$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: YJHMUFdasl5D3XK5ggMmop5L6Tq6XKix/3DBzyLS3xc= Subject key identifier: 5B:BD:81:05:B2:3E:91:20:D3:13:7D:AA:53:F6:61:BE:6F:0D:D4:E8 Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 0896 Signing time: Sun 26 Jul 2026 21:16:12 +0000 Manifest this update: Sun 26 Jul 2026 21:16:12 +0000 Manifest next update: Sun 02 Aug 2026 21:16:12 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: 19FxlpwEX8S9/QQAT9L1X5fsOe8G30ATP2n3H8yiOtQ=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: FgNhv4Lyku+4T14lzJCXvI1aI6pzmBx0dttZBahWL/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: Jul 26 21:16:12 2026 GMT Not After : Aug 2 21:16:12 2026 GMT Subject: CN=6a66791c-ba5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:f3:ae:52:2c:0e:88:8f:50:05:7a:1d:52: d5:83:c7:95:34:f0:70:83:fe:91:c9:5f:09:be:cd: cc:8d:9a:9c:6b:b9:3d:1e:30:5e:e7:6f:df:15:ce: 5d:28:f4:6d:8e:7b:2a:6f:28:02:a2:65:7d:bc:f4: 11:5a:1c:0a:a6:f8:32:55:57:4e:06:90:87:72:90: 9c:0c:c5:28:05:28:2e:74:77:2a:b2:56:be:b4:37: 00:a1:d2:64:63:96:0b:0b:06:d5:d0:4c:4a:fa:66: 10:05:41:ff:dc:10:d7:10:8f:1a:f1:19:e8:86:d2: 55:c0:95:99:b2:05:9e:ec:f3:a8:cf:7a:68:69:39: d5:2c:bd:a1:e0:b6:fd:c6:85:35:77:e1:e3:c7:59: a6:f0:ae:ce:f0:db:a4:37:31:52:e0:98:ed:98:90: 61:c6:88:0e:b1:33:ad:4d:12:69:2a:92:64:6c:80: 77:75:1d:7c:1e:6b:9e:6c:d2:10:8e:59:51:c6:5a: 3a:42:f4:f7:06:78:e0:d2:c5:7e:1f:2d:0a:61:38: e6:07:37:7d:1e:d6:e2:87:62:48:c3:5b:4f:2e:7c: ee:28:e8:c3:05:17:4c:74:dd:da:94:3d:ac:b1:50: 97:dd:ba:cb:d6:d6:5a:c8:31:88:a3:4d:fe:ef:2e: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:81:05:B2:3E:91:20:D3:13:7D:AA:53:F6:61:BE:6F:0D:D4:E8 X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:23:80:f8:ee:66:6c:be:2a:97:62:79:f4:f9:23:04:bc:8c: e5:6c:fe:c1:e5:02:63:21:cd:b6:fb:98:3c:f0:41:99:58:0f: a1:e9:a4:5c:2c:4a:7b:8b:3c:68:94:ee:29:bb:17:fc:c2:0b: 5b:98:17:c4:39:1b:21:68:56:d1:f6:33:c6:01:1d:fc:6e:b2: 34:c9:a6:03:ba:0b:3e:3a:c9:d8:2b:eb:e3:f9:8e:cf:71:95: 10:9d:2c:ef:99:73:f6:37:7c:3e:16:dd:5a:64:74:c3:53:2d: 82:cb:7e:cb:ef:75:03:80:f7:37:9a:a9:2f:30:11:02:6c:b2: 8d:2a:73:9e:51:97:cd:8d:5b:fe:d5:e8:8c:3c:81:0f:29:bd: f7:a5:98:ed:bb:a1:36:d9:79:31:66:aa:2a:4d:b7:2a:f1:0b: 66:d0:4c:7e:9f:fa:d9:91:43:7e:98:9a:72:54:2b:b8:44:d0: c0:ae:67:1f:03:de:5c:a7:12:07:ec:02:4e:1c:41:c0:57:f1: 0f:59:a7:44:81:2a:10:0a:65:c4:90:45:0e:9a:3f:e1:c8:10: d3:d1:de:36:22:81:6d:e3:e0:08:43:6d:e4:d4:50:f5:c3:cb: ee:ba:73:03:75:e9:32:4a:18:24:f3:c5:c5:e6:35:b6:25:53: c4:e0:43:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjYwNzI2MjExNjEyWhcNMjYwODAyMjExNjEyWjAYMRYwFAYD VQQDEw02YTY2NzkxYy1iYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGbzrlIsDoiPUAV6HVLVg8eVNPBwg/6RyV8Jvs3MjZqca7k9HjBe52/fFc5d KPRtjnsqbygComV9vPQRWhwKpvgyVVdOBpCHcpCcDMUoBSgudHcqsla+tDcAodJk Y5YLCwbV0ExK+mYQBUH/3BDXEI8a8RnohtJVwJWZsgWe7POoz3poaTnVLL2h4Lb9 xoU1d+Hjx1mm8K7O8NukNzFS4JjtmJBhxogOsTOtTRJpKpJkbIB3dR18HmuebNIQ jllRxlo6QvT3Bnjg0sV+Hy0KYTjmBzd9Htbih2JIw1tPLnzuKOjDBRdMdN3alD2s sVCX3brL1tZayDGIo03+7y7CJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu9gQWy PpEg0xN9qlP2Yb5vDdToMB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvyOA+O5mbL4ql2J59PkjBLyM5Wz+weUCYyHNtvuYPPBBmVgPoemkXCxKe4s8 aJTuKbsX/MILW5gXxDkbIWhW0fYzxgEd/G6yNMmmA7oLPjrJ2Cvr4/mOz3GVEJ0s 75lz9jd8PhbdWmR0w1Mtgst+y+91A4D3N5qpLzARAmyyjSpznlGXzY1b/tXojDyB Dym996WY7buhNtl5MWaqKk23KvELZtBMfp/62ZFDfpiaclQruETQwK5nHwPeXKcS B+wCThxBwFfxD1mnRIEqEAplxJBFDpo/4cgQ09HeNiKBbePgCENt5NRQ9cPL7rpz A3XpMkoYJPPFxeY1tiVTxOBDzA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:46 2026 by rpki-client