$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json) Hash identifier: cP0Xf7GY8hYra6K1KCdsXsTtyypSAuqlzRMCd6AvidE= Subject key identifier: 2B:F8:05:6A:21:7A:B0:90:ED:58:4E:03:62:0F:FC:95:44:6F:F0:EE Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 11C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft Manifest number: 11A8 Signing time: Tue 28 Jul 2026 17:16:56 +0000 Manifest this update: Tue 28 Jul 2026 17:16:56 +0000 Manifest next update: Tue 04 Aug 2026 17:16:56 +0000 Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: P4i3C9WXORk/G8f+EL0MVG4/buupSMQJUjedVIeXpuk=) 2: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: EtRVC+Tnay/XwjjnfrzZ4VWnKxvjsSi9zbht2seIWhQ=) 3: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: tkQkh0SeDKmYlFagbGUi9uFru4fwo8KYtzlYsDdAl6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4550 (0x11c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Validity Not Before: Jul 28 17:16:56 2026 GMT Not After : Aug 4 17:16:56 2026 GMT Subject: CN=6a68e408-70b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:28:0d:dc:d3:f4:d2:a0:2d:28:20:6c:c3: 2a:84:50:53:86:7c:d6:ee:05:6f:6f:8c:29:42:95: b2:ad:90:14:74:32:1b:ea:ef:e3:7b:af:08:9f:5b: 0b:92:e4:bc:a0:8d:c2:a9:07:82:8c:68:fd:9f:68: 28:09:12:26:a0:ab:0f:f1:b6:42:ce:68:ee:f2:0c: 67:56:a5:c6:d4:59:a9:0b:51:61:bc:7b:3d:ae:23: 85:e1:d5:eb:e2:32:1c:dd:91:d7:d2:d6:77:06:7c: 20:4f:08:27:3d:80:53:66:81:dc:f2:f6:0a:c9:7c: 0a:56:15:93:54:8a:21:0a:c2:85:00:87:a6:21:39: f2:c1:0d:3f:6c:ee:2d:b9:79:37:a3:66:08:cb:e3: fb:01:64:ad:1d:7a:4d:e2:6a:5b:42:c2:59:23:35: e8:cd:c2:5d:b6:40:0f:5e:7c:c3:08:7e:77:b4:c3: 16:d8:9d:2b:19:c1:00:f8:7e:e8:99:47:2e:59:0f: e1:14:73:e5:fd:8a:e9:1a:08:5e:b5:de:e4:47:a9: 9e:eb:e8:21:08:c5:1c:86:4f:39:93:d9:35:48:b5: b9:90:2b:d5:be:6c:48:54:d3:a3:34:b4:c6:d2:f0: f8:10:87:37:df:77:b3:64:b9:36:e4:d6:95:28:5c: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:05:6A:21:7A:B0:90:ED:58:4E:03:62:0F:FC:95:44:6F:F0:EE X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b2:59:6d:d1:a7:21:2f:38:1f:6d:5f:3b:88:50:5b:46:1b: b3:9c:f8:64:7a:67:f2:14:2e:80:b8:56:6f:85:e9:a0:6c:52: 52:c1:96:b2:89:fe:0a:53:0d:17:75:45:ee:6b:21:6e:ba:8a: a8:90:ef:78:ee:1b:ac:77:f4:cb:e1:28:0b:2a:7a:eb:27:1a: c1:0c:b9:6c:8a:19:33:3a:33:5f:3f:01:47:6a:33:45:c8:1d: a9:d2:68:23:14:00:d3:27:7c:55:ba:5c:ff:ba:2a:18:d8:6b: 8b:71:52:f7:6d:36:e9:ea:cd:73:72:e5:bd:88:2a:71:1a:a2: ee:2d:e7:1b:8c:ab:b0:03:55:28:b0:05:65:76:ae:ef:a7:79: 17:1a:19:9b:a9:c8:1b:e3:56:55:b5:69:6c:49:bf:71:e0:02: f4:44:d8:21:98:65:7c:7a:a6:c1:bb:77:eb:92:e0:1f:73:46: e3:19:3e:b6:33:0f:0e:52:67:b3:07:aa:72:5b:74:c2:89:d6: 39:31:bd:6a:8e:e7:c3:be:88:29:fe:6d:b4:c0:f4:d2:99:a4: c1:52:7e:bc:bd:8f:a4:c7:52:2e:6c:d5:16:24:61:79:54:f8: 78:07:51:58:88:4d:91:ef:f6:a6:6d:c0:be:43:8b:b5:2e:d9: 8a:66:a0:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjYwNzI4MTcxNjU2WhcNMjYwODA0MTcxNjU2WjAYMRYwFAYD VQQDEw02YTY4ZTQwOC03MGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1MoDdzT9NKgLSggbMMqhFBThnzW7gVvb4wpQpWyrZAUdDIb6u/je68In1sL kuS8oI3CqQeCjGj9n2goCRImoKsP8bZCzmju8gxnVqXG1FmpC1FhvHs9riOF4dXr 4jIc3ZHX0tZ3BnwgTwgnPYBTZoHc8vYKyXwKVhWTVIohCsKFAIemITnywQ0/bO4t uXk3o2YIy+P7AWStHXpN4mpbQsJZIzXozcJdtkAPXnzDCH53tMMW2J0rGcEA+H7o mUcuWQ/hFHPl/YrpGghetd7kR6me6+ghCMUchk85k9k1SLW5kCvVvmxIVNOjNLTG 0vD4EIc333ezZLk25NaVKFx2ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCv4BWoh erCQ7VhOA2IP/JVEb/DuMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQzMS82NUVGMjk2QTIzMTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVw VmxZQ01lZmdNWDVweThiQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPLJZbdGnIS84H21fO4hQW0Ybs5z4ZHpn8hQugLhWb4XpoGxSUsGWson+ClMN F3VF7mshbrqKqJDveO4brHf0y+EoCyp66ycawQy5bIoZMzozXz8BR2ozRcgdqdJo IxQA0yd8Vbpc/7oqGNhri3FS92026erNc3LlvYgqcRqi7i3nG4yrsANVKLAFZXau 76d5FxoZm6nIG+NWVbVpbEm/ceAC9ETYIZhlfHqmwbt365LgH3NG4xk+tjMPDlJn sweqclt0wonWOTG9ao7nw76IKf5ttMD00pmkwVJ+vL2PpMdSLmzVFiRheVT4eAdR WIhNke/2pm3AvkOLtS7Zimaggw== -----END CERTIFICATE-----Generated at Wed Jul 29 09:29:05 2026 by rpki-client