$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft File: yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json) Hash identifier: ubdYQc9ViVNWtysMoBmngMzO2tWzUPC+lXs8QweWNGA= Subject key identifier: 82:11:E7:A4:1F:BF:07:DB:EA:9B:7F:94:56:BF:E9:78:D3:AA:79:F7 Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft Manifest number: 025D Signing time: Mon 21 Sep 2026 02:15:32 +0000 Manifest this update: Mon 21 Sep 2026 02:15:31 +0000 Manifest next update: Mon 28 Sep 2026 02:15:31 +0000 Files and hashes: 1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: BthDG4ydVLxbD9E/zr0e1Tlg2ILNPXQ5aH2wKyTXa/8=) 2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: l91Dssw8/pmNPl0UZ8Pj4iGcNrigdX9iHQBJ3R2+iqI=) 3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: +rjncpi6r8gzrI2dwiyOCyHrVcg7Wh5JTPPsoLstCjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB Validity Not Before: Sep 21 02:15:31 2026 GMT Not After : Sep 28 02:15:31 2026 GMT Subject: CN=6ab09344-b53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:c3:ae:58:ff:9a:df:03:80:c2:0c:c3:2c: b5:2e:b0:5d:ea:03:0e:2f:91:65:1a:14:b8:5f:f8: ef:f2:b0:7e:fa:35:77:bb:62:c9:ba:dd:8c:c2:d4: 54:2b:c7:dc:d8:73:db:ce:20:60:b7:59:04:85:e9: ce:bf:89:7b:c3:98:9f:be:23:19:f4:6f:9b:0c:5f: a5:09:03:9b:6b:55:00:e0:6a:7d:59:49:b9:89:fc: 32:66:50:fa:36:1f:1b:dc:88:13:20:62:74:2c:a8: b0:fd:56:a7:24:4b:bb:b7:e6:a6:5d:26:df:42:10: ef:ad:d9:d8:47:be:be:dc:f5:72:7d:67:4a:a7:28: 83:e2:70:51:59:d2:56:b6:e8:b9:18:27:5b:43:ab: b5:c5:54:b3:d2:31:e1:32:75:97:9f:29:8f:35:c8: 49:62:13:2f:3b:cb:78:27:7e:db:5c:38:f2:2e:0c: 60:7d:3a:fd:50:8e:a3:74:f5:13:c5:2d:a1:5e:18: 84:63:f9:17:58:e3:03:47:55:7b:f5:66:c3:81:92: 0a:2f:4f:b6:3e:27:a8:83:11:20:27:66:7e:95:c3: 74:a1:26:14:8f:6c:c5:74:bd:b8:5e:ef:48:4e:8b: a4:e6:8d:56:35:eb:06:2b:14:e8:40:0d:b1:39:d8: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:11:E7:A4:1F:BF:07:DB:EA:9B:7F:94:56:BF:E9:78:D3:AA:79:F7 X509v3 Authority Key Identifier: keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3a:d8:89:c5:e1:6b:be:d2:61:19:0c:26:8a:2b:3f:71:b5: 4c:c5:82:8e:37:d1:9f:c8:7e:9b:6f:d7:60:26:29:bc:ce:b3: b9:78:b2:b4:db:31:1a:21:b6:ef:53:8e:48:4d:f3:fe:8e:1b: 19:35:41:50:47:09:e9:bb:42:af:66:12:f6:28:1d:d8:65:9b: e4:02:82:31:7d:fa:1a:8f:5c:aa:53:22:0d:11:e7:ab:f1:97: 37:33:b2:3f:fc:7f:eb:2d:1b:03:01:df:21:91:43:4c:c4:cc: cd:31:03:a4:a3:9a:90:b2:3a:19:e9:0e:da:87:4d:b6:d7:0c: df:51:87:e7:47:83:1c:e7:5e:a1:77:98:d4:b1:54:13:c4:59: 83:2d:6a:e3:04:c0:fd:df:4f:4f:14:72:8c:05:0e:03:da:4e: 12:98:dc:ce:d2:11:bd:82:0f:fb:1c:bc:49:a2:f6:28:38:ed: e5:fc:db:36:71:a1:ba:9b:17:20:7a:07:3c:a4:87:63:54:b1: 1e:88:c1:5e:57:07:c4:61:21:73:e1:71:6a:ee:f8:7c:89:b9: da:4f:c8:15:6a:81:c6:64:75:fa:12:a2:44:1e:af:d1:2c:f6: 10:2b:4b:89:75:74:fe:3b:76:f6:7b:84:5b:15:74:28:e0:9e: 9c:de:77:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCOTYxMTAvBgNVBAUTKEM4MkI3QjM3OUQ2RkVEMkEzQzMwQzQ1MzdFMEY4N0ND QjYwODIyRUIwHhcNMjYwOTIxMDIxNTMxWhcNMjYwOTI4MDIxNTMxWjAYMRYwFAYD VQQDEw02YWIwOTM0NC1iNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbfDrlj/mt8DgMIMwyy1LrBd6gMOL5FlGhS4X/jv8rB++jV3u2LJut2MwtRU K8fc2HPbziBgt1kEhenOv4l7w5ifviMZ9G+bDF+lCQOba1UA4Gp9WUm5ifwyZlD6 Nh8b3IgTIGJ0LKiw/VanJEu7t+amXSbfQhDvrdnYR76+3PVyfWdKpyiD4nBRWdJW tui5GCdbQ6u1xVSz0jHhMnWXnymPNchJYhMvO8t4J37bXDjyLgxgfTr9UI6jdPUT xS2hXhiEY/kXWOMDR1V79WbDgZIKL0+2PieogxEgJ2Z+lcN0oSYUj2zFdL24Xu9I Touk5o1WNesGKxToQA2xOdhlpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIR56Qf vwfb6pt/lFa/6XjTqnn3MB8GA1UdIwQYMBaAFMgrezedb+0qPDDEU34Ph8y2CCLr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI5Ni82NEQ2QkRDQzFD MjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdTbzhNTVJUZmctSHpMWUlJ dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDdDdONTF2N1NvOE1NUlRmZy1IekxZSUl1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUI5Ni82NEQ2QkRDQzFDMjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdT bzhNTVJUZmctSHpMWUlJdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmzrYicXha77SYRkMJoorP3G1TMWCjjfRn8h+m2/XYCYpvM6zuXiytNsxGiG2 71OOSE3z/o4bGTVBUEcJ6btCr2YS9igd2GWb5AKCMX36Go9cqlMiDRHnq/GXNzOy P/x/6y0bAwHfIZFDTMTMzTEDpKOakLI6GekO2odNttcM31GH50eDHOdeoXeY1LFU E8RZgy1q4wTA/d9PTxRyjAUOA9pOEpjcztIRvYIP+xy8SaL2KDjt5fzbNnGhupsX IHoHPKSHY1SxHojBXlcHxGEhc+Fxau74fIm52k/IFWqBxmR1+hKiRB6v0Sz2ECtL iXV0/jt29nuEWxV0KOCenN53MA== -----END CERTIFICATE-----Generated at Mon Sep 21 16:41:37 2026 by rpki-client