$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: w0K7V2XHFNHiv89eEwGviOHupbfVqjS51t2mDC1GdKk= Subject key identifier: F2:04:1F:B4:6C:A7:15:6E:51:4D:ED:4A:DE:60:A1:9E:76:6F:05:31 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0231 Signing time: Mon 21 Sep 2026 02:48:27 +0000 Manifest this update: Mon 21 Sep 2026 02:48:26 +0000 Manifest next update: Mon 28 Sep 2026 02:48:26 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: MFitCyAQqvJABFBa8RjSjXZ+MCSqwQwIxyDOy7o92Bc=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) 3: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Sep 21 02:48:26 2026 GMT Not After : Sep 28 02:48:26 2026 GMT Subject: CN=6ab09afb-9f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:ee:31:be:5d:a0:fd:5d:c0:52:49:a9:c5: 99:3a:7f:98:94:c2:f0:35:ed:80:1b:55:8f:75:e9: 15:ce:5d:7f:f0:6a:d8:81:9e:31:27:3f:5c:61:78: 49:2c:48:4b:da:32:2e:af:cf:7f:c7:dc:7e:97:df: cf:a2:41:ab:3e:06:de:f8:9f:fd:ec:fa:70:da:82: c3:c7:87:8b:8f:c9:55:df:57:1d:2e:fc:16:04:80: 84:12:74:93:3f:cb:92:72:f8:2e:a2:83:91:48:2b: 92:63:b6:0b:23:f0:54:de:ac:81:b2:64:95:67:d2: a5:1d:7e:1f:7e:2e:7a:b4:8d:f5:57:e5:07:0f:a4: 01:72:b6:53:b6:41:93:55:b2:2e:80:83:9f:8c:71: 6e:98:19:df:d1:3b:6a:19:96:e3:ac:c9:41:44:7a: 26:05:d1:84:19:9a:ad:28:fd:fc:a2:23:e6:65:6c: 21:ef:6f:e9:2a:0c:d0:1b:07:6e:35:db:e1:ee:0a: d2:c0:c4:ce:66:f2:fa:c7:47:51:e6:58:4f:3b:2e: c2:25:a4:0e:d7:68:4a:40:f8:09:f6:61:6f:41:68: d5:8e:d7:7c:01:b8:cf:02:bc:c1:fc:b0:89:f1:8e: a7:44:b1:4c:95:9a:7e:6e:eb:a8:6d:86:9a:d9:f4: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:04:1F:B4:6C:A7:15:6E:51:4D:ED:4A:DE:60:A1:9E:76:6F:05:31 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:e6:4a:c8:90:84:79:19:fe:29:73:6e:c5:8b:70:8f:6c:32: 0d:59:34:50:e1:7a:b3:98:81:e6:64:c5:e9:8e:ed:35:a2:04: 9d:90:54:32:d8:da:e1:d5:33:7c:41:fa:b5:63:2a:96:83:ed: 15:40:53:84:3d:2c:0e:a7:08:0d:6d:83:f7:d4:da:7b:4e:5b: 24:b8:82:37:c9:3a:06:1c:0d:cb:cd:a7:0e:d8:af:27:6b:e3: 84:8e:be:7c:da:c2:a0:cb:c0:97:48:d3:29:4a:4f:62:1a:ec: 7a:ec:8c:6b:64:50:2b:63:4d:99:90:a7:77:1e:d9:fe:d5:88: d7:4d:0e:b3:fb:87:bd:e1:b2:3f:16:72:8f:fe:ff:39:9d:81: ce:e5:a1:a1:fe:aa:a2:2a:9f:26:29:6f:d6:b8:34:ec:df:fd: 5a:be:39:3c:b0:5b:37:48:63:b0:44:d6:df:b0:96:92:ab:7c: 11:83:00:e4:2d:a2:a5:17:28:97:ec:b0:29:93:fc:b1:cc:a3: d4:1b:0d:38:99:cd:be:f9:72:2d:25:69:40:b9:7a:5e:0c:d6: e7:65:2f:b5:14:1d:38:8d:71:b2:e8:98:cb:fd:e0:73:d0:96: b2:41:d0:dd:b8:99:45:26:05:b1:ba:33:af:91:f0:6d:d2:2c: b0:ab:81:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwOTIxMDI0ODI2WhcNMjYwOTI4MDI0ODI2WjAYMRYwFAYD VQQDEw02YWIwOWFmYi05ZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYXuMb5doP1dwFJJqcWZOn+YlMLwNe2AG1WPdekVzl1/8GrYgZ4xJz9cYXhJ LEhL2jIur89/x9x+l9/PokGrPgbe+J/97Ppw2oLDx4eLj8lV31cdLvwWBICEEnST P8uScvguooORSCuSY7YLI/BU3qyBsmSVZ9KlHX4ffi56tI31V+UHD6QBcrZTtkGT VbIugIOfjHFumBnf0TtqGZbjrMlBRHomBdGEGZqtKP38oiPmZWwh72/pKgzQGwdu Ndvh7grSwMTOZvL6x0dR5lhPOy7CJaQO12hKQPgJ9mFvQWjVjtd8AbjPArzB/LCJ 8Y6nRLFMlZp+buuobYaa2fQzwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIEH7Rs pxVuUU3tSt5goZ52bwUxMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxuZKyJCEeRn+KXNuxYtwj2wyDVk0UOF6s5iB5mTF6Y7tNaIEnZBUMtja4dUz fEH6tWMqloPtFUBThD0sDqcIDW2D99Tae05bJLiCN8k6BhwNy82nDtivJ2vjhI6+ fNrCoMvAl0jTKUpPYhrseuyMa2RQK2NNmZCndx7Z/tWI100Os/uHveGyPxZyj/7/ OZ2BzuWhof6qoiqfJilv1rg07N/9Wr45PLBbN0hjsETW37CWkqt8EYMA5C2ipRco l+ywKZP8scyj1BsNOJnNvvlyLSVpQLl6XgzW52UvtRQdOI1xsuiYy/3gc9CWskHQ 3biZRSYFsbozr5HwbdIssKuBWg== -----END CERTIFICATE-----Generated at Tue Sep 22 17:21:25 2026 by rpki-client