$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: Z/WMqjrN1PXUp4yru3+/W3iAB+R6nWW2udK5yPCV9XI= Subject key identifier: F2:EE:ED:FD:74:8E:5F:67:F8:15:CB:B5:A4:A9:81:D5:0E:46:D8:90 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 029C Signing time: Mon 27 Jul 2026 02:58:06 +0000 Manifest this update: Mon 27 Jul 2026 02:58:05 +0000 Manifest next update: Mon 03 Aug 2026 02:58:05 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: 3aCPWRa01sjmGUoi5jIvJOLYL9kPpg/D4f9kViOiFM0=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Jul 27 02:58:05 2026 GMT Not After : Aug 3 02:58:05 2026 GMT Subject: CN=6a66c93e-4424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:5c:ed:7e:4c:1d:39:15:0f:06:68:fe:fd: 9e:e1:fe:82:f4:bd:6d:cc:e9:0f:96:12:3a:54:6d: 18:6d:21:02:dc:02:4e:9a:a0:39:88:51:a5:8f:1f: 3e:bd:57:f1:6e:aa:e1:ef:c2:8e:d6:47:bd:9b:a8: 95:a2:07:b1:a7:c5:fa:cc:68:55:c3:fa:2f:30:26: 1e:53:d6:29:5b:fd:23:57:97:9a:f3:9a:ed:3b:d2: 35:69:30:51:df:99:53:51:7e:2e:72:c1:49:75:b3: 80:41:ee:dd:1d:3a:db:69:78:6f:6c:2c:ec:72:48: b3:79:6d:14:87:97:6c:11:43:9a:a9:25:f5:57:af: 6b:f3:0d:3b:a6:2c:90:67:c6:a4:c1:ff:5c:96:46: 58:8e:25:aa:7d:73:22:48:ac:fc:ee:e8:ee:0d:a9: f3:af:12:e1:df:33:fa:10:c2:ab:ce:38:65:58:c9: f0:e5:e8:1a:33:48:90:f3:72:84:4e:8a:ee:4e:a1: 05:ea:fd:d0:74:30:9c:81:83:de:57:7f:16:95:e1: ab:9c:1b:26:12:25:fb:7a:a3:f2:74:ec:47:4d:04: b5:04:15:b5:8a:d6:00:3f:ba:a4:38:d6:04:67:12: 44:64:98:61:0b:ef:76:6d:21:a8:ea:b2:24:00:47: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EE:ED:FD:74:8E:5F:67:F8:15:CB:B5:A4:A9:81:D5:0E:46:D8:90 X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:96:eb:fd:4e:2d:07:f1:a9:3d:08:16:40:82:d5:70:78:12: 27:a5:41:2a:d2:b8:7f:c1:3c:60:90:eb:17:28:8b:cc:a4:5a: a2:09:54:1e:00:3f:f9:b2:2e:1d:55:0c:59:d4:35:75:e7:bb: d5:1c:5d:87:68:6c:2b:12:d4:07:4d:1e:82:89:40:95:8b:7d: 0b:f2:37:e5:b6:e0:39:19:47:96:fd:de:4e:cc:d8:dd:79:c3: 05:dd:62:4c:e8:85:f5:3d:bd:99:45:88:dc:3f:df:3a:77:a9: 12:9a:de:6a:0d:f7:0a:1a:c3:1e:2e:3f:42:15:21:45:e0:ff: 69:7e:fb:8e:08:a8:86:68:e3:86:c2:e9:39:47:89:4e:d5:01: 37:c2:69:3f:e5:40:7e:45:66:03:69:e9:b0:12:7e:bf:c4:03: 85:5e:f6:49:26:9d:e6:11:ec:fb:78:6b:fa:b6:e0:41:17:15: 60:0e:4f:cf:ab:01:98:3d:f8:ce:03:39:58:97:2e:7e:e7:de: 68:1d:ef:d2:55:85:40:10:08:e4:fd:2e:d4:a2:53:2d:ff:c9: ff:dc:06:0e:87:70:22:39:21:7d:82:ec:bd:04:f1:79:4f:20: 00:5c:0b:89:12:ab:a9:be:9f:e2:8e:df:9e:07:82:3f:86:22: 3c:9b:47:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjYwNzI3MDI1ODA1WhcNMjYwODAzMDI1ODA1WjAYMRYwFAYD VQQDEw02YTY2YzkzZS00NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkhc7X5MHTkVDwZo/v2e4f6C9L1tzOkPlhI6VG0YbSEC3AJOmqA5iFGljx8+ vVfxbqrh78KO1ke9m6iVogexp8X6zGhVw/ovMCYeU9YpW/0jV5ea85rtO9I1aTBR 35lTUX4ucsFJdbOAQe7dHTrbaXhvbCzsckizeW0Uh5dsEUOaqSX1V69r8w07piyQ Z8akwf9clkZYjiWqfXMiSKz87ujuDanzrxLh3zP6EMKrzjhlWMnw5egaM0iQ83KE ToruTqEF6v3QdDCcgYPeV38WleGrnBsmEiX7eqPydOxHTQS1BBW1itYAP7qkONYE ZxJEZJhhC+92bSGo6rIkAEfhLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLu7f10 jl9n+BXLtaSpgdUORtiQMB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP5br/U4tB/GpPQgWQILVcHgSJ6VBKtK4f8E8YJDrFyiLzKRaoglUHgA/+bIu HVUMWdQ1dee71Rxdh2hsKxLUB00egolAlYt9C/I35bbgORlHlv3eTszY3XnDBd1i TOiF9T29mUWI3D/fOnepEpreag33ChrDHi4/QhUhReD/aX77jgiohmjjhsLpOUeJ TtUBN8JpP+VAfkVmA2npsBJ+v8QDhV72SSad5hHs+3hr+rbgQRcVYA5Pz6sBmD34 zgM5WJcufufeaB3v0lWFQBAI5P0u1KJTLf/J/9wGDodwIjkhfYLsvQTxeU8gAFwL iRKrqb6f4o7fngeCP4YiPJtHCw== -----END CERTIFICATE-----Generated at Wed Jul 29 02:28:37 2026 by rpki-client