$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: i78m21iWyhkTM0ga+gF26n/4/lnLckJ+j4tlb4Bhj4o= Subject key identifier: 46:B8:45:BE:C3:AE:B4:49:62:30:D0:44:44:F0:43:7B:EA:4D:E1:3D Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 9A Signing time: Mon 27 Jul 2026 09:30:18 +0000 Manifest this update: Mon 27 Jul 2026 09:30:17 +0000 Manifest next update: Mon 03 Aug 2026 09:30:17 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: OGIUB0TJldctgFFNlgaiumq5umD0cvdb9Vdcuy2ceD4=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: LyWvvw+ErBjB7W8o/R8I1LcD7CF1lU/R94KhGen7GVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Jul 27 09:30:17 2026 GMT Not After : Aug 3 09:30:17 2026 GMT Subject: CN=6a67252a-34f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:f1:45:5d:af:6b:ed:0b:f0:ce:71:21:05: 49:6e:95:ad:91:99:4d:3e:6a:33:2c:71:d9:49:4c: a9:95:4c:4c:14:b3:35:52:f8:47:26:8f:ff:38:1d: 79:b8:21:08:ee:70:a9:80:f0:6f:c5:37:f5:b3:9f: bb:77:c4:22:e9:2e:45:14:a9:cd:88:28:a1:b7:96: bf:50:cd:e7:63:ef:09:37:82:b6:4c:47:86:53:28: 39:cb:07:52:d9:1d:74:6f:55:d4:26:68:99:ad:7f: 79:a6:40:08:39:de:d3:d6:77:10:73:7c:28:21:fc: 3f:9b:73:c4:3b:5a:73:97:a3:f5:7f:d4:61:6d:ae: 4e:9c:05:d1:98:47:e9:93:0b:0d:42:ef:ec:b9:87: 4c:f4:e3:7f:64:7c:15:e9:55:84:18:55:83:5f:51: b2:9e:70:15:b0:61:17:40:46:05:4c:09:3a:5c:1b: 8b:a2:60:34:4a:0a:c0:01:51:a2:02:c0:ca:53:45: 2f:79:29:30:cd:3f:7a:bd:4f:c5:61:64:69:2e:9b: e8:bf:bd:28:d6:30:11:98:0b:b6:84:b3:a8:dc:68: 48:89:9c:63:32:d7:8e:d9:9f:a5:30:86:02:21:d2: 98:84:96:ff:44:f1:5b:34:de:72:37:e9:58:64:cb: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B8:45:BE:C3:AE:B4:49:62:30:D0:44:44:F0:43:7B:EA:4D:E1:3D X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b6:29:f9:27:2b:9a:80:a0:7d:9c:8b:67:70:64:53:95:6d: 08:8b:d4:a4:b2:5d:91:76:74:7b:e1:89:f4:4a:e7:a9:6e:63: c7:22:f2:14:26:e1:f0:a6:2f:07:fc:4a:9c:c0:3a:76:c4:39: fc:a7:24:ad:7d:d6:6e:5b:67:1f:3d:61:42:23:d2:f9:1b:23: a4:61:63:d3:10:5b:a8:7f:6c:74:f9:71:4e:c2:49:1c:3f:de: 59:9d:53:55:2d:63:2b:ba:c3:95:50:a4:e0:94:48:07:8a:e1: a2:c0:e3:fa:94:e4:19:53:7e:06:88:40:89:a9:61:0e:ed:f4: 21:3b:09:0a:e7:da:7d:83:47:79:8a:bf:4c:d7:5d:48:1a:ad: 15:a7:02:3c:3d:7f:12:05:92:90:83:f9:b0:3b:4c:bd:7f:be: 44:73:74:cc:e3:7c:ce:a0:9b:08:4a:af:d0:3f:38:d1:69:ba: ef:04:3e:b9:d7:54:17:a7:1d:df:9e:8b:f1:a4:42:9c:80:6e: 9a:f8:f2:c9:f4:e6:41:c7:4f:64:1b:a2:62:68:30:96:7f:8d: 1d:b3:42:f1:8a:8c:eb:b7:f6:92:90:03:f6:b3:cb:f4:68:34: 66:d1:f4:03:10:8d:44:66:5e:74:7a:27:63:86:7e:e1:28:5d: 0f:69:5e:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMUYxMTAvBgNVBAUTKDYyNDYzMjBERUIzNDJEMkMzREMxQUVEQjkwRjE3Njc3 MkI3RkM3N0YwHhcNMjYwNzI3MDkzMDE3WhcNMjYwODAzMDkzMDE3WjAYMRYwFAYD VQQDEw02YTY3MjUyYS0zNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+fxRV2va+0L8M5xIQVJbpWtkZlNPmozLHHZSUyplUxMFLM1UvhHJo//OB15 uCEI7nCpgPBvxTf1s5+7d8Qi6S5FFKnNiCiht5a/UM3nY+8JN4K2TEeGUyg5ywdS 2R10b1XUJmiZrX95pkAIOd7T1ncQc3woIfw/m3PEO1pzl6P1f9Rhba5OnAXRmEfp kwsNQu/suYdM9ON/ZHwV6VWEGFWDX1GynnAVsGEXQEYFTAk6XBuLomA0SgrAAVGi AsDKU0UveSkwzT96vU/FYWRpLpvov70o1jARmAu2hLOo3GhIiZxjMteO2Z+lMIYC IdKYhJb/RPFbNN5yN+lYZMs4UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEa4Rb7D rrRJYjDQRETwQ3vqTeE9MB8GA1UdIwQYMBaAFGJGMg3rNC0sPcGu25Dxdncrf8d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQxRi8xNEQwOUMwMjlE QUIxMUYwQTFDNUIzNjNDNEY5QUUwMi9Za1l5RGVzMExTdzl3YTdia1BGMmR5dF94 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQxRi8xNEQwOUMwMjlEQUIxMUYwQTFDNUIzNjNDNEY5QUUwMi9Za1l5RGVzMExT dzl3YTdia1BGMmR5dF94MzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIbYp+ScrmoCgfZyLZ3BkU5VtCIvUpLJdkXZ0e+GJ9ErnqW5jxyLyFCbh8KYv B/xKnMA6dsQ5/KckrX3WbltnHz1hQiPS+RsjpGFj0xBbqH9sdPlxTsJJHD/eWZ1T VS1jK7rDlVCk4JRIB4rhosDj+pTkGVN+BohAialhDu30ITsJCufafYNHeYq/TNdd SBqtFacCPD1/EgWSkIP5sDtMvX++RHN0zON8zqCbCEqv0D840Wm67wQ+uddUF6cd 356L8aRCnIBumvjyyfTmQcdPZBuiYmgwln+NHbNC8YqM67f2kpAD9rPL9Gg0ZtH0 AxCNRGZedHonY4Z+4ShdD2leLg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:42:53 2026 by rpki-client