$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: X7DOJ5f/S9fnK6JzQ34WlCJk9uyKUFGq2l3XZeXuQa4= Subject key identifier: 71:1F:B0:47:BD:D0:26:94:1D:D1:C0:FB:F4:8B:A1:3C:80:05:A5:3E Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0C40 Signing time: Sun 26 Jul 2026 19:08:29 +0000 Manifest this update: Sun 26 Jul 2026 19:08:29 +0000 Manifest next update: Sun 02 Aug 2026 19:08:29 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: Vso1yTuR469JuAqtNQOTEs9A1EC0IT3HhE3D4iNwRCI=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=) 3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=) 4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Jul 26 19:08:29 2026 GMT Not After : Aug 2 19:08:29 2026 GMT Subject: CN=6a665b2d-71dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:17:35:16:42:b2:f0:e9:1c:d0:11:74:78: 7c:c5:3f:aa:85:7f:80:82:3e:7c:43:d8:c8:c9:3a: ed:26:4a:89:3e:8f:a8:6f:22:76:e4:ed:b5:4f:5d: 0e:7d:0a:d3:d1:7e:6c:1e:bd:bc:b2:36:4e:fc:0e: 6c:f4:5e:29:7e:8e:f0:b4:b9:5f:e3:f5:aa:69:cc: 76:2c:20:d4:e2:6c:cc:45:d1:61:ce:0e:8a:bc:6b: 18:01:98:d4:a7:e2:9c:ef:17:42:6a:51:a3:f4:16: 1d:98:d0:e5:fe:4a:12:a5:1e:99:08:c2:c9:6b:1d: 8a:fe:32:72:1f:2a:8e:52:f8:41:35:92:1c:3b:85: 2e:dd:a4:8d:26:be:36:78:4f:2b:4b:54:9e:fa:88: 96:30:50:2a:f7:31:90:c4:90:c0:ff:08:30:0f:3d: 21:13:46:c8:b9:af:cb:f8:f7:5e:91:f9:a1:97:74: 44:df:12:ab:c3:76:af:38:17:6e:8a:40:20:81:49: b4:ec:8b:38:24:96:d6:aa:99:05:25:d0:4e:78:14: 7e:88:b7:b0:9c:5c:95:ff:15:60:a2:94:4b:db:9c: 6e:39:57:9e:4a:7a:b1:73:8f:04:6d:d1:12:b0:13: ee:5f:63:4c:2d:b9:41:a3:71:f3:56:70:f3:7f:8b: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1F:B0:47:BD:D0:26:94:1D:D1:C0:FB:F4:8B:A1:3C:80:05:A5:3E X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5b:93:11:7a:97:cb:a4:f2:69:37:74:5b:e4:67:78:26:fb: 2d:8e:d5:e1:63:52:0c:ac:81:74:0e:89:be:80:23:63:7e:c6: 8b:9f:94:23:b5:36:5b:1c:07:1f:3e:a4:51:b3:39:30:de:05: 50:bb:b3:f3:f1:0b:6e:8c:fd:ea:c4:88:97:2f:d7:ed:38:fc: e0:40:9c:02:d9:5a:24:6f:e7:7d:68:63:52:b1:ea:e8:16:79: 99:88:76:66:01:6b:40:15:a1:a4:9c:1d:58:66:19:0b:ce:4c: 82:85:6d:a5:91:29:4b:bb:59:fd:46:05:ae:75:b4:6f:55:1e: 15:42:cd:cb:81:bf:ff:24:f3:27:d4:35:37:c3:c9:a7:a0:0c: b3:ba:31:70:61:85:88:4c:88:e6:4f:34:09:ee:e2:fe:b4:f7: 5a:2f:bb:bd:4d:b9:75:d3:85:ac:db:97:ee:cf:da:17:46:d0: 80:16:13:89:78:e8:f1:12:76:11:b1:bf:c9:33:fc:3a:84:57: 94:9c:bd:93:74:c8:df:91:42:9c:0e:d3:5c:40:e5:d4:2a:88: 5b:f9:a7:90:a1:05:b5:60:b5:d8:d7:39:f6:46:c5:7a:ca:ad: b8:37:32:83:dc:03:6d:77:4f:ee:dd:ae:7c:bc:57:f2:87:ad: e2:20:4c:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjYwNzI2MTkwODI5WhcNMjYwODAyMTkwODI5WjAYMRYwFAYD VQQDEw02YTY2NWIyZC03MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAox0XNRZCsvDpHNARdHh8xT+qhX+Agj58Q9jIyTrtJkqJPo+obyJ25O21T10O fQrT0X5sHr28sjZO/A5s9F4pfo7wtLlf4/Wqacx2LCDU4mzMRdFhzg6KvGsYAZjU p+Kc7xdCalGj9BYdmNDl/koSpR6ZCMLJax2K/jJyHyqOUvhBNZIcO4Uu3aSNJr42 eE8rS1Se+oiWMFAq9zGQxJDA/wgwDz0hE0bIua/L+Pdekfmhl3RE3xKrw3avOBdu ikAggUm07Is4JJbWqpkFJdBOeBR+iLewnFyV/xVgopRL25xuOVeeSnqxc48EbdES sBPuX2NMLblBo3HzVnDzf4vCPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEfsEe9 0CaUHdHA+/SLoTyABaU+MB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQluTEXqXy6TyaTd0W+RneCb7LY7V4WNSDKyBdA6JvoAjY37Gi5+UI7U2WxwH Hz6kUbM5MN4FULuz8/ELboz96sSIly/X7Tj84ECcAtlaJG/nfWhjUrHq6BZ5mYh2 ZgFrQBWhpJwdWGYZC85MgoVtpZEpS7tZ/UYFrnW0b1UeFULNy4G//yTzJ9Q1N8PJ p6AMs7oxcGGFiEyI5k80Ce7i/rT3Wi+7vU25ddOFrNuX7s/aF0bQgBYTiXjo8RJ2 EbG/yTP8OoRXlJy9k3TI35FCnA7TXEDl1CqIW/mnkKEFtWC12Nc59kbFesqtuDcy g9wDbXdP7t2ufLxX8oet4iBMyg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:31:44 2026 by rpki-client