$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: Dj4fN+TT4N1zf5q/bzr04pfhSaJQE+XnoeXoPkFUsjE= Subject key identifier: 2F:55:1A:B1:18:51:87:13:9C:EA:69:6D:D8:77:CC:FC:45:D5:33:46 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 05A3 Signing time: Sun 20 Sep 2026 23:04:47 +0000 Manifest this update: Sun 20 Sep 2026 23:04:46 +0000 Manifest next update: Sun 27 Sep 2026 23:04:46 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: Hp9ua3erKWXIPWaypPG8GV+v83AV2s6C+pqBbk2aFCM=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Sep 20 23:04:46 2026 GMT Not After : Sep 27 23:04:46 2026 GMT Subject: CN=6ab0668e-76bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:de:c9:5b:37:d7:83:48:f7:22:bd:8f:8b: da:86:42:56:b8:87:0a:2f:d4:42:8a:01:f3:83:75: 53:b5:3d:5c:b9:5f:ab:d8:e3:a1:c0:63:f8:06:43: df:e3:25:c3:37:3c:ac:d6:28:74:56:5a:1a:ec:43: f2:a5:64:f6:68:11:15:73:3a:bf:ef:c6:41:fd:db: 87:2b:ef:ed:9a:31:a3:25:e4:8b:ab:13:b9:f5:47: 62:86:ba:11:b9:5a:66:a8:cd:40:e6:f9:1c:79:2f: 4e:3b:fe:2a:15:f5:fa:aa:c1:ab:16:24:30:9a:95: 66:4f:7f:48:58:4e:a4:1f:d8:f6:f4:91:26:a5:1b: 6c:3c:28:33:8a:1d:4a:f3:6c:90:76:17:b1:46:7b: 2a:fd:e4:87:5d:40:39:b5:0f:5e:30:4e:65:83:d7: 46:e8:a0:05:5b:c5:4f:78:db:d9:8a:05:e8:91:04: cc:36:e0:50:1e:a7:db:89:5a:33:09:1b:0a:08:f1: 9c:a9:3a:fc:5b:dd:02:a1:17:ec:14:7f:ac:f3:b2: 19:f8:06:ae:d5:3c:9c:45:ed:14:3c:89:62:c8:49: 78:a7:4b:c9:b7:e1:9a:fd:ec:23:47:29:0b:cb:d1: 45:72:d0:19:b7:25:75:2d:ad:ad:05:08:28:c6:92: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:55:1A:B1:18:51:87:13:9C:EA:69:6D:D8:77:CC:FC:45:D5:33:46 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ea:a4:31:05:c0:da:20:72:71:68:b3:e7:21:ae:73:01:5e: cd:7e:b3:0a:b5:92:7c:f5:95:e3:87:c1:c2:9b:d7:d6:58:47: b4:9d:0a:e8:c6:b0:e8:3e:57:5d:ce:4e:fb:04:b5:6f:66:ac: d5:67:b9:a8:f5:f6:e2:fc:a9:54:de:36:d7:bf:46:6d:85:6c: eb:18:43:6f:7c:d5:30:b9:a8:82:a6:0c:79:92:d3:60:c8:c2: fc:40:9a:09:5a:ab:69:51:e5:d6:36:95:44:a3:4a:16:69:79: aa:8f:b1:5e:9e:d6:4e:59:25:0d:94:d4:3b:58:0e:94:af:0a: 67:fe:7a:23:e9:81:fe:48:ab:64:d6:4c:19:ee:17:f2:a2:77: 67:c0:03:ec:11:fe:b3:ca:3e:68:f7:c5:f4:45:55:5e:10:2d: 7d:4b:89:e8:6e:c9:b5:87:03:d2:2a:e1:87:18:28:9e:97:ac: cd:27:09:63:47:f2:79:ee:d2:60:04:a0:76:c2:8f:d3:74:6f: ec:11:53:1f:fc:bd:56:ff:32:bb:ed:90:b6:9f:81:01:0e:70: 1e:48:2e:5a:a5:2e:f7:71:9b:f6:69:a7:0b:0e:c7:7c:1a:07: 24:9d:92:25:12:3b:ce:43:c7:82:60:03:60:94:5f:b2:ab:9f: 23:6c:ec:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwOTIwMjMwNDQ2WhcNMjYwOTI3MjMwNDQ2WjAYMRYwFAYD VQQDEw02YWIwNjY4ZS03NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+HeyVs314NI9yK9j4vahkJWuIcKL9RCigHzg3VTtT1cuV+r2OOhwGP4BkPf 4yXDNzys1ih0Vloa7EPypWT2aBEVczq/78ZB/duHK+/tmjGjJeSLqxO59UdihroR uVpmqM1A5vkceS9OO/4qFfX6qsGrFiQwmpVmT39IWE6kH9j29JEmpRtsPCgzih1K 82yQdhexRnsq/eSHXUA5tQ9eME5lg9dG6KAFW8VPeNvZigXokQTMNuBQHqfbiVoz CRsKCPGcqTr8W90CoRfsFH+s87IZ+Aau1TycRe0UPIliyEl4p0vJt+Ga/ewjRykL y9FFctAZtyV1La2tBQgoxpKt3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9VGrEY UYcTnOppbdh3zPxF1TNGMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZOqkMQXA2iBycWiz5yGucwFezX6zCrWSfPWV44fBwpvX1lhHtJ0K6Maw6D5X Xc5O+wS1b2as1We5qPX24vypVN42179GbYVs6xhDb3zVMLmogqYMeZLTYMjC/ECa CVqraVHl1jaVRKNKFml5qo+xXp7WTlklDZTUO1gOlK8KZ/56I+mB/kirZNZMGe4X 8qJ3Z8AD7BH+s8o+aPfF9EVVXhAtfUuJ6G7JtYcD0irhhxgonpeszScJY0fyee7S YASgdsKP03Rv7BFTH/y9Vv8yu+2Qtp+BAQ5wHkguWqUu93Gb9mmnCw7HfBoHJJ2S JRI7zkPHgmADYJRfsqufI2zsGQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:31:56 2026 by rpki-client