$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: AYjAXFWiOsoPdlFV8RLTnKLxCoPgoY/jdmBvyrW4xlI= Subject key identifier: 9C:C5:54:24:1C:30:CA:A9:B1:1A:8E:9A:4F:DE:D1:A8:DA:87:21:90 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0C5D Signing time: Sun 20 Sep 2026 18:41:07 +0000 Manifest this update: Sun 20 Sep 2026 18:41:06 +0000 Manifest next update: Sun 27 Sep 2026 18:41:06 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: lEsnk4JzpWSi8lXbjN3TrpkjEUBXPDfH75cKlDOvU4c=) 2: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=) 3: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Sep 20 18:41:06 2026 GMT Not After : Sep 27 18:41:06 2026 GMT Subject: CN=6ab028c3-cd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:f3:11:e2:c1:1e:dd:dd:5f:4c:76:33:f6: db:e5:95:3f:50:dc:d6:58:d4:cf:5d:f1:11:c7:67: 70:6c:0b:0d:8e:e6:9e:95:89:d5:f2:f3:48:0a:df: 90:22:a7:6d:65:b3:b3:ff:05:77:ab:e1:13:38:e1: 75:04:8b:d1:69:bf:f1:19:ed:a4:41:c9:1c:43:3b: 9d:5d:4a:b7:f1:da:f6:27:d4:96:12:7a:3a:02:db: d9:70:dd:8c:21:3d:3b:f0:aa:ae:76:c6:98:77:ed: 6b:14:f8:6b:ad:87:d9:b6:47:58:eb:f7:66:2c:ef: d1:bc:b0:b5:df:b4:30:e1:b0:13:76:2e:c7:31:87: 99:2b:e2:b4:c1:45:f9:93:2f:71:c1:dd:88:91:57: 75:ac:ce:e8:3b:ea:9b:40:a6:f2:78:bb:ef:6a:6e: 32:c8:c9:f0:72:97:d7:f8:17:e2:ae:e8:88:f5:0e: 6b:67:f9:9b:b0:1a:6c:90:9b:c6:c1:77:84:2a:12: b1:58:65:55:e0:c6:e5:6a:50:c1:a2:e7:81:b1:b6: 82:53:87:08:df:81:fe:9c:7f:ae:2e:99:14:af:89: 5d:54:d2:65:f6:16:d0:a9:f0:45:64:16:7e:65:10: aa:ae:60:b2:59:a4:bd:0e:3d:d1:09:45:28:2c:7b: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:54:24:1C:30:CA:A9:B1:1A:8E:9A:4F:DE:D1:A8:DA:87:21:90 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ed:8b:ce:08:96:2e:13:d4:da:57:3b:fc:d1:5d:65:31:1c: 69:23:6b:91:01:ff:02:d7:b8:23:21:c5:bd:9e:21:48:1e:64: 5f:de:b5:4c:3c:7a:ee:16:f7:bc:03:d2:2b:5c:71:c6:ee:88: 30:c2:ee:38:aa:7f:6d:61:9a:8a:2c:3a:a5:ce:62:3e:b8:dc: 81:51:dc:20:2d:fa:fd:1c:3e:3f:42:0e:db:8f:ca:17:e4:cb: f9:d2:a0:ef:22:18:0e:fc:be:bf:d5:86:f8:1b:0e:72:74:57: a9:57:9d:ee:1a:a7:7b:28:d8:b9:a6:8e:91:21:d0:18:11:68: 15:bd:3a:7e:78:67:55:7c:5b:4a:74:fd:98:65:97:7e:d1:54: 0b:b6:e6:4c:67:54:4b:bd:e2:65:e6:de:90:87:18:15:7f:aa: b2:39:16:eb:a1:39:e3:f0:ab:48:b1:9d:5f:2a:44:13:24:b5: 64:63:18:57:96:5f:93:5c:c4:ab:01:1c:a7:13:b5:ac:47:80: 90:88:4f:a7:6a:3b:8b:31:ab:a2:c0:bc:72:78:82:e5:71:24: fe:06:ea:9d:8b:c3:7c:a1:0f:ce:63:d9:48:0d:52:af:74:64: 88:cc:a5:65:5a:99:27:25:a7:9d:62:82:34:c8:3d:70:5b:c4: 25:f4:1c:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjYwOTIwMTg0MTA2WhcNMjYwOTI3MTg0MTA2WjAYMRYwFAYD VQQDEw02YWIwMjhjMy1jZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBjzEeLBHt3dX0x2M/bb5ZU/UNzWWNTPXfERx2dwbAsNjuaelYnV8vNICt+Q IqdtZbOz/wV3q+ETOOF1BIvRab/xGe2kQckcQzudXUq38dr2J9SWEno6AtvZcN2M IT078KqudsaYd+1rFPhrrYfZtkdY6/dmLO/RvLC137Qw4bATdi7HMYeZK+K0wUX5 ky9xwd2IkVd1rM7oO+qbQKbyeLvvam4yyMnwcpfX+BfiruiI9Q5rZ/mbsBpskJvG wXeEKhKxWGVV4MblalDBoueBsbaCU4cI34H+nH+uLpkUr4ldVNJl9hbQqfBFZBZ+ ZRCqrmCyWaS9Dj3RCUUoLHttiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzFVCQc MMqpsRqOmk/e0ajahyGQMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqu2LzgiWLhPU2lc7/NFdZTEcaSNrkQH/Ate4IyHFvZ4hSB5kX961TDx67hb3 vAPSK1xxxu6IMMLuOKp/bWGaiiw6pc5iPrjcgVHcIC36/Rw+P0IO24/KF+TL+dKg 7yIYDvy+v9WG+BsOcnRXqVed7hqneyjYuaaOkSHQGBFoFb06fnhnVXxbSnT9mGWX ftFUC7bmTGdUS73iZebekIcYFX+qsjkW66E54/CrSLGdXypEEyS1ZGMYV5Zfk1zE qwEcpxO1rEeAkIhPp2o7izGrosC8cniC5XEk/gbqnYvDfKEPzmPZSA1Sr3RkiMyl ZVqZJyWnnWKCNMg9cFvEJfQccw== -----END CERTIFICATE-----Generated at Mon Sep 21 14:01:25 2026 by rpki-client