$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json) Hash identifier: NtjfQGp3IU2K5YajOwkwsRnn513ufJk7FJSWN+ct4wI= Subject key identifier: 94:E6:FD:2D:EA:FF:19:2A:6C:38:91:29:B2:E0:C8:02:9A:CF:E6:E4 Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47 Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft Manifest number: F7 Signing time: Thu 23 Jul 2026 08:02:53 +0000 Manifest this update: Thu 23 Jul 2026 08:02:53 +0000 Manifest next update: Thu 30 Jul 2026 08:02:53 +0000 Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: CsF5gwz+8HJJpEpbJHmwkD9PSDlF8KNMorjyuiI2+r8=) 2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47 Validity Not Before: Jul 23 08:02:53 2026 GMT Not After : Jul 30 08:02:53 2026 GMT Subject: CN=6a61caad-80de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:f6:e6:31:21:f6:e6:f7:54:22:02:48:47: b4:3b:7a:f6:49:2c:72:d0:92:6d:d5:c6:7b:c2:eb: 2f:8a:6d:f4:03:07:00:46:b9:dc:0d:a1:db:16:ad: b4:a7:00:56:06:70:3b:df:65:d4:0c:e1:41:0a:4a: 5d:b8:49:01:dd:02:4f:ac:f1:d8:02:54:33:94:eb: ef:8a:fb:5c:ac:19:5b:42:e9:4e:97:85:ca:60:5c: b5:82:95:38:73:60:56:69:63:9c:f0:70:db:4b:f5: ab:5c:65:5d:4f:02:47:98:06:14:ad:ef:f9:b3:ec: 0e:6b:f9:17:ac:9a:ba:70:38:67:bb:67:84:91:50: 11:51:f2:30:fa:48:a8:41:8b:0d:1f:cf:83:9b:43: d1:31:90:f9:e3:b1:24:4d:a4:a4:0b:e5:c4:f8:1c: 93:a6:b0:92:a8:f4:d6:81:b2:7c:f6:2d:3c:dd:e1: a2:90:fb:d4:9c:34:11:8b:5c:8a:35:e0:86:a0:8e: ca:98:ef:ba:55:c4:cd:39:e4:ce:80:f2:8f:e7:72: 63:86:e5:78:b7:37:c6:76:24:cf:5b:d6:7f:5f:90: d5:05:55:5a:25:f2:1a:66:0b:f1:6b:ed:5f:d1:99: 62:ea:43:06:ed:ba:ab:7b:82:44:5a:46:a2:47:2b: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E6:FD:2D:EA:FF:19:2A:6C:38:91:29:B2:E0:C8:02:9A:CF:E6:E4 X509v3 Authority Key Identifier: keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:56:fe:34:42:13:87:12:61:82:77:63:f9:be:06:9a:78:5c: 5f:67:fc:74:92:23:e3:5b:1e:03:91:ff:2d:47:58:6a:a5:e7: 92:ff:03:ea:4b:70:6b:e6:aa:80:1a:59:e0:7b:75:eb:53:3c: 3a:64:37:85:c0:fc:7d:47:86:d0:d4:bb:52:ed:c0:a6:87:b0: d8:83:09:6b:7f:bb:c7:bf:c6:70:01:3d:96:58:74:70:1b:54: 05:d8:cb:53:82:82:ce:d0:23:04:ac:d8:c3:14:c4:73:51:68: e1:b5:bc:bd:09:4a:23:17:b0:7a:86:64:2f:c7:fa:a9:ca:5f: 99:63:e3:09:95:4c:43:69:32:02:96:a5:f8:1a:6f:9a:6e:d1: e2:24:2d:36:1c:0e:5d:68:bf:cb:3a:cc:9d:d5:26:ed:3a:9e: 15:c4:b9:1c:a1:78:77:b2:4c:f3:af:aa:57:bc:cc:53:0b:ce: 01:69:1d:1c:a9:35:f3:6b:54:27:88:b7:59:6a:11:68:f9:8e: 46:52:aa:64:75:79:4d:b3:1f:10:ff:cb:c2:c3:44:b6:62:db: f5:1c:ff:c4:44:14:64:28:bb:65:62:47:cc:5c:84:a2:d6:50: e6:fa:c4:cc:e4:db:c1:76:7c:df:da:bc:34:7d:5c:d1:74:a6: c2:9b:a2:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEM4QkYwNjVBNzQ4MjJFRjhDQzYyRjRBNTRFNTlENTg3 MTIwQjZGNDcwHhcNMjYwNzIzMDgwMjUzWhcNMjYwNzMwMDgwMjUzWjAYMRYwFAYD VQQDEw02YTYxY2FhZC04MGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc325jEh9ub3VCICSEe0O3r2SSxy0JJt1cZ7wusvim30AwcARrncDaHbFq20 pwBWBnA732XUDOFBCkpduEkB3QJPrPHYAlQzlOvvivtcrBlbQulOl4XKYFy1gpU4 c2BWaWOc8HDbS/WrXGVdTwJHmAYUre/5s+wOa/kXrJq6cDhnu2eEkVARUfIw+kio QYsNH8+Dm0PRMZD547EkTaSkC+XE+ByTprCSqPTWgbJ89i083eGikPvUnDQRi1yK NeCGoI7KmO+6VcTNOeTOgPKP53JjhuV4tzfGdiTPW9Z/X5DVBVVaJfIaZgvxa+1f 0Zli6kMG7bqre4JEWkaiRyv1oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTm/S3q /xkqbDiRKbLgyAKaz+bkMB8GA1UdIwQYMBaAFMi/Blp0gi74zGL0pU5Z1YcSC29H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82QUE0RDYwQTBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2ak1ZdlNsVGxuVmh4SUxi MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lMOEdXblNDTHZqTVl2U2xUbG5WaHhJTGIwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82QUE0RDYwQTBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2 ak1ZdlNsVGxuVmh4SUxiMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdlb+NEIThxJhgndj+b4GmnhcX2f8dJIj41seA5H/LUdYaqXnkv8D6ktwa+aq gBpZ4Ht161M8OmQ3hcD8fUeG0NS7Uu3Apoew2IMJa3+7x7/GcAE9llh0cBtUBdjL U4KCztAjBKzYwxTEc1Fo4bW8vQlKIxeweoZkL8f6qcpfmWPjCZVMQ2kyApal+Bpv mm7R4iQtNhwOXWi/yzrMndUm7TqeFcS5HKF4d7JM86+qV7zMUwvOAWkdHKk182tU J4i3WWoRaPmORlKqZHV5TbMfEP/LwsNEtmLb9Rz/xEQUZCi7ZWJHzFyEotZQ5vrE zOTbwXZ839q8NH1c0XSmwpuigQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:26:59 2026 by rpki-client