$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: UttPYOGEF6yv/escY2FWUQ13/TuFV6tk5+QxQa+lL/w= Subject key identifier: E6:6D:2E:4F:57:0E:5D:E8:27:5E:B0:A8:2A:44:C9:47:04:05:BC:AA Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: D9 Signing time: Mon 27 Jul 2026 09:10:42 +0000 Manifest this update: Mon 27 Jul 2026 09:10:41 +0000 Manifest next update: Mon 03 Aug 2026 09:10:41 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: 1MqT9U5YHsBcSO7PHXjSqenF4xSTDzmcy1Hy4JYu2qY=) 2: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=) 3: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=) 4: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=) 5: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Jul 27 09:10:41 2026 GMT Not After : Aug 3 09:10:41 2026 GMT Subject: CN=6a672092-44b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:63:80:a7:64:33:b7:8f:50:b0:29:9f:56: 57:3b:b9:6b:c0:82:36:10:5b:c4:25:36:73:82:b3: e0:e3:a2:25:35:f3:ed:18:5b:d4:44:27:06:f5:5e: e7:35:12:94:e5:6b:8d:09:d0:f8:54:f1:42:af:3c: 2a:aa:c8:5f:fa:3c:97:e9:c2:93:94:cf:86:a3:03: 0b:76:53:73:b6:2f:69:3b:ab:2f:a4:07:51:41:77: 70:f6:3e:a2:33:e8:69:d6:4e:51:f6:3c:35:2f:60: 2b:e0:b7:06:cd:57:6f:62:71:ae:74:c4:0d:53:55: 9e:a0:f1:7c:ab:a6:8b:74:34:35:45:8c:3b:cd:02: 2c:b0:e9:ea:de:4f:2b:99:a7:bf:3a:eb:3f:c0:19: 94:2e:22:44:ef:0d:19:51:97:01:15:68:be:20:99: 89:95:a4:d5:be:63:4b:fc:4b:d0:01:03:30:43:c8: be:53:c9:58:44:9b:14:7f:f8:60:d9:d5:e2:29:d4: e4:79:3a:f1:65:59:f8:d1:24:33:fd:51:4c:68:c2: f4:01:8b:0e:62:53:36:e1:85:16:09:29:cf:47:89: 08:36:6d:d6:51:41:13:19:26:7d:4d:39:c4:ec:2c: 98:a3:15:06:37:72:64:1b:2a:dd:32:08:22:ff:b9: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:2E:4F:57:0E:5D:E8:27:5E:B0:A8:2A:44:C9:47:04:05:BC:AA X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:13:a2:00:29:ef:62:85:ca:4a:74:81:ee:c0:e1:22:d9:fb: 56:cd:09:6e:4b:7c:0a:f1:9b:49:3b:8c:b7:c3:56:17:53:9c: 88:8f:87:5d:30:5c:5d:5c:b9:6b:c1:ed:0e:91:0b:be:c7:a4: 67:15:ff:67:db:30:31:69:96:4b:36:9d:f1:2e:0f:01:44:d2: 6a:63:34:22:ec:7e:c3:85:56:b7:53:91:1a:23:c7:5e:2e:94: 6f:20:3c:b2:82:e8:4f:f0:50:68:27:6d:87:33:0d:21:ed:99: a7:75:b5:2f:68:6b:9c:b1:14:e9:1f:ec:77:e0:e0:3f:12:c6: 3a:41:9b:4f:ef:94:6e:a5:31:03:99:37:ba:92:26:08:29:76: 61:0b:de:a0:b9:75:2a:16:a8:3b:28:fa:ee:57:75:0f:02:ac: 5b:26:db:e6:62:cf:78:02:15:b5:11:c6:24:42:25:e8:cc:4d: 63:7b:da:83:e9:06:78:20:47:dc:c1:ab:af:06:6c:73:3e:3d: 49:e9:03:ce:8b:6f:6f:c8:50:61:bd:3e:23:ab:3d:e8:60:2d: 3a:40:6e:60:09:dc:47:98:11:16:d0:06:eb:17:6e:2c:d8:48: 4d:ad:9c:18:74:0e:86:04:7a:ae:fb:d8:fb:2a:8f:60:c2:cf: 78:a4:45:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYwNzI3MDkxMDQxWhcNMjYwODAzMDkxMDQxWjAYMRYwFAYD VQQDEw02YTY3MjA5Mi00NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLRjgKdkM7ePULApn1ZXO7lrwII2EFvEJTZzgrPg46IlNfPtGFvURCcG9V7n NRKU5WuNCdD4VPFCrzwqqshf+jyX6cKTlM+GowMLdlNzti9pO6svpAdRQXdw9j6i M+hp1k5R9jw1L2Ar4LcGzVdvYnGudMQNU1WeoPF8q6aLdDQ1RYw7zQIssOnq3k8r mae/Ous/wBmULiJE7w0ZUZcBFWi+IJmJlaTVvmNL/EvQAQMwQ8i+U8lYRJsUf/hg 2dXiKdTkeTrxZVn40SQz/VFMaML0AYsOYlM24YUWCSnPR4kINm3WUUETGSZ9TTnE 7CyYoxUGN3JkGyrdMggi/7m9bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZtLk9X Dl3oJ16wqCpEyUcEBbyqMB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGhOiACnvYoXKSnSB7sDhItn7Vs0Jbkt8CvGbSTuMt8NWF1OciI+HXTBcXVy5 a8HtDpELvsekZxX/Z9swMWmWSzad8S4PAUTSamM0Iux+w4VWt1ORGiPHXi6UbyA8 soLoT/BQaCdthzMNIe2Zp3W1L2hrnLEU6R/sd+DgPxLGOkGbT++UbqUxA5k3upIm CCl2YQveoLl1KhaoOyj67ld1DwKsWybb5mLPeAIVtRHGJEIl6MxNY3vag+kGeCBH 3MGrrwZscz49SekDzotvb8hQYb0+I6s96GAtOkBuYAncR5gRFtAG6xduLNhITa2c GHQOhgR6rvvY+yqPYMLPeKRF0Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:49 2026 by rpki-client