$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json) Hash identifier: t92xOWiaIXYK+fbL3fQCShHCejDvTJUcZYOWAWmpE2E= Subject key identifier: 11:C7:46:67:43:63:5A:AD:62:11:78:A5:88:40:F0:2B:04:E2:17:FA Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft Manifest number: 0142 Signing time: Mon 21 Sep 2026 05:35:28 +0000 Manifest this update: Mon 21 Sep 2026 05:35:27 +0000 Manifest next update: Mon 28 Sep 2026 05:35:27 +0000 Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: YTI27c5Zp4BN6n124Gjwug+gS87DzLwE/HPE2oovKtQ=) 2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Validity Not Before: Sep 21 05:35:27 2026 GMT Not After : Sep 28 05:35:27 2026 GMT Subject: CN=6ab0c220-d666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:25:b9:c9:45:26:4e:a0:b5:51:67:66:34: a5:0b:01:2c:6e:af:8c:10:c5:c9:e6:95:ce:2a:1c: 53:89:c0:8f:10:1d:0a:87:aa:c6:56:ef:7c:51:13: e9:64:91:20:09:28:99:92:7b:29:80:af:31:14:7a: 7d:08:8f:c6:dd:11:72:eb:4f:4f:79:47:ac:55:5d: 1c:aa:0c:ae:52:71:48:70:e1:e0:42:12:90:8f:ff: da:f5:7d:11:48:9f:91:dd:c5:92:f9:89:10:95:a2: 8b:b8:d1:a9:b3:c8:9c:13:2c:33:de:2a:ed:53:fa: d0:25:8d:9d:3a:f4:96:17:f0:09:6c:5b:54:90:de: 89:ef:7b:cd:d0:b7:03:8b:7e:24:8d:68:dd:dd:20: 4e:30:64:4b:ee:43:3d:8c:35:7a:dc:fe:24:b9:5a: 20:97:38:77:10:a6:d5:af:2c:ba:06:97:a2:e6:d1: 87:89:53:e6:da:92:68:2e:3a:68:8d:fc:6e:0a:62: 00:e5:76:82:aa:92:7c:fc:ab:e1:73:07:c2:13:e5: 9e:5a:18:b4:67:87:81:e1:a8:4a:38:7b:9b:1d:24: 82:02:e1:5a:1c:4c:2f:0e:43:b1:18:34:5b:f2:e4: b3:29:a9:11:57:56:36:57:63:16:5b:6c:63:2c:66: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C7:46:67:43:63:5A:AD:62:11:78:A5:88:40:F0:2B:04:E2:17:FA X509v3 Authority Key Identifier: keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:37:e0:c7:aa:1d:4b:24:7e:6f:3a:5c:65:4f:99:9e:6f:b3: a9:89:fb:be:de:bf:35:ed:e8:d9:89:f8:a9:8f:00:3f:42:48: 0b:b7:ba:91:39:8d:e4:6e:ac:ee:89:18:d8:31:f9:ba:5a:56: b3:6c:30:e2:b8:79:dd:5e:1b:48:13:5d:75:00:68:d3:e3:2d: c7:fd:5e:cf:d1:93:4b:3a:9f:93:c5:e1:15:2f:0c:36:6b:08: a0:84:14:5d:c6:2a:59:fa:62:cf:2f:8c:73:36:95:da:f1:78: 7d:9b:eb:2b:76:b8:dc:6d:d3:61:98:79:49:88:8c:c8:bd:b7: f1:29:81:25:0f:9d:26:c0:38:b5:18:65:32:c1:2e:80:51:18: 76:35:05:76:d1:b2:b6:15:5d:f5:10:3b:d7:fe:66:f4:d2:fa: 11:95:1b:fe:0a:e4:a0:10:a8:f2:b0:c1:c0:a8:25:76:b4:53: 82:19:1e:84:4f:b2:40:c2:b7:3f:75:dc:6f:d8:de:de:f8:b4: a9:e2:2c:aa:40:6d:60:71:a2:7e:26:5a:7d:3f:bb:87:fc:26: 77:28:70:dd:cc:d5:cb:fc:a0:d0:2a:16:7f:1d:d5:d7:fd:27: 9d:09:76:af:0d:78:76:43:64:7b:d3:9c:03:08:e5:06:45:8c: 30:9b:e9:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx RDg4Q0YwQTYwHhcNMjYwOTIxMDUzNTI3WhcNMjYwOTI4MDUzNTI3WjAYMRYwFAYD VQQDEw02YWIwYzIyMC1kNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrAluclFJk6gtVFnZjSlCwEsbq+MEMXJ5pXOKhxTicCPEB0Kh6rGVu98URPp ZJEgCSiZknspgK8xFHp9CI/G3RFy609PeUesVV0cqgyuUnFIcOHgQhKQj//a9X0R SJ+R3cWS+YkQlaKLuNGps8icEywz3irtU/rQJY2dOvSWF/AJbFtUkN6J73vN0LcD i34kjWjd3SBOMGRL7kM9jDV63P4kuVoglzh3EKbVryy6Bpei5tGHiVPm2pJoLjpo jfxuCmIA5XaCqpJ8/KvhcwfCE+WeWhi0Z4eB4ahKOHubHSSCAuFaHEwvDkOxGDRb 8uSzKakRV1Y2V2MWW2xjLGbZvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHHRmdD Y1qtYhF4pYhA8CsE4hf6MB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu R3k1ckYzUUpGQ1VkaU04S1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADzfgx6odSyR+bzpcZU+Znm+zqYn7vt6/Ne3o2Yn4qY8AP0JIC7e6kTmN5G6s 7okY2DH5ulpWs2ww4rh53V4bSBNddQBo0+Mtx/1ez9GTSzqfk8XhFS8MNmsIoIQU XcYqWfpizy+MczaV2vF4fZvrK3a43G3TYZh5SYiMyL238SmBJQ+dJsA4tRhlMsEu gFEYdjUFdtGythVd9RA71/5m9NL6EZUb/grkoBCo8rDBwKgldrRTghkehE+yQMK3 P3Xcb9je3vi0qeIsqkBtYHGifiZafT+7h/wmdyhw3czVy/yg0CoWfx3V1/0nnQl2 rw14dkNke9OcAwjlBkWMMJvp9A== -----END CERTIFICATE-----Generated at Wed Sep 23 01:28:48 2026 by rpki-client