$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: oEypjxjJKE9sSkvW28tMfWxc91G4Z5IyJ9eIl6Sdrc4= Subject key identifier: 4E:13:91:23:25:DD:3A:09:B1:94:95:E9:E0:E7:3E:18:B0:A8:A0:BD Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 09D1 Signing time: Tue 28 Jul 2026 20:12:22 +0000 Manifest this update: Tue 28 Jul 2026 20:12:21 +0000 Manifest next update: Tue 04 Aug 2026 20:12:21 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: ZFPzi+oSW9Z3CK3TATq5T41l/c+0vK8pBsEu944IOZ0=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: RObxtW51NsjZz83e+7RyvdJYnFl+EIf82gNL/++qoe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Jul 28 20:12:21 2026 GMT Not After : Aug 4 20:12:21 2026 GMT Subject: CN=6a690d25-b86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:e6:f3:a6:20:4a:34:e6:b6:25:24:77:57: 63:72:f4:1e:22:19:68:85:16:6a:b0:af:6f:89:dc: c6:41:cf:51:68:4f:19:56:e3:42:12:9e:69:8a:40: f9:58:59:c1:fd:f1:89:97:a8:32:50:32:85:e0:7e: f4:c1:f5:60:15:ae:1d:73:fd:0c:6a:8b:69:bd:ba: b5:b3:d0:44:c5:a0:61:e8:58:87:e5:2a:4b:65:84: b7:b3:6a:d8:1d:53:6b:8a:bb:80:15:cc:e5:03:b9: 18:69:47:b3:39:ae:cf:b7:78:87:44:b6:1d:02:11: 30:3d:bc:5e:a5:fe:57:17:e8:ee:12:fc:a1:fa:2a: 59:68:9c:6d:48:89:96:ba:e3:df:83:b7:5d:35:21: 41:ca:6a:d9:74:af:8e:16:55:d6:02:0a:4f:fe:4f: 46:78:a5:1e:a2:df:0d:1b:d5:8a:9b:30:99:96:e0: 68:ed:fc:5e:d8:3d:de:a3:69:da:59:70:43:95:db: b5:28:5d:f0:34:67:5f:3a:f4:b6:85:dd:ea:58:2f: e9:f9:67:87:1a:19:6b:66:f8:3e:1b:da:a4:8a:fa: ea:29:6a:d9:12:5f:16:fd:f8:e6:db:ad:68:10:bc: 81:51:46:52:ea:54:6d:97:f3:5a:f1:a6:91:4a:b3: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:13:91:23:25:DD:3A:09:B1:94:95:E9:E0:E7:3E:18:B0:A8:A0:BD X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ae:00:17:3f:52:dd:50:f7:ca:e8:4c:cd:d1:50:8a:4d:1d: 33:de:a5:40:e9:4a:d6:d8:e3:6a:76:f4:54:76:62:3f:9f:dd: 1f:56:1b:02:85:ea:cc:98:e9:f2:6c:37:c0:da:34:0f:a2:ab: 88:58:70:db:8a:c4:56:21:c4:cf:de:80:ea:52:fb:7b:9c:a1: 67:6d:f3:26:40:80:9f:5c:f7:48:eb:8f:12:fe:4c:cc:78:68: 11:a5:e6:c1:07:6b:c5:a4:34:97:54:54:11:73:e4:cb:c3:8d: df:d8:db:b4:65:11:55:d1:d2:8c:c3:76:04:e2:88:4c:ec:83: 11:70:94:03:55:ec:fd:76:e4:fc:dc:59:ff:50:69:79:70:76: 61:d3:80:2f:3f:00:04:e4:bf:4e:a5:3f:d5:c9:b3:c7:dd:c8: 06:9a:20:43:46:1a:04:75:63:c3:e8:47:20:e3:c8:4c:a2:c4: e3:07:30:29:7c:db:43:e2:90:5c:2b:98:0e:27:17:5c:77:78: f3:8d:84:a4:d3:8e:b6:99:d7:31:f9:45:07:8b:cc:50:65:06: 07:4a:83:de:91:dc:73:3b:41:d9:5e:fd:ab:a2:48:bc:f2:7c: 50:df:00:e1:55:e5:99:91:ad:7c:01:de:f9:93:34:c6:2f:44: 37:b2:2f:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjYwNzI4MjAxMjIxWhcNMjYwODA0MjAxMjIxWjAYMRYwFAYD VQQDEw02YTY5MGQyNS1iODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygLm86YgSjTmtiUkd1djcvQeIhlohRZqsK9vidzGQc9RaE8ZVuNCEp5pikD5 WFnB/fGJl6gyUDKF4H70wfVgFa4dc/0Maotpvbq1s9BExaBh6FiH5SpLZYS3s2rY HVNriruAFczlA7kYaUezOa7Pt3iHRLYdAhEwPbxepf5XF+juEvyh+ipZaJxtSImW uuPfg7ddNSFBymrZdK+OFlXWAgpP/k9GeKUeot8NG9WKmzCZluBo7fxe2D3eo2na WXBDldu1KF3wNGdfOvS2hd3qWC/p+WeHGhlrZvg+G9qkivrqKWrZEl8W/fjm261o ELyBUUZS6lRtl/Na8aaRSrP/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4TkSMl 3ToJsZSV6eDnPhiwqKC9MB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv64AFz9S3VD3yuhMzdFQik0dM96lQOlK1tjjanb0VHZiP5/dH1YbAoXqzJjp 8mw3wNo0D6KriFhw24rEViHEz96A6lL7e5yhZ23zJkCAn1z3SOuPEv5MzHhoEaXm wQdrxaQ0l1RUEXPky8ON39jbtGURVdHSjMN2BOKITOyDEXCUA1Xs/Xbk/NxZ/1Bp eXB2YdOALz8ABOS/TqU/1cmzx93IBpogQ0YaBHVjw+hHIOPITKLE4wcwKXzbQ+KQ XCuYDicXXHd4842EpNOOtpnXMflFB4vMUGUGB0qD3pHccztB2V79q6JIvPJ8UN8A 4VXlmZGtfAHe+ZM0xi9EN7IvnA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:46 2026 by rpki-client