$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft File: YpYWXDbflgVmse01DqfefzOLOpk.mft (raw, json) Hash identifier: CU3wYmgTh9iJIKdE7bklj7PV+lM20ec0/5h0B48ws48= Subject key identifier: EC:6E:15:6C:02:7C:9C:49:CF:8C:DE:E9:B4:43:21:4E:5E:86:2D:ED Authority key identifier: 62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99 Certificate issuer: /CN=A91456CD/serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft Manifest number: 32 Signing time: Mon 27 Jul 2026 10:59:05 +0000 Manifest this update: Mon 27 Jul 2026 10:59:04 +0000 Manifest next update: Mon 03 Aug 2026 10:59:04 +0000 Files and hashes: 1: YpYWXDbflgVmse01DqfefzOLOpk.crl (hash: Fpdnjbuz5Cdw3bgsbFzy/11n6HM+S7+N5OFTcOQNyWQ=) 2: E70D393E3E1211F1B8544D87AE833773.roa (hash: QKtJAkqUtPB3mTAjjBY4LLg9Wgtws5WpGtADkwoN/hg=) 3: BBFF83183E1311F1A75FAD3AAF833773.roa (hash: tVkmnNetZiuk3U9n5t1OgMJioxU81CU8IuCEcNguLvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CD, serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99 Validity Not Before: Jul 27 10:59:04 2026 GMT Not After : Aug 3 10:59:04 2026 GMT Subject: CN=6a6739f9-1df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:19:29:67:0e:43:8f:4b:da:e4:3e:2b:69: 3f:f8:13:c7:c7:28:3c:9d:18:5e:9f:7d:7c:7c:37: 09:60:42:41:d9:f5:99:52:d0:bf:b5:19:b5:79:a6: 2a:d6:6c:6a:30:72:e6:c1:04:d7:71:0c:dc:73:ce: b7:93:f8:f5:e6:ee:e3:ba:66:64:1a:60:24:c1:27: 88:9f:ff:d4:31:3c:c1:a6:d3:0a:6c:98:af:1d:49: db:4b:b3:87:4c:56:38:13:65:b8:40:b1:36:3b:75: 10:ec:d8:82:b2:a1:9f:26:82:7e:b9:b8:8a:b2:9f: 75:7c:3b:e6:fb:26:f2:44:15:15:f6:55:98:9b:25: af:62:2d:c7:21:46:bd:42:fb:3a:b4:1c:f8:9f:b3: 55:dd:aa:85:2f:f0:59:d3:3f:1f:5c:71:ca:e8:e4: 27:ef:c6:f3:61:30:fe:84:d1:ef:c5:6b:a9:8f:e0: af:e3:17:57:88:61:bd:15:40:f2:3b:68:79:d2:63: 3e:5a:09:f6:8e:5b:5f:e4:5a:a9:cb:40:11:92:46: 47:f4:93:92:f9:79:43:c8:cb:23:70:0b:10:25:2c: 63:52:0e:c4:15:27:14:20:2a:6c:25:f9:e0:7b:bc: 16:7d:22:8d:f7:6b:f8:4b:df:af:aa:f7:32:9f:97: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:15:6C:02:7C:9C:49:CF:8C:DE:E9:B4:43:21:4E:5E:86:2D:ED X509v3 Authority Key Identifier: keyid:62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:55:99:b7:99:7f:23:0e:eb:da:d5:20:dc:17:64:80:f9: a1:92:45:bd:6a:5f:b5:15:5d:8f:72:f4:ac:aa:5a:4c:0e:05: 95:fc:c9:ec:87:bc:34:7d:f5:8f:2d:88:ff:8c:c3:3d:b4:9e: c8:0d:b5:fc:ba:ef:7d:f1:7b:c3:11:c1:2f:6f:1b:d7:13:13: 91:7e:89:b8:ef:ca:e0:2f:5b:a3:78:7e:81:4c:29:f6:ac:91: 9e:1c:a5:e9:ea:46:f0:d7:98:14:2e:61:79:fc:2d:b9:9f:19: ff:30:b7:1d:b8:65:a0:f3:b8:e7:78:d3:19:41:ac:b7:23:f7: db:16:29:5c:88:a5:4a:34:62:6f:75:18:f0:ac:69:7c:b4:c4: 64:d5:a8:a6:53:49:44:30:5f:f8:32:34:62:cd:40:cd:c6:ed: 5a:19:5a:63:9e:06:a3:fa:36:1c:d1:be:de:3b:77:b9:ad:ad: c9:8e:26:58:26:38:fd:5f:7d:3b:8e:78:5c:37:9b:85:7a:71: 9e:8d:5b:0a:a9:82:45:b2:f6:ae:b6:7d:11:2c:84:9f:9c:05: 8b:56:1f:84:10:4c:51:e1:b9:04:9f:de:a2:4a:9c:57:7e:e0: b0:d6:be:ef:84:19:81:cd:d4:00:35:7e:ae:4c:cb:80:31:9b: 43:d9:a9:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRDExMC8GA1UEBRMoNjI5NjE2NUMzNkRGOTYwNTY2QjFFRDM1MEVBN0RFN0Yz MzhCM0E5OTAeFw0yNjA3MjcxMDU5MDRaFw0yNjA4MDMxMDU5MDRaMBgxFjAUBgNV BAMTDTZhNjczOWY5LTFkZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/5hkpZw5Dj0va5D4raT/4E8fHKDydGF6ffXx8NwlgQkHZ9ZlS0L+1GbV5pirW bGowcubBBNdxDNxzzreT+PXm7uO6ZmQaYCTBJ4if/9QxPMGm0wpsmK8dSdtLs4dM VjgTZbhAsTY7dRDs2IKyoZ8mgn65uIqyn3V8O+b7JvJEFRX2VZibJa9iLcchRr1C +zq0HPifs1XdqoUv8FnTPx9cccro5CfvxvNhMP6E0e/Fa6mP4K/jF1eIYb0VQPI7 aHnSYz5aCfaOW1/kWqnLQBGSRkf0k5L5eUPIyyNwCxAlLGNSDsQVJxQgKmwl+eB7 vBZ9Io33a/hL36+q9zKfl4PZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7G4VbAJ8 nEnPjN7ptEMhTl6GLe0wHwYDVR0jBBgwFoAUYpYWXDbflgVmse01DqfefzOLOpkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNEL0FDNEE4ODQwM0Uw RjExRjFBQTE1OEQ1NkFBODMzNzczL1lwWVdYRGJmbGdWbXNlMDFEcWZlZnpPTE9w ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXBZV1hEYmZsZ1Ztc2UwMURxZmVmek9MT3BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNEL0FDNEE4ODQwM0UwRjExRjFBQTE1OEQ1NkFBODMzNzczL1lwWVdYRGJmbGdW bXNlMDFEcWZlZnpPTE9way5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGDlWZt5l/Iw7r2tUg3BdkgPmhkkW9al+1FV2PcvSsqlpMDgWV/Mnsh7w0ffWP LYj/jMM9tJ7IDbX8uu998XvDEcEvbxvXExORfom478rgL1ujeH6BTCn2rJGeHKXp 6kbw15gULmF5/C25nxn/MLcduGWg87jneNMZQay3I/fbFilciKVKNGJvdRjwrGl8 tMRk1aimU0lEMF/4MjRizUDNxu1aGVpjngaj+jYc0b7eO3e5ra3JjiZYJjj9X307 jnhcN5uFenGejVsKqYJFsvautn0RLISfnAWLVh+EEExR4bkEn96iSpxXfuCw1r7v hBmBzdQANX6uTMuAMZtD2anz -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:16 2026 by rpki-client