$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: i8yoNObX4pXWM7CQPPVM1OdSJv2RSRr7nuMvHufhYp4= Subject key identifier: 70:D8:6F:8F:0F:3C:A7:D3:50:69:A7:35:09:FD:CD:15:54:54:D3:51 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 02BB Signing time: Fri 25 Sep 2026 01:24:06 +0000 Manifest this update: Fri 25 Sep 2026 01:24:05 +0000 Manifest next update: Fri 02 Oct 2026 01:24:05 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: SshT2cZUgQU0rxdSvqo1EnZIDGSGc9qMQwsdvLYonIo=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Sep 25 01:24:05 2026 GMT Not After : Oct 2 01:24:05 2026 GMT Subject: CN=6ab5cd36-0bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:7e:b7:a8:25:36:61:98:39:72:1b:54:9c: 93:9f:3e:61:ef:2b:98:c9:a5:db:12:88:08:a1:11: 37:b2:0d:27:2e:dd:4f:56:9b:c5:0a:26:00:57:40: 9b:50:35:6b:49:83:58:7f:c1:26:15:f9:9a:d7:fb: cb:fa:2b:93:41:ae:bf:29:20:65:14:b8:3e:d0:46: 10:e7:21:4f:f6:1e:fe:1e:bb:49:86:97:96:61:b1: c9:9f:c1:13:48:e1:4a:10:17:e3:1c:45:40:74:0e: 07:4e:97:36:a1:6c:ea:be:a0:25:5f:ef:24:2c:e6: 42:08:9e:ce:c1:14:9c:b7:be:64:dc:73:67:6d:21: de:19:a4:48:03:e7:17:ad:7b:74:21:73:1f:74:ec: 19:9b:45:f2:c3:82:21:5b:fa:7b:fc:b0:f9:b2:49: d0:2f:8b:aa:b2:e9:3f:2b:d0:ce:ee:57:4f:18:57: b6:4b:e5:19:c3:b6:06:f1:81:07:a2:11:dd:09:c6: e3:f0:9f:d1:08:50:89:c0:82:00:56:c4:a3:0d:94: ed:b0:b8:2b:20:59:8b:6a:f8:36:33:f4:6d:d4:3a: 20:50:18:93:0c:35:fb:80:8b:f7:32:65:60:28:93: 8e:7d:5f:7f:61:28:e4:36:ea:ed:d4:e2:f0:18:ac: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D8:6F:8F:0F:3C:A7:D3:50:69:A7:35:09:FD:CD:15:54:54:D3:51 X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e1:e4:15:7e:ca:df:87:0c:ea:cb:a6:ed:c8:70:69:86:0f: cd:db:84:d7:84:6c:b6:9b:1d:dd:85:93:5f:d2:39:b2:78:d8: 32:29:2e:77:e4:fb:12:85:8f:71:44:3e:7f:6c:da:54:56:2b: b1:da:f6:41:0e:39:93:75:de:8b:1a:01:80:2d:7e:88:36:be: df:38:7f:bf:a9:0a:92:b9:e0:5e:bd:f7:eb:86:cd:02:a1:97: 6e:b5:dc:ec:ce:0a:f7:c8:44:de:6a:e6:fc:ac:eb:a5:d7:2c: 57:28:47:17:99:42:6a:77:95:7e:4f:da:fd:e6:20:5d:d7:57: 3a:4d:39:d5:ab:2c:f3:83:33:74:6a:5a:de:29:a4:85:12:80: 39:44:08:44:eb:7f:cd:ac:d9:6b:46:88:d3:31:94:04:c0:a8: 03:17:6e:80:0b:28:de:59:24:e6:27:a5:32:3e:e9:70:84:3a: 90:fc:b2:8f:40:ca:50:39:72:7e:dc:26:b5:34:68:f3:ed:67: 86:26:4b:6a:83:6f:a6:9a:5c:f5:1f:c7:1a:6a:e1:3b:93:84: 92:83:b0:3b:f9:66:9b:3c:98:ee:69:ac:63:41:f4:46:73:03: 4c:21:fe:5c:59:41:17:1b:f6:6d:5d:64:fa:ec:3d:43:07:e5: 95:f4:ae:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjYwOTI1MDEyNDA1WhcNMjYxMDAyMDEyNDA1WjAYMRYwFAYD VQQDEw02YWI1Y2QzNi0wYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLx+t6glNmGYOXIbVJyTnz5h7yuYyaXbEogIoRE3sg0nLt1PVpvFCiYAV0Cb UDVrSYNYf8EmFfma1/vL+iuTQa6/KSBlFLg+0EYQ5yFP9h7+HrtJhpeWYbHJn8ET SOFKEBfjHEVAdA4HTpc2oWzqvqAlX+8kLOZCCJ7OwRSct75k3HNnbSHeGaRIA+cX rXt0IXMfdOwZm0Xyw4IhW/p7/LD5sknQL4uqsuk/K9DO7ldPGFe2S+UZw7YG8YEH ohHdCcbj8J/RCFCJwIIAVsSjDZTtsLgrIFmLavg2M/Rt1DogUBiTDDX7gIv3MmVg KJOOfV9/YSjkNurt1OLwGKy2xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDYb48P PKfTUGmnNQn9zRVUVNNRMB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUeHkFX7K34cM6sum7chwaYYPzduE14Rstpsd3YWTX9I5snjYMikud+T7EoWP cUQ+f2zaVFYrsdr2QQ45k3XeixoBgC1+iDa+3zh/v6kKkrngXr3364bNAqGXbrXc 7M4K98hE3mrm/KzrpdcsVyhHF5lCaneVfk/a/eYgXddXOk051ass84MzdGpa3imk hRKAOUQIROt/zazZa0aI0zGUBMCoAxdugAso3lkk5ielMj7pcIQ6kPyyj0DKUDly ftwmtTRo8+1nhiZLaoNvpppc9R/HGmrhO5OEkoOwO/lmmzyY7mmsY0H0RnMDTCH+ XFlBFxv2bV1k+uw9QwfllfSuAA== -----END CERTIFICATE-----Generated at Fri Sep 25 18:06:19 2026 by rpki-client