$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json) Hash identifier: FOMIYqBM7vmUV0M7dkDb4iCrvVclwRs1eBlnKX+rYMw= Subject key identifier: A9:69:45:C8:83:78:FB:93:B5:3C:86:AD:2B:6E:60:9B:A9:7E:13:70 Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0D86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft Manifest number: 0D74 Signing time: Tue 28 Jul 2026 18:05:47 +0000 Manifest this update: Tue 28 Jul 2026 18:05:47 +0000 Manifest next update: Tue 04 Aug 2026 18:05:47 +0000 Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: BRjUwLQ+Oq0vigNqjjs3P25QK0TDHJoGdAUr9aK7OGE=) 2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=) 3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Jul 28 18:05:47 2026 GMT Not After : Aug 4 18:05:47 2026 GMT Subject: CN=6a68ef7b-a99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:3e:bb:db:73:50:21:b2:18:93:75:ef:ab: f9:fa:9a:37:d9:ce:2e:38:19:36:93:a4:6f:a6:9c: a7:63:47:de:b4:4e:f7:67:68:ec:17:62:50:f5:4b: 01:3b:d1:83:3e:6c:00:96:2c:48:51:da:7e:2a:93: da:2f:9c:23:71:9b:f9:ca:07:f1:68:4a:2b:b8:4f: bd:20:da:e1:0b:5c:35:60:21:6e:bd:e6:2e:c2:0a: 02:d6:ec:34:ba:ed:b8:b0:0a:bf:ee:b4:c8:b4:7d: 80:26:56:c8:38:e7:66:b0:79:b2:df:b2:24:8f:09: e7:66:3e:5e:38:ce:30:fc:05:46:61:0e:98:9a:71: a9:eb:1f:ca:24:85:e9:ee:17:0c:c4:b2:ec:97:3e: b7:98:7b:60:2a:a0:4a:05:e5:2b:23:6d:ee:a7:35: 46:3c:1e:19:7e:84:4c:aa:62:5e:96:90:cc:81:df: b4:e8:7e:e0:62:ff:02:74:43:93:14:68:9d:59:6f: 6d:7c:96:17:ab:c5:eb:45:e8:67:ec:e4:71:fa:31: bc:2e:7e:3d:45:7c:2d:56:76:79:66:2d:24:44:69: 4f:99:56:fc:66:cd:79:08:cc:63:7b:ab:7c:f9:2b: e2:7e:31:a4:75:34:03:5b:d6:6c:02:35:21:c9:75: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:45:C8:83:78:FB:93:B5:3C:86:AD:2B:6E:60:9B:A9:7E:13:70 X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:06:e7:cd:94:73:d2:bd:23:80:d6:b9:3c:60:ff:86:7d:8b: 81:59:9d:96:47:55:e8:f7:a2:ca:5d:da:a2:73:2a:75:8c:b6: f4:7b:eb:09:33:59:43:af:8e:ed:42:95:b0:c2:82:28:e1:83: 32:3a:2c:3e:fc:e0:56:42:a0:77:ea:72:4e:29:ad:21:45:54: 69:fe:8a:f3:54:60:08:1d:ef:d9:a3:5b:35:a4:a1:0b:39:db: 28:f0:a8:0f:75:19:db:25:bc:c7:93:2d:9e:f7:49:81:74:0c: 08:99:5a:51:32:e1:ad:d7:6d:f7:47:72:cb:27:41:49:ec:c9: 62:9e:ae:59:1f:22:6c:d2:ab:6d:9c:2d:5d:3d:60:b2:2f:86: 0d:79:e8:11:4f:24:a4:0c:6c:ef:95:de:96:65:1c:9d:c8:87: 21:c5:13:e4:e4:c2:98:51:d7:dc:38:92:de:5d:19:36:dd:45: bd:55:81:89:9d:46:d5:38:5e:31:23:9b:e7:e9:61:e2:a1:09: a6:0b:b2:d9:19:24:6e:e0:d8:a4:c0:12:4d:af:ba:54:50:06: ba:2c:93:a6:b1:cf:01:23:a1:f8:74:91:40:ac:1b:df:5f:11: 77:aa:56:82:43:48:65:3d:ad:8f:61:9d:1a:6e:7d:d9:a3:93: 8b:d0:4f:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjYwNzI4MTgwNTQ3WhcNMjYwODA0MTgwNTQ3WjAYMRYwFAYD VQQDEw02YTY4ZWY3Yi1hOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3s8+u9tzUCGyGJN176v5+po32c4uOBk2k6RvppynY0fetE73Z2jsF2JQ9UsB O9GDPmwAlixIUdp+KpPaL5wjcZv5ygfxaEoruE+9INrhC1w1YCFuveYuwgoC1uw0 uu24sAq/7rTItH2AJlbIOOdmsHmy37IkjwnnZj5eOM4w/AVGYQ6YmnGp6x/KJIXp 7hcMxLLslz63mHtgKqBKBeUrI23upzVGPB4ZfoRMqmJelpDMgd+06H7gYv8CdEOT FGidWW9tfJYXq8XrRehn7ORx+jG8Ln49RXwtVnZ5Zi0kRGlPmVb8Zs15CMxje6t8 +SvifjGkdTQDW9ZsAjUhyXUwyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlpRciD ePuTtTyGrStuYJupfhNwMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUIxQS81MUZGQzRFNEY0MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdr a2lvankxWmIyQ0czNGdwaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvwbnzZRz0r0jgNa5PGD/hn2LgVmdlkdV6Peiyl3aonMqdYy29HvrCTNZQ6+O 7UKVsMKCKOGDMjosPvzgVkKgd+pyTimtIUVUaf6K81RgCB3v2aNbNaShCznbKPCo D3UZ2yW8x5MtnvdJgXQMCJlaUTLhrddt90dyyydBSezJYp6uWR8ibNKrbZwtXT1g si+GDXnoEU8kpAxs75XelmUcnciHIcUT5OTCmFHX3DiS3l0ZNt1FvVWBiZ1G1The MSOb5+lh4qEJpguy2RkkbuDYpMASTa+6VFAGuiyTprHPASOh+HSRQKwb318Rd6pW gkNIZT2tj2GdGm592aOTi9BPww== -----END CERTIFICATE-----Generated at Wed Jul 29 07:55:16 2026 by rpki-client