$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json) Hash identifier: 9K01w3LHd6Bnrft+OBd/KJdypnBZQvZZDtnVN9Nc8Rs= Subject key identifier: 2E:09:87:2A:0A:61:B0:CF:40:DD:E3:66:74:F7:9D:86:53:07:BB:D0 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 22B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft Manifest number: 228A Signing time: Tue 28 Jul 2026 15:56:54 +0000 Manifest this update: Tue 28 Jul 2026 15:56:53 +0000 Manifest next update: Tue 04 Aug 2026 15:56:53 +0000 Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: CExSJBTCqnkkyhhuuFDgl9hKmmOiv4Wm1zuwKbiuNng=) 2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=) 3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8883 (0x22b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Jul 28 15:56:53 2026 GMT Not After : Aug 4 15:56:53 2026 GMT Subject: CN=6a68d146-11b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bd:46:10:86:1e:ec:85:d0:8a:73:04:ca:2f: 32:08:2a:0d:07:70:b9:eb:38:54:72:18:d6:fc:09: f4:12:e2:db:45:45:cb:0e:f8:91:07:7b:b8:16:1e: 59:b9:e6:e8:79:16:91:82:31:5a:2e:a0:fa:7f:0d: a1:65:56:42:65:cb:c8:13:32:59:1f:19:f6:1e:14: 17:83:26:cf:bf:38:d2:36:c9:e5:c4:80:7b:5a:39: cc:ba:b5:d3:b8:dc:0b:37:57:d6:6d:f9:6d:78:90: d9:b5:08:ee:c6:90:84:51:44:04:73:57:51:00:b8: 8a:66:68:b0:1a:e0:79:ae:a4:53:fd:5a:a1:e3:ed: 3f:5a:2e:79:f5:26:c4:f9:f6:10:e0:22:c7:f1:6e: e2:2b:ef:bb:22:76:4f:41:92:69:b2:f4:37:36:a3: 24:21:3d:e9:06:93:cf:4b:93:ef:61:31:75:d5:a6: 1b:9f:d4:68:91:0f:ee:fe:dd:4b:66:6d:fa:85:ce: c7:02:92:ab:f6:3d:85:e8:3c:b2:e4:28:55:46:fd: 43:e5:c8:a3:19:ae:3f:53:18:03:6c:09:2b:45:49: 8b:d1:9f:e5:84:ae:2c:0f:cc:f8:ba:2a:53:c4:84: 81:f7:68:24:a3:7c:88:b8:37:6d:15:13:ab:fe:0c: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:09:87:2A:0A:61:B0:CF:40:DD:E3:66:74:F7:9D:86:53:07:BB:D0 X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c0:73:e9:9f:d3:b5:17:3f:72:cf:be:f1:d7:8d:c6:6a:e8: 0f:49:ae:45:d5:df:a7:b6:66:93:83:f1:0c:f8:b7:55:e9:3e: 5a:f7:ef:8b:d0:c8:8f:cc:7e:6b:12:2f:c2:89:ee:0d:f6:9a: e6:17:2a:90:4a:82:a3:30:52:6d:38:18:53:4b:20:be:34:9b: d0:3c:c4:11:22:9b:9d:6e:cb:9b:d2:e6:c0:ad:4b:67:2e:17: 50:e9:5a:78:7e:ae:74:5d:fd:88:eb:2f:19:79:9c:a5:a3:eb: 3c:79:3b:34:b4:5f:b2:40:89:fe:ea:0f:29:4a:b0:5d:c3:ce: bc:1e:4f:b7:dc:8e:d3:14:30:df:8e:4c:38:75:0e:f3:49:b8: df:3d:f8:d1:ce:e6:f1:e5:83:8c:85:ec:f5:65:34:8e:7d:93: 73:ac:b3:64:72:67:dc:18:91:0f:55:f9:f6:45:27:87:b5:56: d7:32:b4:95:bc:5a:5b:e3:98:13:34:b5:4e:ee:ac:f0:23:cc: c4:6f:ed:13:0d:c1:77:38:69:89:76:b2:4d:fd:40:6c:c9:a5: 47:0e:9b:75:7c:82:f7:6d:81:e0:e4:80:bb:d5:6c:b2:6d:f3: fe:65:8f:5a:b1:99:7b:db:16:c1:44:f8:ec:69:8b:54:3c:f2: 20:9d:4a:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjYwNzI4MTU1NjUzWhcNMjYwODA0MTU1NjUzWjAYMRYwFAYD VQQDEw02YTY4ZDE0Ni0xMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8r1GEIYe7IXQinMEyi8yCCoNB3C56zhUchjW/An0EuLbRUXLDviRB3u4Fh5Z ueboeRaRgjFaLqD6fw2hZVZCZcvIEzJZHxn2HhQXgybPvzjSNsnlxIB7WjnMurXT uNwLN1fWbflteJDZtQjuxpCEUUQEc1dRALiKZmiwGuB5rqRT/Vqh4+0/Wi559SbE +fYQ4CLH8W7iK++7InZPQZJpsvQ3NqMkIT3pBpPPS5PvYTF11aYbn9RokQ/u/t1L Zm36hc7HApKr9j2F6Dyy5ChVRv1D5cijGa4/UxgDbAkrRUmL0Z/lhK4sD8z4uipT xISB92gko3yIuDdtFROr/gz/mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4JhyoK YbDPQN3jZnT3nYZTB7vQMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkYyQi85MEZBREVFQ0Q1Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hD YWRadzJsZFMzc3lHZ2pUeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV8Bz6Z/TtRc/cs++8deNxmroD0muRdXfp7Zmk4PxDPi3Vek+Wvfvi9DIj8x+ axIvwonuDfaa5hcqkEqCozBSbTgYU0sgvjSb0DzEESKbnW7Lm9LmwK1LZy4XUOla eH6udF39iOsvGXmcpaPrPHk7NLRfskCJ/uoPKUqwXcPOvB5Pt9yO0xQw345MOHUO 80m43z340c7m8eWDjIXs9WU0jn2Tc6yzZHJn3BiRD1X59kUnh7VW1zK0lbxaW+OY EzS1Tu6s8CPMxG/tEw3BdzhpiXayTf1AbMmlRw6bdXyC922B4OSAu9Vssm3z/mWP WrGZe9sWwUT47GmLVDzyIJ1Ksw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:04:38 2026 by rpki-client