:73: 50:4b:b4:71:c9:60:4e:4a:50:04:e5:fd:a9:50:b6: a4:9f:5f:72:a7:0b:96:71:b0:c1:03:da:3f:4c:c4: 63:0b:63:04:83:1d:ff:fa:cf:3f:6e:d6:7c:73:fb: 2b:a2:1e:65:6d:c6:80:b6:98:ab:6a:e1:47:3f:81: 2c:c8:49:81:2b:3e:e7:3e:0e:d0:b2:cc:10:a6:a5: 0e:d1:7f:50:f4:f8:ea:c2:7c:5e:60:48:bc:67:66: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:CB:25:76:A2:9A:CF:12:6F:54:E3:9D:3C:56:64:09:89:CE:25 X509v3 Authority Key Identifier: keyid:C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ec:78:9f:78:a0:3b:61:a9:f2:0d:a1:9a:8e:92:a6:69:1d: c1:74:9c:fc:65:5c:77:75:e1:0a:84:b8:f5:0e:95:f3:5f:f7: e8:18:07:0c:54:24:99:ac:6b:d9:7d:9c:57:66:a3:10:79:66: bc:bf:df:35:ff:df:9b:b1:32:2e:60:9b:7f:60:61:e8:c8:bd: d4:3e:28:48:1d:08:b5:e5:8d:44:ff:2b:90:5c:2c:5f:11:b2: 56:88:da:ef:b5:f2:a6:7b:40:5d:07:d3:bd:29:39:91:3a:48: b3:f4:dd:8d:05:ed:3b:07:a2:26:de:9e:39:18:1d:34:8f:be: 07:4f:b0:76:f3:e6:65:c3:50:31:4c:9c:6b:20:73:56:ac:1c: ea:b1:f8:6b:95:0f:44:a3:73:0d:c1:93:53:88:89:aa:7e:4a: c1:69:46:b9:a4:59:4b:b0:f3:57:20:7c:fb:cc:ad:d6:db:eb: 57:15:6f:e6:64:b9:1e:3a:99:50:08:5c:4c:bd:19:fd:af:b7: 04:2d:44:ca:87:47:af:3e:83:4b:b0:ff:fc:85:23:d7:01:33: c5:4a:ac:7d:15:c1:34:8c:7c:b4:18:84:bc:2e:63:f4:7f:fe: c1:d1:3f:01:44:11:99:c3:5d:97:9f:fb:0d:ab:40:2e:0f:13: 1a:29:77:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NTkxMTAvBgNVBAUTKEM4MjE1MDQ5QTVFQzExMzY1RkI2NzQwQjgyMTcwNjc2 MjY4MEFEMTcwHhcNMjYwNzIzMDUyODQzWhcNMjYwNzMwMDUyODQzWjAYMRYwFAYD VQQDEw02YTYxYTY4Yy1hNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbHobb3qTurlu8ti6gxzOA2cDpu8Ti6D27qaIYrwLPt1KrwX10KoBRG2cY8S xWXeGiOpeExq7lIluFSYExzkZJe6rsDeVVh6ak6tWnvq/QB8WPKbMXLae19RQIEg /i7HJan9lFmMZYnvWclPZsl6zlIMttx9yW0r2Rr00ciJyp4iKegXDLlSqktqNXlx wBuBSyPEn17uawvw8eS7Dk4sQxMb43NQS7RxyWBOSlAE5f2pULakn19ypwuWcbDB A9o/TMRjC2MEgx3/+s8/btZ8c/sroh5lbcaAtpirauFHP4EsyEmBKz7nPg7QsswQ pqUO0X9Q9PjqwnxeYEi8Z2aAVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6KyyV2 oprPEm9U4508VmQJic4lMB8GA1UdIwQYMBaAFMghUEml7BE2X7Z0C4IXBnYmgK0X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ1OS9BOTM1MDdCQ0Y2 RDUxMUVFQjg3ODNDMUVDNEY5QUUwMi95Q0ZRU2FYc0VUWmZ0blFMZ2hjR2RpYUFy UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDRlFTYVhzRVRaZnRuUUxnaGNHZGlhQXJSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ1OS9BOTM1MDdCQ0Y2RDUxMUVFQjg3ODNDMUVDNEY5QUUwMi95Q0ZRU2FYc0VU WmZ0blFMZ2hjR2RpYUFyUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcOx4n3igO2Gp8g2hmo6SpmkdwXSc/GVcd3XhCoS49Q6V81/36BgHDFQkmaxr 2X2cV2ajEHlmvL/fNf/fm7EyLmCbf2Bh6Mi91D4oSB0IteWNRP8rkFwsXxGyVoja 77XypntAXQfTvSk5kTpIs/TdjQXtOweiJt6eORgdNI++B0+wdvPmZcNQMUycayBz Vqwc6rH4a5UPRKNzDcGTU4iJqn5KwWlGuaRZS7DzVyB8+8yt1tvrVxVv5mS5HjqZ UAhcTL0Z/a+3BC1EyodHrz6DS7D//IUj1wEzxUqsfRXBNIx8tBiEvC5j9H/+wdE/ AUQRmcNdl5/7DatALg8TGil39A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:29:06 2026 by rpki-client