$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json) Hash identifier: YwSjmLshCdrVx7WNZmmIE0KTJqO+s9O4UHxE2roDMT8= Subject key identifier: 32:FA:AE:36:4C:E8:1B:6D:62:03:F1:2E:AC:8A:F5:B5:92:19:2A:0A Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft Manifest number: 0D1C Signing time: Sun 26 Jul 2026 18:28:55 +0000 Manifest this update: Sun 26 Jul 2026 18:28:54 +0000 Manifest next update: Sun 02 Aug 2026 18:28:54 +0000 Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: Osa2F0HbP1dMavOyj4wLYZ9B/4uMDEjjZ9upo1HbKwQ=) 2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Jul 26 18:28:54 2026 GMT Not After : Aug 2 18:28:54 2026 GMT Subject: CN=6a6651e6-0f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:62:1c:f7:a5:98:1b:b7:f4:28:43:0f:22: 46:20:71:3f:ac:f9:d1:a7:1c:71:a6:f1:9f:50:58: 25:a0:6d:5a:61:64:37:eb:7b:dc:3c:7f:60:ca:9c: 68:ae:1c:1b:60:42:35:5c:a9:98:3a:4d:b4:ab:8b: ca:8c:be:c9:c5:4e:ef:0f:e1:ca:c8:c3:ff:13:42: 12:7f:88:30:40:a2:4a:7d:38:d5:b7:a6:f5:55:9c: c2:0d:94:08:35:6e:2f:8d:c3:4b:26:92:8f:60:e0: f3:15:de:2f:3c:9c:e1:78:52:ed:b6:e9:85:da:ad: 55:2d:dc:a7:d4:5e:c1:67:5f:98:2a:4d:f1:0b:1c: 16:d1:b9:a6:7d:ab:d2:d0:dc:10:9d:f9:0d:a2:ed: 66:8c:17:4e:1d:c9:e6:aa:13:e8:6e:4c:1a:73:99: 66:a3:ee:a2:2d:bd:14:0b:c5:2a:ff:19:d6:16:a4: 10:2e:c8:3c:ac:e3:f8:7b:1f:d2:a7:63:d6:eb:b7: e4:f9:29:ca:b9:25:29:5b:b3:d3:99:8d:44:15:90: 2b:7b:b4:85:d6:23:10:94:7b:02:31:3f:c1:a8:72: 18:68:12:8c:de:78:0c:00:dc:ed:8e:e9:ea:57:66: 58:81:a6:72:a6:09:d9:f5:42:9d:8e:a6:0d:41:6d: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:AE:36:4C:E8:1B:6D:62:03:F1:2E:AC:8A:F5:B5:92:19:2A:0A X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e6:fd:1b:3e:07:b8:8b:35:14:5b:31:c3:f4:49:b7:66:17: 5b:c4:37:40:33:22:1f:07:3f:d7:e6:59:f5:89:b1:45:3a:eb: 7b:24:ba:0d:01:6f:bc:0d:9d:96:40:5a:cb:47:45:29:51:6a: 84:04:c3:e0:6f:b0:9c:4b:50:32:75:18:74:a9:9b:a5:63:a3: c1:d9:be:08:b2:be:72:b8:81:6c:1a:f2:a0:cd:e2:14:50:7a: 2b:8c:c0:ea:2c:c4:88:85:e7:93:d2:9d:16:7b:e2:10:b1:22: 39:cc:c9:18:cd:14:bc:34:50:e2:07:5a:83:2d:8b:25:2a:c1: ec:38:d5:fc:5f:93:6e:46:cc:46:63:85:2a:8d:31:e8:90:23: 8f:35:07:8d:0c:f5:01:a9:39:0b:93:28:b3:44:bb:50:b5:f4: dc:d9:17:72:2f:e5:53:ce:ec:53:c2:8f:18:f3:bf:ec:72:1c: 3d:6c:35:20:49:62:d2:f1:a8:eb:8a:6f:c9:61:eb:dd:aa:a2: 45:b0:6b:ee:dd:da:fa:3b:bf:6a:c0:91:11:cb:ef:28:ca:ce: c8:cb:92:d8:bd:12:9b:39:fd:4b:a0:85:d3:be:ca:0f:dd:5c: 4d:1d:cb:9c:be:f6:5b:3d:27:9a:6a:a1:be:6e:c2:00:f8:f7: 47:4a:ee:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjYwNzI2MTgyODU0WhcNMjYwODAyMTgyODU0WjAYMRYwFAYD VQQDEw02YTY2NTFlNi0wZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIFiHPelmBu39ChDDyJGIHE/rPnRpxxxpvGfUFgloG1aYWQ363vcPH9gypxo rhwbYEI1XKmYOk20q4vKjL7JxU7vD+HKyMP/E0ISf4gwQKJKfTjVt6b1VZzCDZQI NW4vjcNLJpKPYODzFd4vPJzheFLttumF2q1VLdyn1F7BZ1+YKk3xCxwW0bmmfavS 0NwQnfkNou1mjBdOHcnmqhPobkwac5lmo+6iLb0UC8Uq/xnWFqQQLsg8rOP4ex/S p2PW67fk+SnKuSUpW7PTmY1EFZAre7SF1iMQlHsCMT/BqHIYaBKM3ngMANztjunq V2ZYgaZypgnZ9UKdjqYNQW1CFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDL6rjZM 6BttYgPxLqyK9bWSGSoKMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTA2NC8wNzYzOTYyMDA1MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVot S2hRTlRTTVU0ckRwd0VkREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOb9Gz4HuIs1FFsxw/RJt2YXW8Q3QDMiHwc/1+ZZ9YmxRTrreyS6DQFvvA2d lkBay0dFKVFqhATD4G+wnEtQMnUYdKmbpWOjwdm+CLK+criBbBryoM3iFFB6K4zA 6izEiIXnk9KdFnviELEiOczJGM0UvDRQ4gdagy2LJSrB7DjV/F+TbkbMRmOFKo0x 6JAjjzUHjQz1Aak5C5Mos0S7ULX03NkXci/lU87sU8KPGPO/7HIcPWw1IEli0vGo 64pvyWHr3aqiRbBr7t3a+ju/asCREcvvKMrOyMuS2L0Smzn9S6CF077KD91cTR3L nL72Wz0nmmqhvm7CAPj3R0ruSA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:28 2026 by rpki-client