$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft File: Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json) Hash identifier: rWttWeVsx4mu0r739vMkyMwxqV02gX6YHEqAMy6wTtM= Subject key identifier: 3C:69:D9:06:70:F7:1F:24:8D:B8:51:BC:EF:0C:68:24:6E:A9:BB:84 Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 Certificate issuer: /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft Manifest number: CA Signing time: Mon 27 Jul 2026 09:01:04 +0000 Manifest this update: Mon 27 Jul 2026 09:01:03 +0000 Manifest next update: Mon 03 Aug 2026 09:01:03 +0000 Files and hashes: 1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: lVVZhiIVmLK7SO6+Yz6X0rJ60FknMM0Zn3fUqTolC4U=) 2: 8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (hash: 1vdpNZCb5eokv9kB4IF2yBs5bnjtxY0G7yJ15IMk+7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Validity Not Before: Jul 27 09:01:03 2026 GMT Not After : Aug 3 09:01:03 2026 GMT Subject: CN=6a671e4f-e10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:ea:54:f6:e5:6f:37:89:38:de:3e:e1:1f: cf:a0:c7:2e:74:32:54:fb:60:3f:df:09:f4:b5:45: 7f:38:3d:00:ed:fa:ce:85:41:bd:04:81:c1:15:c6: 86:16:f3:88:79:46:5b:f6:53:3b:fb:b7:41:17:8b: 11:26:00:da:ad:ea:b4:e0:b0:78:3c:04:ad:f2:98: a4:35:fe:76:63:56:6d:77:76:52:e3:35:45:b4:77: 07:fc:14:f4:28:9f:30:65:e9:8d:27:ae:13:d5:a9: 99:b3:b6:d7:3c:15:40:3a:c3:87:c5:0d:24:4e:ce: 10:01:36:81:9a:66:88:27:d5:47:26:ba:05:c7:07: 06:ab:41:e0:9c:6d:c2:60:b8:c5:53:cb:7f:2c:ec: 2a:68:0c:a0:96:03:47:02:0d:07:d3:c0:78:a2:08: c1:c4:b4:37:64:a7:39:ab:fc:ae:5d:ea:81:3c:61: f8:c1:3d:bb:ac:50:5e:7b:68:7c:ef:9d:8e:cc:16: 2c:46:27:61:bc:88:40:56:40:7a:a8:d8:38:91:23: d9:1a:a3:89:bc:58:25:45:27:46:f6:42:01:cc:ab: 6c:52:2a:ad:d4:51:cc:f8:71:eb:02:63:31:5a:bc: a1:9d:fe:e3:bd:3c:01:c9:69:2d:84:91:3e:2c:3b: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:D9:06:70:F7:1F:24:8D:B8:51:BC:EF:0C:68:24:6E:A9:BB:84 X509v3 Authority Key Identifier: keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:c7:6f:6e:45:57:25:80:dc:cc:45:d3:08:52:ab:6d:f4: ed:93:e8:ed:90:67:9a:68:e7:b2:4a:ee:2f:a5:0d:47:d8:b9: 99:55:ff:0a:1a:39:c4:b6:5b:41:9b:c4:2a:b5:ad:5d:8c:ac: 5d:4f:ba:8f:b5:4e:18:61:8c:f5:3c:c4:6e:eb:66:24:10:e3: 19:13:ae:b9:06:46:85:54:27:57:32:ff:46:c9:b9:33:72:e0: 70:a2:fe:bc:b6:9f:83:9f:34:01:ca:71:fa:09:f8:bd:a2:19: 57:5f:16:f0:87:1c:d0:26:50:75:af:3c:38:f0:f6:43:f2:48: 84:3f:f7:f9:54:11:54:fe:c7:16:c5:02:85:92:85:17:28:74: 11:07:42:5f:5f:53:8b:1a:f5:0a:50:7f:be:01:dc:11:bb:24: 61:04:12:0f:0c:51:37:5e:1a:16:43:50:37:c7:c4:4d:74:7f: 49:c2:37:c9:70:1c:80:5f:a0:dc:6b:f1:4b:2a:27:bb:20:ed: 7e:d8:31:8d:3f:5c:61:d5:34:e1:2b:a0:34:a8:bb:78:ed:91: 2b:9f:4c:23:65:6d:8d:d7:c7:b7:41:3e:15:07:d7:d1:2e:28: 7a:2c:16:3c:0b:29:73:55:ca:2a:2e:02:7f:52:99:28:d3:f4: 74:10:75:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhGNjIxMTAvBgNVBAUTKDYzRkEwMDA2MjYxRDlFNENENDkwNTkwNkU1NDM5Njk0 QkU2MjdCQjEwHhcNMjYwNzI3MDkwMTAzWhcNMjYwODAzMDkwMTAzWjAYMRYwFAYD VQQDEw02YTY3MWU0Zi1lMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslXqVPblbzeJON4+4R/PoMcudDJU+2A/3wn0tUV/OD0A7frOhUG9BIHBFcaG FvOIeUZb9lM7+7dBF4sRJgDareq04LB4PASt8pikNf52Y1Ztd3ZS4zVFtHcH/BT0 KJ8wZemNJ64T1amZs7bXPBVAOsOHxQ0kTs4QATaBmmaIJ9VHJroFxwcGq0HgnG3C YLjFU8t/LOwqaAyglgNHAg0H08B4ogjBxLQ3ZKc5q/yuXeqBPGH4wT27rFBee2h8 752OzBYsRidhvIhAVkB6qNg4kSPZGqOJvFglRSdG9kIBzKtsUiqt1FHM+HHrAmMx Wryhnf7jvTwByWkthJE+LDtC8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxp2QZw 9x8kjbhRvO8MaCRuqbuEMB8GA1UdIwQYMBaAFGP6AAYmHZ5M1JBZBuVDlpS+Ynux MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEY2Mi9CODc4QzJDODVE RkQxMUYwQjVDMDdCNEJDNEY5QUUwMi9ZX29BQmlZZG5relVrRmtHNVVPV2xMNWll N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfb0FCaVlkbmt6VWtGa0c1VU9XbEw1aWU3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEY2Mi9CODc4QzJDODVERkQxMUYwQjVDMDdCNEJDNEY5QUUwMi9ZX29BQmlZZG5r elVrRmtHNVVPV2xMNWllN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/fHb25FVyWA3MxF0whSq2307ZPo7ZBnmmjnskruL6UNR9i5mVX/Cho5xLZb QZvEKrWtXYysXU+6j7VOGGGM9TzEbutmJBDjGROuuQZGhVQnVzL/Rsm5M3LgcKL+ vLafg580Acpx+gn4vaIZV18W8Icc0CZQda88OPD2Q/JIhD/3+VQRVP7HFsUChZKF Fyh0EQdCX19Tixr1ClB/vgHcEbskYQQSDwxRN14aFkNQN8fETXR/ScI3yXAcgF+g 3GvxSyonuyDtftgxjT9cYdU04SugNKi7eO2RK59MI2VtjdfHt0E+FQfX0S4oeiwW PAspc1XKKi4Cf1KZKNP0dBB1lg== -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:36 2026 by rpki-client