$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: 0efhDHVMqyxdWzX+nK/aOQWuATLGtda9rxLFauh/cWw= Subject key identifier: 65:3C:57:9E:A9:79:16:0E:4A:2A:C3:7F:F0:C4:BD:5D:5B:69:03:2C Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 02D2 Signing time: Mon 21 Sep 2026 01:19:03 +0000 Manifest this update: Mon 21 Sep 2026 01:19:02 +0000 Manifest next update: Mon 28 Sep 2026 01:19:02 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: dzy9PONoVmBHOnnZxweeBCTAO2I7lCOJF+viJ+y6apc=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Sep 21 01:19:02 2026 GMT Not After : Sep 28 01:19:02 2026 GMT Subject: CN=6ab08606-f87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:05:33:72:f2:24:e6:57:2c:ad:ea:45:0a:c8: 31:3e:1f:8a:b8:4a:eb:fe:63:ff:ae:40:be:ce:90: e9:37:17:6b:c9:06:76:c5:bb:49:20:10:7a:46:61: 58:3f:e2:a6:c0:4a:54:c6:23:b1:5d:b9:2c:56:6c: 81:4f:59:e4:ca:a0:53:a8:91:47:bc:7b:90:95:7f: c5:70:52:68:71:a0:b3:a1:5b:63:d9:64:f0:83:e2: 10:a2:e3:b9:fe:4e:ec:9c:47:28:3e:f4:4c:7a:13: c5:9d:d5:ad:84:02:01:c3:de:29:a2:af:65:c2:a4: 13:2c:42:5c:ab:25:8b:75:72:d9:02:f6:1e:75:cb: 38:d9:59:f2:28:37:ed:c9:87:66:06:db:9a:5f:d0: 41:fe:ed:af:1d:9b:31:e1:15:ef:5f:e1:54:50:a4: 03:0f:51:73:3a:1b:98:99:ab:83:c6:70:13:d4:03: c6:93:ac:3b:a2:b5:f7:aa:09:15:8e:d5:88:91:35: 11:69:b0:81:d9:b7:2b:d6:95:fb:a9:66:f5:7d:cf: f0:3d:cd:b6:25:fd:68:df:31:ba:3d:32:87:a1:e9: c3:42:96:67:e1:d0:1f:4b:6b:cf:ba:f6:45:83:de: dd:2b:7c:8c:75:e4:af:74:0f:4f:7d:f4:7a:bb:cb: 52:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:57:9E:A9:79:16:0E:4A:2A:C3:7F:F0:C4:BD:5D:5B:69:03:2C X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:af:47:ee:5f:e8:25:36:ea:c1:41:00:ca:04:37:34:54:72: f7:b7:fa:1f:24:2d:d3:2c:50:35:ac:81:8e:cc:fe:62:31:25: 59:8a:c1:66:e0:a8:15:f1:69:b0:4c:57:13:78:c5:e4:ad:08: de:90:d9:89:62:ff:0f:c3:2d:c6:c5:9f:d2:51:62:01:50:05: 43:4e:e7:d3:34:57:f6:61:65:9f:58:ec:c9:38:3f:dc:0a:ae: f8:17:6d:c4:7c:5c:bd:2f:3e:eb:1b:dc:db:81:d7:b0:87:29: 43:5b:8a:e2:f4:31:dc:58:b1:bd:d9:fc:db:a0:6b:01:71:4a: 8c:1a:2f:dd:b3:46:e2:f3:d2:87:8c:1d:c8:dd:fc:a7:df:f9: a7:fe:ee:a5:ce:e4:3b:0e:07:f1:bf:f8:0b:d1:23:4b:9c:5f: 1f:8b:e2:df:6e:43:64:cc:78:73:c3:ed:00:d4:23:28:ab:28: 4e:b0:ae:4a:00:07:44:f3:91:9c:57:02:04:05:4c:19:4b:9e: 3a:52:b1:38:4e:e5:99:64:ce:57:0b:1e:bb:a9:ee:1b:9f:c4: c7:55:f2:29:27:93:61:ce:47:d7:de:b5:cf:96:0a:5a:05:91: 91:cb:22:ee:f0:95:f4:84:a6:0e:2b:8f:e7:75:20:f2:18:6b: cb:af:4e:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjYwOTIxMDExOTAyWhcNMjYwOTI4MDExOTAyWjAYMRYwFAYD VQQDEw02YWIwODYwNi1mODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8QUzcvIk5lcsrepFCsgxPh+KuErr/mP/rkC+zpDpNxdryQZ2xbtJIBB6RmFY P+KmwEpUxiOxXbksVmyBT1nkyqBTqJFHvHuQlX/FcFJocaCzoVtj2WTwg+IQouO5 /k7snEcoPvRMehPFndWthAIBw94poq9lwqQTLEJcqyWLdXLZAvYedcs42VnyKDft yYdmBtuaX9BB/u2vHZsx4RXvX+FUUKQDD1FzOhuYmauDxnAT1APGk6w7orX3qgkV jtWIkTURabCB2bcr1pX7qWb1fc/wPc22Jf1o3zG6PTKHoenDQpZn4dAfS2vPuvZF g97dK3yMdeSvdA9PffR6u8tSdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGU8V56p eRYOSirDf/DEvV1baQMsMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD69H7l/oJTbqwUEAygQ3NFRy97f6HyQt0yxQNayBjsz+YjElWYrBZuCoFfFp sExXE3jF5K0I3pDZiWL/D8MtxsWf0lFiAVAFQ07n0zRX9mFln1jsyTg/3Aqu+Bdt xHxcvS8+6xvc24HXsIcpQ1uK4vQx3Fixvdn826BrAXFKjBov3bNG4vPSh4wdyN38 p9/5p/7upc7kOw4H8b/4C9EjS5xfH4vi325DZMx4c8PtANQjKKsoTrCuSgAHRPOR nFcCBAVMGUueOlKxOE7lmWTOVwseu6nuG5/Ex1XyKSeTYc5H1961z5YKWgWRkcsi 7vCV9ISmDiuP53Ug8hhry69OGw== -----END CERTIFICATE-----Generated at Tue Sep 22 13:00:13 2026 by rpki-client