$ rpki-client -vvvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: hZ8foHlxox5HiPoNn23boOWL7YhB7XdDOSRtNqv/MwQ= Subject key identifier: 01:1D:85:FC:16:1C:DF:F8:D4:EA:1B:BC:8D:F3:95:75:6B:11:F5:65 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 021A Signing time: Mon 21 Sep 2026 02:56:29 +0000 Manifest this update: Mon 21 Sep 2026 02:56:28 +0000 Manifest next update: Mon 28 Sep 2026 02:56:28 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: CbeFJ9EmqshazCcfd9KXil7X+s252FKtLnNXiSuKzBI=) 2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) 3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Sep 21 02:56:28 2026 GMT Not After : Sep 28 02:56:28 2026 GMT Subject: CN=6ab09cdc-04cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:a0:6d:05:2e:85:44:a5:e9:75:26:ac:a7: 92:0e:6f:c6:03:85:1c:3b:a7:40:9e:1b:5a:8b:24: d6:8d:dd:11:14:3c:6b:15:c6:46:b5:25:95:b7:9a: e7:92:17:fa:d0:ce:de:06:b6:29:14:83:75:6a:57: 99:df:cd:15:4a:33:0f:b6:a9:88:6f:84:7e:18:fa: 3e:0e:e4:5f:87:74:11:7d:46:d2:1e:46:54:9c:6b: a8:0e:47:82:bf:8b:fb:a3:c6:50:07:20:3a:1b:a0: 9b:99:40:f3:e3:7d:0b:7d:dd:33:93:dd:7c:4e:dd: 11:56:c1:09:c1:c4:4c:62:52:a0:05:46:15:73:e3: a6:f4:fd:90:fc:81:ef:a3:b6:44:f3:ab:ed:d2:87: 04:d1:ce:72:f1:2b:7e:16:ec:24:d0:17:04:4e:f5: 90:a4:22:e9:06:f5:74:a9:49:f4:c2:44:93:cb:b6: 94:fe:d6:0a:44:d3:c9:21:2d:ee:b6:21:6c:ac:d0: 91:81:b2:33:1f:c3:c5:9a:76:3e:60:01:e3:7b:76: ed:58:10:96:fc:1c:b4:fa:1c:b1:94:c0:fb:cb:92: 71:37:9d:53:ce:f5:38:fa:b4:b0:6a:3a:bd:0f:f3: 5c:01:7b:cd:64:20:60:66:24:47:25:b3:3d:c5:4e: c7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1D:85:FC:16:1C:DF:F8:D4:EA:1B:BC:8D:F3:95:75:6B:11:F5:65 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:02:c8:d4:b9:db:ad:19:dc:58:8c:f5:81:03:71:b7:cf:62: 9e:63:20:3b:5f:dd:f2:26:a5:64:f8:7c:b3:67:84:14:d7:de: d3:15:99:5f:56:86:89:4c:bb:9d:8a:56:0c:3a:f8:7b:60:63: c3:2c:d6:86:7f:ec:cd:6b:be:2f:07:3b:61:e8:45:88:7d:c4: 0f:60:7b:9b:d1:27:a0:a7:86:10:c3:d6:50:8c:cf:88:03:49: 86:c2:c1:38:20:fb:91:93:2c:68:c7:a0:33:f6:42:7e:07:bd: 47:b5:8c:ed:38:ee:a3:c2:fd:1d:63:96:a4:ac:d9:e1:f3:3a: 3a:39:c2:ff:a9:c9:a0:ee:fb:5c:4e:1f:97:31:b7:b2:b0:24: e8:06:2a:9a:f5:d1:e0:99:e1:8f:85:96:0d:ef:61:1f:a2:15: a8:15:29:7b:5e:11:a8:73:67:b3:72:d6:e5:16:88:d2:b0:5e: 47:f3:fb:a8:41:a8:e8:70:49:da:49:f3:c7:70:b9:b0:3a:bf: d9:55:c4:2b:a2:0d:aa:74:d2:f9:2e:f6:ea:0b:fa:c9:4b:90: 50:3c:45:81:9e:7e:57:63:78:e2:f0:fa:a2:f1:b6:93:a6:5e: ee:52:74:52:e8:29:ab:d4:5d:f7:d0:2e:d9:8c:97:8a:40:6a: c9:4b:89:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYwOTIxMDI1NjI4WhcNMjYwOTI4MDI1NjI4WjAYMRYwFAYD VQQDEw02YWIwOWNkYy0wNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0qgbQUuhUSl6XUmrKeSDm/GA4UcO6dAnhtaiyTWjd0RFDxrFcZGtSWVt5rn khf60M7eBrYpFIN1aleZ380VSjMPtqmIb4R+GPo+DuRfh3QRfUbSHkZUnGuoDkeC v4v7o8ZQByA6G6CbmUDz430Lfd0zk918Tt0RVsEJwcRMYlKgBUYVc+Om9P2Q/IHv o7ZE86vt0ocE0c5y8St+Fuwk0BcETvWQpCLpBvV0qUn0wkSTy7aU/tYKRNPJIS3u tiFsrNCRgbIzH8PFmnY+YAHje3btWBCW/By0+hyxlMD7y5JxN51TzvU4+rSwajq9 D/NcAXvNZCBgZiRHJbM9xU7HkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEdhfwW HN/41OobvI3zlXVrEfVlMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWgLI1LnbrRncWIz1gQNxt89inmMgO1/d8ialZPh8s2eEFNfe0xWZX1aGiUy7 nYpWDDr4e2BjwyzWhn/szWu+Lwc7YehFiH3ED2B7m9EnoKeGEMPWUIzPiANJhsLB OCD7kZMsaMegM/ZCfge9R7WM7Tjuo8L9HWOWpKzZ4fM6OjnC/6nJoO77XE4flzG3 srAk6AYqmvXR4Jnhj4WWDe9hH6IVqBUpe14RqHNns3LW5RaI0rBeR/P7qEGo6HBJ 2knzx3C5sDq/2VXEK6INqnTS+S726gv6yUuQUDxFgZ5+V2N44vD6ovG2k6Ze7lJ0 Uugpq9Rd99Au2YyXikBqyUuJew== -----END CERTIFICATE-----Generated at Mon Sep 21 09:49:03 2026 by rpki-client