$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: nOFhVi5liZUc+EicP+MJYl4v3m8oroHnm9XEyK4Qpvo= Subject key identifier: F1:42:45:5C:95:95:C4:EF:19:37:61:8E:07:F3:AA:20:1C:3B:0B:0F Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0CE8 Signing time: Tue 28 Jul 2026 18:36:09 +0000 Manifest this update: Tue 28 Jul 2026 18:36:09 +0000 Manifest next update: Tue 04 Aug 2026 18:36:09 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: B6l+gwgdH5zUGfwgvquw/Ql61Bazv//pOKWvNTZvyBo=) 2: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=) 3: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Jul 28 18:36:09 2026 GMT Not After : Aug 4 18:36:09 2026 GMT Subject: CN=6a68f699-8ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:e5:c2:af:9d:ce:f7:fe:83:df:7d:84:1e: 0f:86:d9:21:bb:e9:18:bb:ac:12:42:5c:6b:5b:f0: 35:81:99:35:e3:67:f7:08:ce:5d:35:ff:1e:e2:dd: 61:31:0f:af:3c:8c:4a:36:49:18:25:6b:04:b1:96: 94:45:18:93:fb:65:2b:0b:56:f6:12:4a:de:6f:5b: 30:a7:85:da:d6:c3:18:36:a5:99:59:36:bd:0c:54: d7:89:76:12:ea:34:d7:8d:87:4a:05:90:54:fb:c1: f5:1c:38:e2:42:66:2c:dd:e5:50:94:4d:e6:ef:89: ed:49:79:52:81:41:85:e5:80:04:3a:64:cc:43:8c: f7:8b:92:7d:c9:88:43:ea:bb:8c:90:ba:a8:83:f1: 50:93:d1:d8:d6:12:55:4e:02:dc:d8:da:ae:0e:32: a8:06:0d:ef:2c:4d:46:22:c6:2d:2c:58:31:58:d2: d3:1f:99:e8:18:ff:50:ab:b0:f4:75:0e:86:16:47: 67:0e:50:33:11:8e:eb:4e:b6:78:59:91:dc:28:1c: e2:ce:5b:49:9d:1a:76:78:b0:08:50:f9:53:2a:10: b2:de:48:25:d8:a7:18:ae:11:d3:fa:6c:ed:e2:9c: ae:58:6b:16:6b:59:50:db:39:7a:a4:7a:b7:29:97: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:45:5C:95:95:C4:EF:19:37:61:8E:07:F3:AA:20:1C:3B:0B:0F X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:66:aa:63:98:ca:13:2e:03:13:00:45:1c:a5:75:0c:ae:ee: 0f:27:e3:28:bd:b6:81:4e:90:a7:d3:be:c8:f1:dc:51:b5:b7: 09:69:13:8b:44:22:09:1d:84:24:58:29:48:7a:81:4f:7f:21: af:c4:bf:47:b8:c1:b6:44:c6:a9:64:29:50:db:69:f8:5d:e9: cd:87:4e:bc:4a:c7:c4:c4:7a:d0:8b:87:96:5b:74:50:f9:68: 31:7f:08:ac:ff:b4:bc:48:35:77:01:5f:06:b1:5b:43:f4:23: 3a:03:d1:b8:88:cf:e3:05:b4:58:43:58:55:7d:d3:2b:cd:8e: 08:e2:e0:6a:02:cd:f7:85:a3:f5:aa:96:05:94:f2:27:9e:08: 04:82:c4:08:fc:2b:d4:ed:72:d5:40:26:cf:2c:ff:e6:79:07: ac:eb:3a:e1:9d:7e:a3:ec:ff:7f:24:cb:25:00:f4:dc:fe:03: 3f:d7:b8:df:e7:93:07:03:f5:96:9a:7e:8d:a9:e4:16:e4:1b: cc:27:76:9b:ed:3f:ab:72:8e:f5:e7:9b:4f:e7:44:28:7d:a5: cf:98:ba:0e:89:59:ce:2d:1d:32:7f:82:1d:c2:4d:37:c4:89: eb:0b:af:54:d6:8e:73:9b:11:6d:4d:e7:39:99:34:19:79:df: ca:52:b0:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjYwNzI4MTgzNjA5WhcNMjYwODA0MTgzNjA5WjAYMRYwFAYD VQQDEw02YTY4ZjY5OS04ZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW/lwq+dzvf+g999hB4Phtkhu+kYu6wSQlxrW/A1gZk142f3CM5dNf8e4t1h MQ+vPIxKNkkYJWsEsZaURRiT+2UrC1b2Ekreb1swp4Xa1sMYNqWZWTa9DFTXiXYS 6jTXjYdKBZBU+8H1HDjiQmYs3eVQlE3m74ntSXlSgUGF5YAEOmTMQ4z3i5J9yYhD 6ruMkLqog/FQk9HY1hJVTgLc2NquDjKoBg3vLE1GIsYtLFgxWNLTH5noGP9Qq7D0 dQ6GFkdnDlAzEY7rTrZ4WZHcKBzizltJnRp2eLAIUPlTKhCy3kgl2KcYrhHT+mzt 4pyuWGsWa1lQ2zl6pHq3KZcK/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFCRVyV lcTvGTdhjgfzqiAcOwsPMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQGaqY5jKEy4DEwBFHKV1DK7uDyfjKL22gU6Qp9O+yPHcUbW3CWkTi0QiCR2E JFgpSHqBT38hr8S/R7jBtkTGqWQpUNtp+F3pzYdOvErHxMR60IuHllt0UPloMX8I rP+0vEg1dwFfBrFbQ/QjOgPRuIjP4wW0WENYVX3TK82OCOLgagLN94Wj9aqWBZTy J54IBILECPwr1O1y1UAmzyz/5nkHrOs64Z1+o+z/fyTLJQD03P4DP9e43+eTBwP1 lpp+jankFuQbzCd2m+0/q3KO9eebT+dEKH2lz5i6DolZzi0dMn+CHcJNN8SJ6wuv VNaOc5sRbU3nOZk0GXnfylKwXA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:30:05 2026 by rpki-client