$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: YURpI+uVDcPGHblLVlqUQRy9hCi1/OAZju9qqiZOzKU= Subject key identifier: 1C:B3:7B:49:2F:18:E7:09:A4:72:5A:6B:10:03:F4:2D:7B:1C:95:C4 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0DA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0D98 Signing time: Sun 20 Sep 2026 17:55:23 +0000 Manifest this update: Sun 20 Sep 2026 17:55:23 +0000 Manifest next update: Sun 27 Sep 2026 17:55:23 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: Sj7U0BjQ5tm+YnJFJaufA5uqdgTHSzg3Isv5aL5p8VE=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Sep 20 17:55:23 2026 GMT Not After : Sep 27 17:55:23 2026 GMT Subject: CN=6ab01e0b-fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:e3:12:58:16:5c:d8:17:d4:eb:bc:3c:67: 70:c3:86:ef:4a:bb:a0:84:6b:56:60:46:3a:55:78: c4:b2:77:ac:74:49:13:a9:c4:96:0b:9f:d1:19:9d: 65:e6:b4:cb:b0:8a:1b:2e:33:be:02:35:9c:97:5c: 91:a3:99:e9:e6:22:0d:43:d0:c2:72:2b:f2:8e:aa: 82:bf:ec:44:28:ef:4e:e5:fb:c0:bb:57:7e:1e:be: 98:bf:a2:1d:a4:45:ae:b3:6b:36:03:55:bd:8a:cc: d8:7a:e7:cb:80:2b:83:d1:07:c0:dc:3f:ae:3b:1b: 66:aa:5a:16:71:18:27:36:e7:f6:ff:9c:1a:37:86: c1:28:b9:96:05:2e:83:c9:34:dc:ad:60:9a:bd:b6: d8:f5:e4:ca:a2:8d:33:8c:f8:e4:c0:6a:2f:9a:c3: 78:23:db:f4:88:af:23:f8:78:f5:00:4e:f5:a6:45: 8a:c8:6c:5e:8f:1e:bb:30:6e:4e:d2:f4:97:12:a6: 85:0a:1c:63:67:60:ad:ad:ff:24:b7:f8:3d:0d:52: b0:d6:04:25:a7:91:7f:c6:40:e0:2d:71:4f:e3:60: f4:c9:b8:f8:ac:c0:82:35:82:b6:93:e3:38:0a:08: 42:d9:7f:f5:b6:e0:cd:4a:f4:1f:c6:c5:9e:e6:8c: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B3:7B:49:2F:18:E7:09:A4:72:5A:6B:10:03:F4:2D:7B:1C:95:C4 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:20:64:ed:4e:e9:e5:4d:7a:30:4a:56:b3:e8:db:ea:ef:f2: f7:a0:02:9f:9b:29:58:ca:66:5e:61:3c:14:48:4d:61:62:3b: 2b:33:be:65:dd:db:c5:7c:48:d7:62:be:de:9b:11:82:fd:e3: eb:33:7e:49:40:1a:0d:d1:bb:57:bf:1e:fa:e4:77:42:fa:ac: 61:62:d3:fc:22:8a:4a:fb:61:c2:01:f2:fa:7b:f1:cc:97:2d: ac:c0:83:1a:76:3f:bc:f4:a8:7a:eb:67:dd:f6:a9:85:82:bb: 3f:31:e8:ff:b9:51:80:75:41:7b:54:11:56:a6:a9:32:52:f4: 65:97:54:cd:42:81:c4:8f:62:f5:63:16:b9:11:5d:84:70:ab: ad:84:f2:f2:43:f6:e6:a1:4d:45:bf:dd:92:1c:9a:1f:6e:23: 93:8a:17:8f:30:6b:4f:ce:80:ba:14:e3:b6:5a:fd:6c:e2:c8: e1:10:2b:1d:23:f9:c2:18:4f:1d:38:f4:84:76:43:da:85:1a: 1b:44:f0:d4:6a:e2:dd:80:c1:7b:87:bd:2b:46:d7:41:8d:4e: 21:e5:f8:c2:be:7c:58:98:2b:48:20:29:d3:1b:96:b5:cd:47: 7c:e1:b5:21:3d:d9:d7:25:9f:0b:22:c1:64:21:52:43:90:14: 60:ec:e4:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjYwOTIwMTc1NTIzWhcNMjYwOTI3MTc1NTIzWjAYMRYwFAYD VQQDEw02YWIwMWUwYi1mYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+XjElgWXNgX1Ou8PGdww4bvSrughGtWYEY6VXjEsnesdEkTqcSWC5/RGZ1l 5rTLsIobLjO+AjWcl1yRo5np5iINQ9DCcivyjqqCv+xEKO9O5fvAu1d+Hr6Yv6Id pEWus2s2A1W9iszYeufLgCuD0QfA3D+uOxtmqloWcRgnNuf2/5waN4bBKLmWBS6D yTTcrWCavbbY9eTKoo0zjPjkwGovmsN4I9v0iK8j+Hj1AE71pkWKyGxejx67MG5O 0vSXEqaFChxjZ2Ctrf8kt/g9DVKw1gQlp5F/xkDgLXFP42D0ybj4rMCCNYK2k+M4 CghC2X/1tuDNSvQfxsWe5owbQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByze0kv GOcJpHJaaxAD9C17HJXEMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMyBk7U7p5U16MEpWs+jb6u/y96ACn5spWMpmXmE8FEhNYWI7KzO+Zd3bxXxI 12K+3psRgv3j6zN+SUAaDdG7V78e+uR3QvqsYWLT/CKKSvthwgHy+nvxzJctrMCD GnY/vPSoeutn3faphYK7PzHo/7lRgHVBe1QRVqapMlL0ZZdUzUKBxI9i9WMWuRFd hHCrrYTy8kP25qFNRb/dkhyaH24jk4oXjzBrT86AuhTjtlr9bOLI4RArHSP5whhP HTj0hHZD2oUaG0Tw1Gri3YDBe4e9K0bXQY1OIeX4wr58WJgrSCAp0xuWtc1HfOG1 IT3Z1yWfCyLBZCFSQ5AUYOzkGA== -----END CERTIFICATE-----Generated at Mon Sep 21 01:39:07 2026 by rpki-client