$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json) Hash identifier: Y5vfdwXBuin/UIM0XKzfjqL8ZDL3YnBrZsR9Psd7cCU= Subject key identifier: 3C:D0:86:F9:49:12:79:A5:00:A6:99:77:73:48:E8:EC:F3:E9:DD:2A Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3 Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3 Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft Manifest number: 0CEC Signing time: Sun 20 Sep 2026 18:23:48 +0000 Manifest this update: Sun 20 Sep 2026 18:23:48 +0000 Manifest next update: Sun 27 Sep 2026 18:23:48 +0000 Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: w16oQrVxLHxal8DwNmj6+b9/pI8wXlmHQRMk+k5n3CE=) 2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3 Validity Not Before: Sep 20 18:23:48 2026 GMT Not After : Sep 27 18:23:48 2026 GMT Subject: CN=6ab024b4-908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:e5:03:ee:9e:01:0f:b3:41:6d:6b:17:29: e7:3d:eb:cf:c5:9c:3a:7a:d5:68:90:f7:cc:1a:4b: d3:ee:a6:39:9b:2d:10:4b:7c:9e:ae:33:38:d8:96: 34:03:62:9b:69:fd:dd:97:b8:b3:51:d2:4b:e8:e1: ef:18:a8:4d:a2:e6:c9:25:bf:26:b8:c8:04:37:76: a0:63:4d:30:80:02:1b:e9:3b:00:a5:d5:86:28:5f: 0e:58:6f:e3:dd:49:54:15:43:fe:4d:88:3d:99:6b: 17:1f:53:4e:33:60:7c:7a:6a:a3:dd:db:b4:f9:36: 1f:07:6a:a3:1f:fe:95:05:5c:41:3c:06:ef:01:b2: 05:b2:ec:63:25:f9:de:98:d5:a8:64:e3:88:f6:d4: 66:e3:88:ef:b7:e5:69:00:d1:cd:3b:9f:95:27:52: 2e:34:b1:f6:54:39:dd:b7:ab:10:18:93:c0:af:07: f2:31:57:14:93:33:6d:38:e6:9e:f9:45:88:c5:e8: 1b:72:b0:ca:eb:bc:f3:33:c1:76:5e:d1:81:20:e6: 2c:05:54:c0:2c:22:e2:7a:2c:ba:72:03:2f:0c:2e: 59:0c:b9:66:a4:26:69:e5:22:ee:d4:44:38:fe:93: 74:9e:4e:32:8d:f1:40:f7:dd:c9:73:dc:cc:dc:72: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D0:86:F9:49:12:79:A5:00:A6:99:77:73:48:E8:EC:F3:E9:DD:2A X509v3 Authority Key Identifier: keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0f:b3:e0:b1:23:d1:cb:13:4c:e4:8d:00:7c:5a:7e:2f:c6: f3:e7:1a:6b:6c:75:e2:3a:24:d2:e7:91:7e:5b:b2:98:f3:2a: 24:5e:a7:76:14:9d:41:e8:50:56:ea:0c:27:c1:73:0f:08:7b: ed:eb:5f:7d:ce:f8:78:00:52:f1:d3:e0:7c:3a:1d:36:fa:27: 42:37:2c:f0:66:eb:da:1c:40:26:23:d3:dd:65:01:50:5c:88: 1d:01:7b:41:f1:23:30:3c:12:5c:cb:67:e7:b3:1b:a9:ed:49: a3:6e:a8:70:86:f9:86:d5:3b:3b:94:c8:0f:07:30:b1:49:9d: 7b:3a:4a:9e:34:dc:f7:22:c6:1a:85:f7:ee:0b:a6:bf:a3:41: 1b:f8:62:75:08:1b:bc:b0:f3:39:5b:a3:0d:3d:55:cb:a1:70: 19:d6:d5:3f:fa:a1:51:a4:6b:9c:bd:5a:14:31:c3:60:19:84: 3b:9e:1e:48:28:15:fd:60:78:0a:3e:06:09:a3:19:b6:b7:d4: eb:b6:e9:d4:c6:e3:8e:70:ac:83:04:05:b1:1b:51:6d:7f:55: f9:3d:76:9b:c3:6d:a7:7a:fc:a4:3f:f0:5d:15:3c:be:7e:ef: 3c:39:0f:d7:93:f2:62:22:fa:34:ff:d3:05:16:ad:a3:b8:dd: 99:89:60:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJEMjUxMTAvBgNVBAUTKEM5MDlCREIyODRFNERGMDg0Nzc2NjBENjgyQjdDQjNG NTk0ODMxRTMwHhcNMjYwOTIwMTgyMzQ4WhcNMjYwOTI3MTgyMzQ4WjAYMRYwFAYD VQQDEw02YWIwMjRiNC05MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3PlA+6eAQ+zQW1rFynnPevPxZw6etVokPfMGkvT7qY5my0QS3yerjM42JY0 A2Kbaf3dl7izUdJL6OHvGKhNoubJJb8muMgEN3agY00wgAIb6TsApdWGKF8OWG/j 3UlUFUP+TYg9mWsXH1NOM2B8emqj3du0+TYfB2qjH/6VBVxBPAbvAbIFsuxjJfne mNWoZOOI9tRm44jvt+VpANHNO5+VJ1IuNLH2VDndt6sQGJPArwfyMVcUkzNtOOae +UWIxegbcrDK67zzM8F2XtGBIOYsBVTALCLieiy6cgMvDC5ZDLlmpCZp5SLu1EQ4 /pN0nk4yjfFA993Jc9zM3HLp0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzQhvlJ EnmlAKaZd3NI6Ozz6d0qMB8GA1UdIwQYMBaAFMkJvbKE5N8IR3Zg1oK3yz9ZSDHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQyNS8wN0Y4MjE0QTE0 RTQxMUVBODc2RTg2NDBDNEY5QUUwMi95UW05c29UazN3aEhkbURXZ3JmTFAxbElN ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lRbTlzb1RrM3doSGRtRFdncmZMUDFsSU1lTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQyNS8wN0Y4MjE0QTE0RTQxMUVBODc2RTg2NDBDNEY5QUUwMi95UW05c29UazN3 aEhkbURXZ3JmTFAxbElNZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQ+z4LEj0csTTOSNAHxafi/G8+caa2x14jok0ueRfluymPMqJF6ndhSdQehQ VuoMJ8FzDwh77etffc74eABS8dPgfDodNvonQjcs8Gbr2hxAJiPT3WUBUFyIHQF7 QfEjMDwSXMtn57Mbqe1Jo26ocIb5htU7O5TIDwcwsUmdezpKnjTc9yLGGoX37gum v6NBG/hidQgbvLDzOVujDT1Vy6FwGdbVP/qhUaRrnL1aFDHDYBmEO54eSCgV/WB4 Cj4GCaMZtrfU67bp1MbjjnCsgwQFsRtRbX9V+T12m8Ntp3r8pD/wXRU8vn7vPDkP 15PyYiL6NP/TBRato7jdmYlg4A== -----END CERTIFICATE-----Generated at Mon Sep 21 13:57:33 2026 by rpki-client