$ rpki-client -vvvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: UkH8fsKw/M+oa16AY8BH/dtDjTn+qDZl2+xvZ2toDRo= Subject key identifier: 73:C0:89:0D:FD:11:37:02:D1:D2:DD:B9:E6:63:C8:6A:7D:9A:23:C4 Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 029B Signing time: Mon 21 Sep 2026 01:38:57 +0000 Manifest this update: Mon 21 Sep 2026 01:38:56 +0000 Manifest next update: Mon 28 Sep 2026 01:38:56 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: 4ipMT52bdwSKMhW0HehC6/o+osE4tZvVK84aa9SoLJ0=) 2: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=) 3: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Sep 21 01:38:56 2026 GMT Not After : Sep 28 01:38:56 2026 GMT Subject: CN=6ab08ab1-3daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e0:af:e6:d0:25:e7:05:96:be:32:d6:fb:09: 97:f1:fd:09:1e:90:4d:32:98:99:a5:53:8f:f0:eb: 32:eb:2b:87:03:4a:63:b1:74:72:3c:89:24:7c:cd: 85:b8:9e:0e:ac:b5:53:be:66:c1:1e:0a:43:2b:65: 24:61:69:3d:04:9a:c5:60:ad:ee:af:a2:68:1d:f8: b7:48:73:ce:fe:da:1e:41:f0:35:44:31:4b:06:d0: 3b:40:90:fc:b9:f4:43:ea:f2:ed:45:e2:bf:41:88: a1:44:39:b8:ef:58:85:20:85:db:4e:86:28:41:c9: 71:c7:5b:56:2b:1c:77:13:1b:61:97:a3:fb:22:34: e0:d0:51:a3:c2:39:f6:07:6c:82:e6:e6:64:15:33: fa:b6:35:80:dc:bb:5e:64:96:17:d6:34:10:ef:3e: e3:1f:24:90:22:93:84:f4:95:ad:d0:05:36:d2:38: 11:13:4a:95:99:55:ef:ca:4a:09:15:a6:c2:e2:96: eb:9d:36:a2:70:12:03:62:4d:a8:7d:0a:da:2c:51: d4:e9:10:27:61:a8:46:b4:76:38:a8:45:d9:b9:83: 5b:5f:af:45:8f:36:42:d9:33:0e:4a:0d:2d:51:a3: b6:4d:af:72:99:cd:b3:41:d2:84:40:b9:0b:d6:64: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:89:0D:FD:11:37:02:D1:D2:DD:B9:E6:63:C8:6A:7D:9A:23:C4 X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:75:e7:b7:79:77:c9:bd:2a:02:4b:c8:30:4b:de:a8:ae:07: 26:11:cf:a7:bc:51:1b:44:6d:81:f8:b0:99:e5:4a:e2:a7:f9: 42:71:74:35:13:26:f8:85:f4:25:0f:73:b1:75:3d:21:ca:98: 7e:16:46:1c:11:1e:cf:b2:42:80:93:4e:8c:ac:38:9a:3a:fd: 19:eb:70:0b:85:ba:da:1e:da:d7:bd:fb:eb:c1:03:2a:87:d2: 29:29:74:11:0b:3f:b7:da:28:69:b6:72:71:30:b4:7a:93:01: bb:d1:53:4b:51:7d:56:86:79:d1:7d:e3:09:65:0a:87:fe:8c: b9:73:35:6f:53:12:2e:5a:90:b5:63:e7:1f:57:af:22:9b:44: 44:74:91:63:96:29:f3:9d:13:da:1a:fa:8d:52:f8:33:29:3b: 37:be:60:50:ec:3e:23:76:4c:9a:d7:ae:a5:12:e4:16:42:93: 23:f5:54:1d:eb:ff:1f:4c:d5:b9:4f:ee:3f:b9:09:b7:6f:4f: 7b:96:ce:5e:4d:32:d3:72:e6:88:8b:14:27:f6:f8:a7:6c:7b: 25:b8:4d:a2:55:7b:bb:80:8f:c6:fe:83:06:d1:07:8a:14:bc: 1e:5d:dc:a9:f0:e4:be:08:d0:49:78:f4:90:46:01:95:88:37: d8:71:c1:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjYwOTIxMDEzODU2WhcNMjYwOTI4MDEzODU2WjAYMRYwFAYD VQQDEw02YWIwOGFiMS0zZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OCv5tAl5wWWvjLW+wmX8f0JHpBNMpiZpVOP8Osy6yuHA0pjsXRyPIkkfM2F uJ4OrLVTvmbBHgpDK2UkYWk9BJrFYK3ur6JoHfi3SHPO/toeQfA1RDFLBtA7QJD8 ufRD6vLtReK/QYihRDm471iFIIXbToYoQclxx1tWKxx3Exthl6P7IjTg0FGjwjn2 B2yC5uZkFTP6tjWA3LteZJYX1jQQ7z7jHySQIpOE9JWt0AU20jgRE0qVmVXvykoJ FabC4pbrnTaicBIDYk2ofQraLFHU6RAnYahGtHY4qEXZuYNbX69FjzZC2TMOSg0t UaO2Ta9ymc2zQdKEQLkL1mQMywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPAiQ39 ETcC0dLdueZjyGp9miPEMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk3Xnt3l3yb0qAkvIMEveqK4HJhHPp7xRG0RtgfiwmeVK4qf5QnF0NRMm+IX0 JQ9zsXU9IcqYfhZGHBEez7JCgJNOjKw4mjr9GetwC4W62h7a173768EDKofSKSl0 EQs/t9ooabZycTC0epMBu9FTS1F9VoZ50X3jCWUKh/6MuXM1b1MSLlqQtWPnH1ev IptERHSRY5Yp850T2hr6jVL4Myk7N75gUOw+I3ZMmteupRLkFkKTI/VUHev/H0zV uU/uP7kJt29Pe5bOXk0y03LmiIsUJ/b4p2x7JbhNolV7u4CPxv6DBtEHihS8Hl3c qfDkvgjQSXj0kEYBlYg32HHBwg== -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:27 2026 by rpki-client