$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: T8O27IjoXMZDrNCLc/duqHLjxIsEPVgUErA8bVJpLP0= Subject key identifier: 86:25:08:43:ED:35:31:80:5C:3F:99:A6:63:41:60:30:60:D6:66:4C Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: F7 Signing time: Wed 23 Sep 2026 06:05:25 +0000 Manifest this update: Wed 23 Sep 2026 06:05:24 +0000 Manifest next update: Wed 30 Sep 2026 06:05:24 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: 2QYEGCao/M90SXecvFMQ5SoFWF7ueEERNNmpdxO7nlw=) 2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: alasAzOtWpleBKeTwTXbhQlKP6svXTD3Kr1GRXjNvNE=) 3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: MvcG4U91ksg21bFQHUycofyC3j8v7/vCU+cxxJzP/x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Sep 23 06:05:24 2026 GMT Not After : Sep 30 06:05:24 2026 GMT Subject: CN=6ab36c25-ce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:1e:42:99:2f:a3:4d:d4:32:d0:87:87:6f: 7a:d1:af:23:f6:f1:7a:08:38:7d:e0:6c:0d:a7:ee: ce:be:1f:a1:bf:00:ce:1d:87:e7:b5:33:2c:d7:41: 19:05:85:01:95:4e:97:79:db:f3:6b:25:35:66:f6: ca:8d:05:c4:e8:60:cc:d8:64:cb:7f:0d:07:e2:be: a4:21:21:d3:08:3b:99:4d:c9:d2:34:bb:1e:d5:bd: ff:00:1e:85:e9:35:79:c9:c5:3d:be:9f:af:22:9e: 37:c5:ce:e3:7a:79:51:23:a5:40:ab:89:f4:ee:6a: 8f:85:4b:a9:53:63:89:3a:cd:b0:1e:b4:c2:fd:dd: 17:4e:e2:ae:1d:b7:d1:f7:a5:7f:80:f2:18:46:4e: 32:2e:40:06:78:a7:2e:13:3b:d5:49:e6:b0:a2:6d: 66:7a:61:cd:67:3d:ea:4d:18:7c:43:49:0f:89:bf: c5:c5:1e:a3:95:f5:60:eb:8f:40:d0:ec:e7:3e:20: 88:3e:f4:4b:ed:3d:c6:fa:c8:05:8b:83:1c:59:a9: 83:93:48:e8:c1:dd:c6:c7:01:1f:36:7f:2e:9f:07: 42:c7:26:6f:17:b4:68:88:68:56:d2:99:7f:5a:f0: 66:cf:02:47:3d:bf:7e:60:32:f0:de:52:e7:ba:c1: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:25:08:43:ED:35:31:80:5C:3F:99:A6:63:41:60:30:60:D6:66:4C X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c5:a2:bf:b5:cc:9b:57:4e:19:0c:bb:00:b4:26:40:9a:a2: 97:e2:1f:2e:c9:89:19:d7:65:b4:8c:d8:1e:8d:55:7b:27:31: 1b:bf:5f:0d:4a:3f:e4:16:e4:11:7d:33:8e:45:bc:9c:62:56: 0c:86:0d:16:1a:a2:b8:d4:1d:83:56:c9:31:24:76:35:b7:7e: 46:fd:fe:a7:6d:cf:fd:58:b6:68:8c:db:11:81:bb:d1:13:3a: e0:2e:7e:cb:26:1f:45:e4:67:71:c4:12:d6:19:13:be:7c:21: b8:50:d1:1f:0a:83:a0:45:9d:61:66:aa:76:9a:20:ba:ca:e5: 93:70:ec:5f:7e:cc:f6:d7:42:bb:fa:1f:55:20:e8:2e:82:27: 24:82:2b:a2:bd:d3:9d:ec:4e:50:19:db:16:32:31:dd:d9:45: 87:68:bd:4c:07:2f:d5:68:be:de:f1:ee:09:ea:40:5a:4e:96: 45:da:95:1f:62:e8:95:f0:01:1e:64:66:b9:84:51:76:3e:2e: 32:07:8f:ce:67:d2:7f:6a:a0:5a:86:d5:72:22:63:65:92:87: 38:67:cd:eb:ce:82:a9:f5:f4:b9:3a:1f:bb:f1:f8:30:73:5a: 70:2e:64:f6:48:73:bd:67:d0:59:70:12:e4:3d:ce:9f:f7:e3: c1:8f:86:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZCNUE2RUJDQ0VB QjE5RjJGQkMwHhcNMjYwOTIzMDYwNTI0WhcNMjYwOTMwMDYwNTI0WjAYMRYwFAYD VQQDEw02YWIzNmMyNS1jZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnioeQpkvo03UMtCHh2960a8j9vF6CDh94GwNp+7Ovh+hvwDOHYfntTMs10EZ BYUBlU6XedvzayU1ZvbKjQXE6GDM2GTLfw0H4r6kISHTCDuZTcnSNLse1b3/AB6F 6TV5ycU9vp+vIp43xc7jenlRI6VAq4n07mqPhUupU2OJOs2wHrTC/d0XTuKuHbfR 96V/gPIYRk4yLkAGeKcuEzvVSeawom1memHNZz3qTRh8Q0kPib/FxR6jlfVg649A 0OznPiCIPvRL7T3G+sgFi4McWamDk0jowd3GxwEfNn8unwdCxyZvF7RoiGhW0pl/ WvBmzwJHPb9+YDLw3lLnusF9YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYlCEPt NTGAXD+ZpmNBYDBg1mZMMB8GA1UdIwQYMBaAFKWK2s750kVTpVZGtabrzOqxny+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80NEYxNEFGQzQw NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JWT2xWa2ExcHV2TTZyR2ZM N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM3QS80NEYxNEFGQzQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JW T2xWa2ExcHV2TTZyR2ZMN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQcWiv7XMm1dOGQy7ALQmQJqil+IfLsmJGddltIzYHo1VeycxG79fDUo/5Bbk EX0zjkW8nGJWDIYNFhqiuNQdg1bJMSR2Nbd+Rv3+p23P/Vi2aIzbEYG70RM64C5+ yyYfReRnccQS1hkTvnwhuFDRHwqDoEWdYWaqdpogusrlk3DsX37M9tdCu/ofVSDo LoInJIIror3TnexOUBnbFjIx3dlFh2i9TAcv1Wi+3vHuCepAWk6WRdqVH2LolfAB HmRmuYRRdj4uMgePzmfSf2qgWobVciJjZZKHOGfN686CqfX0uTofu/H4MHNacC5k 9khzvWfQWXAS5D3On/fjwY+G+Q== -----END CERTIFICATE-----Generated at Fri Sep 25 05:34:46 2026 by rpki-client