$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: Gt435O+lgLwgmQ6eHZtet+xpo7mrOftRC6reYQLNgRM= Subject key identifier: 4B:34:69:D3:4D:EC:87:ED:00:5A:2F:4F:D2:16:61:EA:48:D0:6C:AC Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 18F5 Signing time: Tue 28 Jul 2026 16:32:33 +0000 Manifest this update: Tue 28 Jul 2026 16:32:33 +0000 Manifest next update: Tue 04 Aug 2026 16:32:33 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: 3+QuQJ7cXuxQZQidejhbb+Ej8mdSfq/zt0bUsM3YNts=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6405 (0x1905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Jul 28 16:32:33 2026 GMT Not After : Aug 4 16:32:33 2026 GMT Subject: CN=6a68d9a1-e69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:56:0c:46:8b:38:7f:7f:0c:6c:87:20:e3: 30:d7:ac:da:22:4d:a9:66:bd:ca:b8:32:f2:bb:32: bf:0e:09:a0:b9:19:f8:3f:dd:58:fa:2f:b1:7a:42: 04:61:cd:7b:67:24:84:cd:72:57:36:2a:f4:37:b5: 9f:44:3d:80:d8:37:45:6c:26:bb:fc:05:40:f1:cc: 1c:76:bc:c1:8a:ed:a1:57:bf:6d:3a:c7:99:7e:bb: 6c:99:d6:96:51:be:51:ce:ce:9c:9d:60:ec:a0:29: ed:0f:41:7f:49:4d:4b:86:f2:5c:6f:8a:37:16:00: e2:18:82:b6:f2:0a:c5:1e:a6:ba:62:6f:7f:bf:55: 79:0d:8d:ad:8a:28:89:94:f3:3c:cb:66:4d:c4:18: 7a:6f:52:7d:0a:f2:44:5b:b5:e2:a6:09:6e:6b:f7: c3:9e:e6:c3:51:c4:fc:a9:5b:c9:e3:45:86:63:4d: 9d:dd:22:ab:03:03:1d:3f:ea:6a:f4:44:35:08:73: 3d:1c:3c:80:bd:b3:ec:7c:9e:26:6c:63:b5:d5:da: 2c:2f:5b:ca:a4:0a:4e:82:c4:81:94:c2:5f:63:ea: 14:7b:af:50:d3:5c:43:14:d3:22:dd:58:92:8c:34: 96:3c:14:59:8f:36:f7:a8:f3:a4:54:d5:cb:02:1e: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:69:D3:4D:EC:87:ED:00:5A:2F:4F:D2:16:61:EA:48:D0:6C:AC X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:29:d0:dc:43:8e:f7:19:28:0d:a0:05:df:c8:e2:70:7a: f4:0d:13:bc:25:f8:dd:a1:ca:6c:de:04:e2:58:a4:30:59:a8: 3c:d6:2a:6c:4a:a1:b2:a9:05:a7:2c:48:7f:ab:63:1d:10:22: ee:cf:27:f7:84:60:cb:f3:e1:88:e5:a9:4f:2c:e5:26:81:01: ac:4a:4d:a5:df:0e:4d:74:8c:3d:60:48:29:89:e9:f1:85:d9: 73:8d:4d:0b:d3:54:33:96:97:38:78:89:f4:2b:af:2f:b7:6c: 4e:4a:03:57:d4:6d:b7:01:36:d5:6b:bf:35:d9:5f:31:f6:11: e2:1b:5b:29:a9:86:4f:8a:6d:35:74:11:b6:ac:a5:79:7f:4f: cf:92:27:1b:f1:d8:30:61:5e:c0:c2:18:98:ce:f6:b4:da:57: 6a:47:75:6b:f8:fa:b2:09:48:1c:9a:da:59:4b:82:00:21:36: 86:09:1a:9f:61:16:05:65:68:2f:98:7c:eb:85:a5:00:6b:4e: d2:8a:ac:9a:0d:43:41:2f:7c:b7:e3:69:65:3e:2d:96:09:77: b4:06:d0:1a:8f:d4:db:33:f2:d0:6e:0d:50:24:a1:98:fe:f2: a2:d6:60:39:ea:03:33:b5:1d:45:eb:74:e5:ef:f2:77:60:f7: 9a:a7:fc:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYwNzI4MTYzMjMzWhcNMjYwODA0MTYzMjMzWjAYMRYwFAYD VQQDEw02YTY4ZDlhMS1lNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJZWDEaLOH9/DGyHIOMw16zaIk2pZr3KuDLyuzK/DgmguRn4P91Y+i+xekIE Yc17ZySEzXJXNir0N7WfRD2A2DdFbCa7/AVA8cwcdrzBiu2hV79tOseZfrtsmdaW Ub5Rzs6cnWDsoCntD0F/SU1LhvJcb4o3FgDiGIK28grFHqa6Ym9/v1V5DY2tiiiJ lPM8y2ZNxBh6b1J9CvJEW7Xipglua/fDnubDUcT8qVvJ40WGY02d3SKrAwMdP+pq 9EQ1CHM9HDyAvbPsfJ4mbGO11dosL1vKpApOgsSBlMJfY+oUe69Q01xDFNMi3ViS jDSWPBRZjzb3qPOkVNXLAh4bcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEs0adNN 7IftAFovT9IWYepI0GysMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYIUp0NxDjvcZKA2gBd/I4nB69A0TvCX43aHKbN4E4likMFmoPNYqbEqhsqkF pyxIf6tjHRAi7s8n94Rgy/PhiOWpTyzlJoEBrEpNpd8OTXSMPWBIKYnp8YXZc41N C9NUM5aXOHiJ9CuvL7dsTkoDV9RttwE21Wu/NdlfMfYR4htbKamGT4ptNXQRtqyl eX9Pz5InG/HYMGFewMIYmM72tNpXakd1a/j6sglIHJraWUuCACE2hgkan2EWBWVo L5h864WlAGtO0oqsmg1DQS98t+NpZT4tlgl3tAbQGo/U2zPy0G4NUCShmP7yotZg OeoDM7UdRet05e/yd2D3mqf8lw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:25:44 2026 by rpki-client