$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: MFbe454h7v5B750ewn7kGI53TB3NeHjajHU80tAqYiI= Subject key identifier: F8:83:AC:C1:FC:98:45:87:D6:A0:E8:40:EB:B5:3D:57:F5:E9:06:FA Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 01B7 Signing time: Mon 21 Sep 2026 04:00:20 +0000 Manifest this update: Mon 21 Sep 2026 04:00:19 +0000 Manifest next update: Mon 28 Sep 2026 04:00:19 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: YsS18CEFOkOmF/LxiKi8n22ES4x4SLqH7H+vTnYUMPU=) 2: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: J8JvI737IcwyzOv4zv6SR8Qx/PymvBvHR1EoEe3p9Ms=) 3: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: vzVQBVMmwkmKLF9gw2qbd+GWfUXHzR09NVFTQu0OTDQ=) 4: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: Qiz09qw18Q7itjGB4hEAftD52hr4YhZFhmDLsy4591Q=) 6: 680D797023E611EF8165F17BC4F9AE02.roa (hash: dAU1goqR7eXbVxXE2s6EOPd+tQKFat1qMstDa6Ugbus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Sep 21 04:00:19 2026 GMT Not After : Sep 28 04:00:19 2026 GMT Subject: CN=6ab0abd4-4ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:da:8d:fa:9c:83:7e:45:b7:fc:51:dd:b3: b1:f9:ee:5a:78:64:cf:33:c0:b2:78:f0:be:fa:a6: c2:07:fa:4c:12:fc:32:fb:a6:12:7b:c2:10:81:a8: 1a:f1:36:dd:29:d6:dd:e3:5a:8f:74:97:b7:90:8e: 8c:1a:5d:b8:59:b4:e1:aa:64:9b:9a:df:e2:05:38: 73:b5:d5:f7:29:e2:83:93:cf:2e:b4:cb:b1:08:03: ad:a2:32:4e:59:b0:c1:25:bc:42:71:96:7a:a7:f6: bb:bf:9e:88:e7:3d:ff:d5:40:ad:fb:fb:87:87:31: 8f:1a:1c:66:3c:9c:e7:e5:57:86:e3:64:51:55:fe: 04:c8:3a:33:28:95:86:3e:3a:9c:8c:3e:34:d6:15: f8:27:9b:a2:16:a7:58:fd:9d:56:d5:d1:e7:56:59: bd:48:3b:e1:b8:00:6f:5c:9c:8e:12:29:14:7d:b7: 98:11:23:1c:84:b3:b0:38:e7:60:18:75:0b:92:f7: 43:03:90:9d:d0:f4:a1:cc:20:3b:e8:cf:ed:24:33: eb:92:b7:ad:3b:01:71:62:21:1e:7d:11:13:1c:e8: d5:7c:a3:c4:04:12:e0:b8:cd:f5:12:65:d5:74:72: 3d:fb:85:43:fe:2c:e2:c1:8c:bb:7d:22:88:da:79: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:83:AC:C1:FC:98:45:87:D6:A0:E8:40:EB:B5:3D:57:F5:E9:06:FA X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:46:98:43:bc:9b:5d:57:4b:a6:6b:d3:85:bc:87:e4:c9:7a: a2:f3:3a:db:8d:00:a5:4b:07:c8:7f:87:bd:71:45:36:68:79: 25:46:4e:12:61:1f:eb:63:91:1c:8b:5c:30:01:db:ad:6d:70: e0:e6:76:99:9d:8a:ba:36:8a:54:e2:36:0e:14:89:4d:c0:33: 22:e5:35:00:6f:bd:d9:60:3c:d9:33:ba:a9:de:27:07:36:38: da:59:53:43:84:48:78:d3:5c:f1:81:13:d1:9d:2e:6d:89:46: 25:80:e8:d6:bc:76:d1:e4:8e:6f:e1:0e:01:bc:51:d7:51:de: 62:14:9a:be:c0:e0:4c:21:7b:41:53:fc:55:59:e3:75:06:b4: 3c:d6:b9:6f:8f:88:25:c0:06:fe:3d:ce:fc:d5:40:30:8e:9e: 17:49:c2:10:04:25:2c:07:62:f6:b0:93:f5:72:ea:6f:8a:e0: f4:02:fa:e1:96:6f:ee:85:26:ad:9d:2b:d0:fe:c1:dc:b3:ca: 89:4b:3d:c8:9a:3f:f0:c1:76:50:51:9f:e1:c3:ae:ac:c7:aa: 04:39:48:23:44:4d:45:75:6b:8c:b6:95:ce:d3:b1:6f:50:66: 14:24:cb:04:d5:ff:6e:33:24:c5:1e:d2:4a:6f:6f:cf:f1:46: fe:4b:83:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjYwOTIxMDQwMDE5WhcNMjYwOTI4MDQwMDE5WjAYMRYwFAYD VQQDEw02YWIwYWJkNC00YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Dfajfqcg35Ft/xR3bOx+e5aeGTPM8CyePC++qbCB/pMEvwy+6YSe8IQgaga 8TbdKdbd41qPdJe3kI6MGl24WbThqmSbmt/iBThztdX3KeKDk88utMuxCAOtojJO WbDBJbxCcZZ6p/a7v56I5z3/1UCt+/uHhzGPGhxmPJzn5VeG42RRVf4EyDozKJWG PjqcjD401hX4J5uiFqdY/Z1W1dHnVlm9SDvhuABvXJyOEikUfbeYESMchLOwOOdg GHULkvdDA5Cd0PShzCA76M/tJDPrkretOwFxYiEefRETHOjVfKPEBBLguM31EmXV dHI9+4VD/iziwYy7fSKI2nnfMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiDrMH8 mEWH1qDoQOu1PVf16Qb6MB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYUaYQ7ybXVdLpmvThbyH5Ml6ovM6240ApUsHyH+HvXFFNmh5JUZOEmEf62OR HItcMAHbrW1w4OZ2mZ2KujaKVOI2DhSJTcAzIuU1AG+92WA82TO6qd4nBzY42llT Q4RIeNNc8YET0Z0ubYlGJYDo1rx20eSOb+EOAbxR11HeYhSavsDgTCF7QVP8VVnj dQa0PNa5b4+IJcAG/j3O/NVAMI6eF0nCEAQlLAdi9rCT9XLqb4rg9AL64ZZv7oUm rZ0r0P7B3LPKiUs9yJo/8MF2UFGf4cOurMeqBDlII0RNRXVrjLaVztOxb1BmFCTL BNX/bjMkxR7SSm9vz/FG/kuDDQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:17:08 2026 by rpki-client