$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json) Hash identifier: 7Vh8mCoDOeMDRCIj6Zz3+/NOsQby6A0O+YeafyWfBNE= Subject key identifier: F0:EC:B7:2A:71:FB:23:FF:8F:68:69:00:5A:96:D7:2F:79:AA:F9:E0 Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft Manifest number: CD Signing time: Mon 21 Sep 2026 06:43:24 +0000 Manifest this update: Mon 21 Sep 2026 06:43:24 +0000 Manifest next update: Mon 28 Sep 2026 06:43:24 +0000 Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: MLaAxI9exzy/rR8AvS86prQA6XQYZoy9FRlWPiu4Pmg=) 2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: JrWQTIVZFI8a0pln7P+m0meftjgxZRSu/Rs2hLgG4ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Validity Not Before: Sep 21 06:43:24 2026 GMT Not After : Sep 28 06:43:24 2026 GMT Subject: CN=6ab0d20c-3b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:aa:6c:1d:26:4f:39:af:af:34:a5:75:b5:c6: e4:c3:d7:6f:88:3d:a5:de:e3:fb:4b:7b:d0:3a:f1: 20:dd:d7:55:cc:c9:53:54:7c:ca:1c:4c:e6:3e:00: 33:a6:2e:ed:44:0d:5d:50:b7:33:92:35:33:76:4d: 4e:15:5b:a7:d4:3a:0e:f6:a7:7b:22:49:fc:42:6a: 06:b7:c4:00:b6:55:63:2e:3c:5b:7f:99:1e:1d:23: 9c:e9:b8:4c:56:13:50:bd:90:c6:60:0b:6d:9d:44: c3:ee:3a:8c:c3:21:2d:b1:79:7f:f4:10:cd:5a:7f: b4:31:91:93:b2:fe:e4:61:aa:52:13:ab:0a:d9:fc: 5d:de:37:43:ca:51:2b:29:9e:ec:90:62:5f:95:06: 3a:7c:85:b5:53:e0:be:97:a5:8f:56:5b:f6:b1:0a: 48:a4:c6:6c:f8:e2:01:1d:b4:13:8a:90:89:5c:17: 73:79:d2:7f:56:0c:76:f6:cf:5b:5d:6f:1f:88:75: ad:9f:67:90:b2:1c:f5:8b:c6:a3:15:19:6e:9e:ad: 7a:64:ab:f0:b2:55:ac:c9:ae:ab:fe:b3:68:4e:32: ed:f0:d5:ff:4b:a1:7f:ac:0f:f3:57:2b:ac:b9:cb: 26:44:d3:ac:92:3d:56:7e:22:18:94:35:3d:be:4e: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:B7:2A:71:FB:23:FF:8F:68:69:00:5A:96:D7:2F:79:AA:F9:E0 X509v3 Authority Key Identifier: keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c8:3f:ad:20:f8:59:f2:eb:c0:15:4d:b1:b8:d7:31:39:5f: fa:f3:0b:19:94:6d:c5:21:f2:03:96:a0:2e:21:6d:15:4b:7e: 64:36:8f:7a:f3:74:bc:80:5c:80:e3:e3:24:5c:12:e8:67:c5: 99:8e:ab:92:60:21:8c:93:9e:71:43:dd:a6:25:73:74:20:32: 15:4a:bd:36:a6:ff:8b:4c:ff:23:d3:76:09:cf:76:90:93:83: e1:6b:71:03:8a:fc:01:07:40:af:13:bb:c8:57:64:e0:ec:97: 84:e7:5c:27:a4:e2:95:88:b4:27:57:e1:15:0b:85:0d:a3:ba: e8:e8:35:4b:a8:b5:6b:eb:5d:ee:bc:7a:ca:3c:80:0e:3f:dd: 29:af:49:87:a2:81:38:4d:ca:01:0d:99:15:fd:bc:4d:2b:2b: 37:33:90:d0:33:90:24:b3:9a:8b:78:45:0a:2c:aa:28:45:29: 36:c5:2c:31:74:43:f9:6e:aa:1c:15:cc:39:16:5d:00:2e:69: 6a:8a:58:8e:d7:d8:a2:07:d4:0e:4a:11:db:92:c9:56:4c:14: 58:f1:06:87:96:32:5f:2f:21:a8:ef:0d:a9:f4:a1:98:19:98: 98:e1:5a:27:83:9b:22:a5:61:a3:e7:ec:d2:ff:20:11:81:60: d5:bc:b6:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0QTQxMTAvBgNVBAUTKEM5M0Y4RjYwRjA2N0UyNEMxQkZDRjIzQjJDRjQyMkJE NTg2NEJFQ0IwHhcNMjYwOTIxMDY0MzI0WhcNMjYwOTI4MDY0MzI0WjAYMRYwFAYD VQQDEw02YWIwZDIwYy0zYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6apsHSZPOa+vNKV1tcbkw9dviD2l3uP7S3vQOvEg3ddVzMlTVHzKHEzmPgAz pi7tRA1dULczkjUzdk1OFVun1DoO9qd7Ikn8QmoGt8QAtlVjLjxbf5keHSOc6bhM VhNQvZDGYAttnUTD7jqMwyEtsXl/9BDNWn+0MZGTsv7kYapSE6sK2fxd3jdDylEr KZ7skGJflQY6fIW1U+C+l6WPVlv2sQpIpMZs+OIBHbQTipCJXBdzedJ/Vgx29s9b XW8fiHWtn2eQshz1i8ajFRlunq16ZKvwslWsya6r/rNoTjLt8NX/S6F/rA/zVyus ucsmRNOskj1WfiIYlDU9vk7H2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDstypx +yP/j2hpAFqW1y95qvngMB8GA1UdIwQYMBaAFMk/j2DwZ+JMG/zyOyz0Ir1YZL7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTRBNC9FQUIxN0JGNjdE N0MxMUYwOTZFNTk1NzlDNEY5QUUwMi95VC1QWVBCbjRrd2JfUEk3TFBRaXZWaGt2 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTRBNC9FQUIxN0JGNjdEN0MxMUYwOTZFNTk1NzlDNEY5QUUwMi95VC1QWVBCbjRr d2JfUEk3TFBRaXZWaGt2c3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcMg/rSD4WfLrwBVNsbjXMTlf+vMLGZRtxSHyA5agLiFtFUt+ZDaPevN0vIBc gOPjJFwS6GfFmY6rkmAhjJOecUPdpiVzdCAyFUq9Nqb/i0z/I9N2Cc92kJOD4Wtx A4r8AQdArxO7yFdk4OyXhOdcJ6TilYi0J1fhFQuFDaO66Og1S6i1a+td7rx6yjyA Dj/dKa9Jh6KBOE3KAQ2ZFf28TSsrNzOQ0DOQJLOai3hFCiyqKEUpNsUsMXRD+W6q HBXMORZdAC5paopYjtfYogfUDkoR25LJVkwUWPEGh5YyXy8hqO8NqfShmBmYmOFa J4ObIqVho+fs0v8gEYFg1by2qg== -----END CERTIFICATE-----Generated at Tue Sep 22 18:16:31 2026 by rpki-client