$ rpki-client -vvvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: J6bSdLaaF02/JcbMEgAlBQwapl7KNfWMIr5rzAj+O7A= Subject key identifier: 9E:7D:CB:37:D9:E2:23:15:F4:3A:93:B9:88:DC:5D:40:77:8C:DC:BD Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 085D Signing time: Tue 22 Sep 2026 20:47:30 +0000 Manifest this update: Tue 22 Sep 2026 20:47:30 +0000 Manifest next update: Tue 29 Sep 2026 20:47:30 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: Jnl6vuPLH2i1UuOv4UwGy3eiG/ez1a/tyNI+7HFL2SI=) 2: A08D36808D9511F18CE7BA083F11F970.roa (hash: y0Dvh0/VOEW6Vmpl7IJY53LBbE9h/rKg1gCLV+jDFR0=) 3: 7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa (hash: y02tkPqWkRUuFzYRyDSp8BRV329jb14C5pvIrtHdumk=) 4: D44CB1088D9511F18884790F3F11F970.roa (hash: wV1zl2AYz6koE/d18QPJJFKohfdA8vraKL1i7qfQDbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Sep 22 20:47:30 2026 GMT Not After : Sep 29 20:47:30 2026 GMT Subject: CN=6ab2e962-402c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:0d:c9:58:1d:76:12:60:89:04:f6:df:4d: 39:b4:c3:3c:2f:69:41:31:1b:54:22:a4:ab:16:61: 10:da:27:8c:11:97:e7:65:d5:e1:a3:15:fd:c8:f7: 11:a1:c1:0d:38:64:6d:91:07:20:38:37:9f:99:7f: 4a:b7:aa:94:25:31:07:04:e1:35:a3:71:92:fb:42: b9:1f:44:26:31:c5:66:fc:d7:eb:5d:75:2f:ec:dc: 55:e9:e2:28:5c:8b:39:e7:1f:f9:33:cc:36:95:d0: be:9b:dc:53:b8:1d:5c:26:2e:03:bc:a5:e8:f8:85: 4a:82:12:d4:52:63:47:e3:6d:61:73:32:5a:a4:7b: fb:ae:39:6f:b2:01:cb:93:f0:00:65:35:8b:15:56: cb:28:6f:91:5c:67:ee:87:de:b1:fa:7a:e5:1b:bf: ee:db:5f:41:55:af:1f:61:fc:16:8d:57:3a:8e:c3: 8a:df:61:cf:cb:e0:ac:b1:69:5e:35:a0:95:ca:bc: 08:b9:e6:4e:e1:76:fb:39:54:e9:b6:82:e1:bf:9a: 91:df:83:59:62:47:aa:42:29:95:93:a8:ba:ee:c8: aa:35:5d:8b:43:dd:e9:9b:47:30:c8:b5:58:01:17: 05:c4:4a:0a:7a:58:d7:90:38:62:fc:bb:5e:46:db: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7D:CB:37:D9:E2:23:15:F4:3A:93:B9:88:DC:5D:40:77:8C:DC:BD X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:70:24:d3:aa:f8:ad:4a:be:e1:71:0d:1b:54:18:a1:46:6b: 6c:60:d9:12:61:6d:af:92:bb:9d:17:df:14:87:d9:fa:8e:94: 53:9a:43:7c:2b:b8:05:63:8f:98:92:d5:c5:dc:16:bc:e4:9b: fc:0f:50:32:93:3f:ff:dd:9e:57:89:c6:a2:61:97:e2:39:17: d0:86:31:0f:8d:65:85:22:3d:86:f2:a0:38:f0:8b:94:e5:0e: ac:62:61:b6:25:be:d5:71:e6:a3:65:ac:c9:36:e1:44:ba:0f: f1:6b:df:fd:6a:96:48:4a:0e:cd:44:23:15:6f:98:2d:cc:79: ca:56:cf:e9:b8:e3:6a:a2:21:bb:6f:f3:83:f0:a2:b6:5b:ab: 1a:e7:ca:57:09:4d:88:42:8c:6e:16:38:8a:8a:30:63:be:6e: 6b:dc:1a:65:87:ed:45:be:90:bb:88:04:48:54:3f:0b:af:cc: f9:8e:e4:37:dc:72:9b:82:17:52:c8:52:c7:bd:51:14:ff:af: 18:60:f1:e8:0a:8f:02:66:06:9f:a6:fb:c2:24:ba:ee:bc:8e: d9:8f:1e:d3:37:49:54:f9:f5:13:85:73:c7:b8:6a:79:51:ee: 6d:f1:32:50:b3:1d:04:26:28:a6:3a:dd:8b:62:d3:ce:aa:f3: 24:27:b0:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjYwOTIyMjA0NzMwWhcNMjYwOTI5MjA0NzMwWjAYMRYwFAYD VQQDEw02YWIyZTk2Mi00MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwANyVgddhJgiQT23005tMM8L2lBMRtUIqSrFmEQ2ieMEZfnZdXhoxX9yPcR ocENOGRtkQcgODefmX9Kt6qUJTEHBOE1o3GS+0K5H0QmMcVm/NfrXXUv7NxV6eIo XIs55x/5M8w2ldC+m9xTuB1cJi4DvKXo+IVKghLUUmNH421hczJapHv7rjlvsgHL k/AAZTWLFVbLKG+RXGfuh96x+nrlG7/u219BVa8fYfwWjVc6jsOK32HPy+CssWle NaCVyrwIueZO4Xb7OVTptoLhv5qR34NZYkeqQimVk6i67siqNV2LQ93pm0cwyLVY ARcFxEoKeljXkDhi/LteRtvF8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ59yzfZ 4iMV9DqTuYjcXUB3jNy9MB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFXAk06r4rUq+4XENG1QYoUZrbGDZEmFtr5K7nRffFIfZ+o6UU5pDfCu4BWOP mJLVxdwWvOSb/A9QMpM//92eV4nGomGX4jkX0IYxD41lhSI9hvKgOPCLlOUOrGJh tiW+1XHmo2WsyTbhRLoP8Wvf/WqWSEoOzUQjFW+YLcx5ylbP6bjjaqIhu2/zg/Ci tlurGufKVwlNiEKMbhY4ioowY75ua9waZYftRb6Qu4gESFQ/C6/M+Y7kN9xym4IX UshSx71RFP+vGGDx6AqPAmYGn6b7wiS67ryO2Y8e0zdJVPn1E4Vzx7hqeVHubfEy ULMdBCYopjrdi2LTzqrzJCew6w== -----END CERTIFICATE-----Generated at Thu Sep 24 01:10:06 2026 by rpki-client