$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json) Hash identifier: rnEzEBDXiLToDEP3Bpah4+daQV4wsQ5Oyfsvup8eWqo= Subject key identifier: A5:E2:7B:DC:C3:75:46:08:61:4D:A6:50:9E:07:FC:8F:F0:66:94:A6 Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft Manifest number: 0CFC Signing time: Tue 28 Jul 2026 18:32:33 +0000 Manifest this update: Tue 28 Jul 2026 18:32:33 +0000 Manifest next update: Tue 04 Aug 2026 18:32:33 +0000 Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: 7s2LF8dewjNXBeApbCB/dDb6SQvQsnnBOR2+gB2z3DU=) 2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: c63Et1Ir/YnB7K8uol85rXXmz9MoXTQl05iq46Egj80=) 3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: KI0wtfrpzzeldL0TKgebNaTut7M4MCF1WK3HZwTSHVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Validity Not Before: Jul 28 18:32:33 2026 GMT Not After : Aug 4 18:32:33 2026 GMT Subject: CN=6a68f5c1-7251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:1e:49:c5:53:5c:e8:b6:b3:e4:e9:95:49: b5:34:db:19:4a:c0:e7:9e:e0:56:02:c4:eb:91:04: 67:36:5b:95:41:90:6f:dd:da:ab:31:ee:64:3a:b5: 56:39:8e:f0:e9:57:7e:ce:00:83:db:e8:90:66:94: e2:5b:2d:54:fb:9f:7e:fa:05:ef:ad:6f:73:66:99: 12:55:0d:1b:a7:47:55:23:ca:25:b9:07:49:8a:ca: b5:aa:10:c4:94:cc:24:31:6c:a0:de:86:1b:84:2c: ac:7d:c2:54:b1:8b:80:a3:8a:05:fd:3f:61:cc:0c: 2b:be:47:cd:c5:4b:83:0e:ea:d2:4f:7e:a4:45:a8: 5f:98:7f:1c:51:90:9c:0f:1a:52:ba:47:ef:9f:a5: 2e:d3:af:61:e9:f2:91:b0:41:9f:ef:e0:5a:67:5e: 79:e5:87:27:28:24:50:65:f2:c4:fc:e7:ba:25:c8: 61:9c:8a:6d:d7:f4:50:9a:f1:88:0a:bb:cc:35:0d: a8:79:bc:2f:36:ab:7d:96:d2:bd:94:ed:56:7a:a2: 32:c9:42:45:42:34:8c:b6:8d:3e:90:a5:a2:0d:50: 25:e3:d1:b2:ce:30:80:b3:f9:5d:8d:01:bd:4c:d8: cc:b9:11:28:99:ca:e5:91:b9:c9:71:78:b2:d3:ee: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E2:7B:DC:C3:75:46:08:61:4D:A6:50:9E:07:FC:8F:F0:66:94:A6 X509v3 Authority Key Identifier: keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a6:03:9f:f7:b5:db:7f:9e:f4:77:ca:64:29:dd:3a:d8:66: 6b:32:da:3a:13:02:23:a0:48:ac:64:91:c2:89:17:06:27:d2: ce:28:76:fa:44:a6:ff:47:33:45:2a:e4:77:ef:eb:88:d1:3e: 5d:c6:e5:f8:d5:88:03:d2:49:fb:58:09:7f:3a:b7:c3:3d:2b: a6:6a:07:78:97:f8:db:56:ab:90:70:49:50:06:cd:d6:ee:e6: c8:f1:64:7d:f6:47:6b:cf:e3:12:79:89:a1:e3:53:20:ae:5c: 8f:37:cc:ec:22:7e:dc:b6:3a:0a:b5:c4:94:fe:d6:cd:f5:48: 70:a9:dd:5e:93:0c:72:dd:1a:c3:91:19:78:36:99:5f:2c:27: 74:c1:1a:c5:64:fa:a8:f6:81:f7:28:92:da:e2:de:2b:da:0b: 1b:75:f0:ad:ff:ab:27:ca:35:f2:df:a1:c7:f1:35:28:78:8d: dc:3e:b2:da:47:ea:76:f1:e7:a0:b0:46:5b:a3:f6:8e:60:70: c3:da:bd:2e:6e:d7:84:4c:a1:0b:35:8f:41:73:3e:11:0c:e3: 5a:de:66:3a:95:78:be:21:44:12:55:6c:53:d9:35:21:42:31: 06:b9:96:fa:69:c2:a1:6b:0d:66:e7:48:e3:0e:c9:5d:7c:1b: 64:10:68:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGMDMxMTAvBgNVBAUTKEM5OUQ2MDA3Q0Q0NzdEODlCMzU5QzMzQzkzQ0FBOUI1 QkIxMDYwMUEwHhcNMjYwNzI4MTgzMjMzWhcNMjYwODA0MTgzMjMzWjAYMRYwFAYD VQQDEw02YTY4ZjVjMS03MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXIeScVTXOi2s+TplUm1NNsZSsDnnuBWAsTrkQRnNluVQZBv3dqrMe5kOrVW OY7w6Vd+zgCD2+iQZpTiWy1U+59++gXvrW9zZpkSVQ0bp0dVI8oluQdJisq1qhDE lMwkMWyg3oYbhCysfcJUsYuAo4oF/T9hzAwrvkfNxUuDDurST36kRahfmH8cUZCc DxpSukfvn6Uu069h6fKRsEGf7+BaZ1555YcnKCRQZfLE/Oe6JchhnIpt1/RQmvGI CrvMNQ2oebwvNqt9ltK9lO1WeqIyyUJFQjSMto0+kKWiDVAl49GyzjCAs/ldjQG9 TNjMuREomcrlkbnJcXiy0+5H9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXie9zD dUYIYU2mUJ4H/I/wZpSmMB8GA1UdIwQYMBaAFMmdYAfNR32Js1nDPJPKqbW7EGAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0YwMy82NEY2QzI4RTBE RTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZbXpXY004azhxcHRic1FZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laMWdCODFIZllteldjTThrOHFwdGJzUVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0YwMy82NEY2QzI4RTBERTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZ bXpXY004azhxcHRic1FZQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtqYDn/e123+e9HfKZCndOthmazLaOhMCI6BIrGSRwokXBifSzih2+kSm/0cz RSrkd+/riNE+Xcbl+NWIA9JJ+1gJfzq3wz0rpmoHeJf421arkHBJUAbN1u7myPFk ffZHa8/jEnmJoeNTIK5cjzfM7CJ+3LY6CrXElP7WzfVIcKndXpMMct0aw5EZeDaZ XywndMEaxWT6qPaB9yiS2uLeK9oLG3Xwrf+rJ8o18t+hx/E1KHiN3D6y2kfqdvHn oLBGW6P2jmBww9q9Lm7XhEyhCzWPQXM+EQzjWt5mOpV4viFEElVsU9k1IUIxBrmW +mnCoWsNZudI4w7JXXwbZBBoPA== -----END CERTIFICATE-----Generated at Wed Jul 29 12:31:20 2026 by rpki-client