$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft File: RyCit4x4I5km_e5zRKNoDaDYBx0.mft (raw, json) Hash identifier: 4iyT69kuU+VgCiiQZC/Ub9F57X2YX2ucjztApGOLdfg= Subject key identifier: 58:7A:8B:99:8A:B0:5C:DE:79:1D:DF:EE:13:A2:EC:7A:64:98:CC:3C Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft Manifest number: 0151 Signing time: Mon 27 Jul 2026 06:57:58 +0000 Manifest this update: Mon 27 Jul 2026 06:57:57 +0000 Manifest next update: Mon 03 Aug 2026 06:57:57 +0000 Files and hashes: 1: RyCit4x4I5km_e5zRKNoDaDYBx0.crl (hash: DO8N9XWQjEHhT3IqMkabbDCp4N5uloOaYT0qa1ufgEk=) 2: 003589503F8311F0AA4DF254C4F9AE02.roa (hash: DKnLp31Pt39zKxYHan0L0UpjSQtw5gIheDfF7NmRFzQ=) 3: D2D7B762995611EFADA5D754C4F9AE02.roa (hash: uC7UgU3WUyp6lo8+x5BnzjYje46EFX3E65V33NxoTHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Validity Not Before: Jul 27 06:57:57 2026 GMT Not After : Aug 3 06:57:57 2026 GMT Subject: CN=6a670176-867a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:ec:74:ac:07:1b:9c:f0:3e:6d:f9:92:24: 6e:da:f5:c3:a3:00:09:ae:10:4f:e6:71:1b:c5:ec: 01:19:6b:04:82:a8:fa:81:93:8d:c2:0e:23:03:d2: 24:37:af:78:d2:14:15:85:f7:d6:76:bc:a3:f4:dc: 34:b8:7b:aa:97:39:ea:ff:a4:e7:de:56:ba:ba:71: b1:8e:f4:d3:60:cf:d8:0f:f1:63:8b:b4:46:82:6c: 55:05:ba:7b:4f:44:52:3f:49:d5:c2:c8:54:ba:24: 52:7c:07:89:9c:b8:b1:86:0a:b0:35:29:d0:65:35: a3:8c:9d:30:d5:74:2f:f1:b2:4c:ef:57:66:5d:a9: 4a:4d:0d:4f:87:05:f5:8a:cc:0c:20:b1:1c:88:60: c0:5e:a3:74:79:3d:69:c3:fc:bd:2b:8c:fe:25:9f: a5:3c:3e:c6:ec:31:09:99:69:a6:39:ff:c1:e8:20: d8:7e:e1:41:d0:33:9d:94:78:64:f1:94:97:34:b0: 6d:ac:05:32:fd:d3:8a:e7:d0:3e:2a:c0:09:f3:07: 91:19:55:6c:dd:4d:73:17:c8:ea:1b:86:07:3b:4b: cc:4f:ed:12:5d:0f:d9:14:50:07:99:e1:59:f5:76: a3:15:d0:5f:c4:9f:ae:6d:bb:d8:41:20:20:98:ef: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7A:8B:99:8A:B0:5C:DE:79:1D:DF:EE:13:A2:EC:7A:64:98:CC:3C X509v3 Authority Key Identifier: keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:67:51:ab:8e:a4:e4:31:5c:17:ff:27:69:85:3d:6c:aa:94: 78:98:55:f8:fe:75:a2:0e:68:04:cb:a9:84:36:48:ea:91:e0: ef:b6:3b:a7:57:e8:d7:29:60:3d:42:72:bd:57:7c:c7:f5:9b: e8:cd:e6:74:24:8b:8a:35:19:58:e1:5f:3a:91:8e:25:b3:f2: 1a:53:e3:fc:5a:0b:ce:0d:97:df:a6:55:a5:bd:38:66:bd:83: 69:74:58:42:c6:46:b3:b7:d0:99:a5:63:19:83:a3:da:fe:8d: 4c:80:43:b2:74:04:d1:31:76:88:23:31:e9:5e:d0:0d:cc:db: cc:19:bf:0f:b7:9c:df:e2:8e:13:e4:2b:69:a7:aa:ff:5b:2f: d2:3e:6e:f6:f4:9e:19:5a:7f:f5:d8:77:34:e9:78:1f:52:6c: a4:0e:d1:b8:2f:23:5f:79:9e:31:83:aa:05:7c:b4:c2:08:cf: 23:46:c6:94:ad:87:f2:ea:25:50:d7:23:58:ad:7f:c9:9a:34: b2:a7:6e:f6:df:b2:cd:d7:a8:f9:68:e3:41:68:fa:59:29:05: 9a:95:b3:7c:22:a0:0e:89:7f:df:f1:b7:32:18:9c:59:4f:74: bd:94:5d:21:ac:79:a5:6b:d8:a7:bd:c3:a1:fd:f9:eb:61:20: 59:4f:5b:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDQ3MjBBMkI3OEM3ODIzOTkyNkZERUU3MzQ0QTM2ODBE QTBEODA3MUQwHhcNMjYwNzI3MDY1NzU3WhcNMjYwODAzMDY1NzU3WjAYMRYwFAYD VQQDEw02YTY3MDE3Ni04NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbnsdKwHG5zwPm35kiRu2vXDowAJrhBP5nEbxewBGWsEgqj6gZONwg4jA9Ik N6940hQVhffWdryj9Nw0uHuqlznq/6Tn3la6unGxjvTTYM/YD/Fji7RGgmxVBbp7 T0RSP0nVwshUuiRSfAeJnLixhgqwNSnQZTWjjJ0w1XQv8bJM71dmXalKTQ1PhwX1 iswMILEciGDAXqN0eT1pw/y9K4z+JZ+lPD7G7DEJmWmmOf/B6CDYfuFB0DOdlHhk 8ZSXNLBtrAUy/dOK59A+KsAJ8weRGVVs3U1zF8jqG4YHO0vMT+0SXQ/ZFFAHmeFZ 9XajFdBfxJ+ubbvYQSAgmO+dSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh6i5mK sFzeeR3f7hOi7HpkmMw8MB8GA1UdIwQYMBaAFEcgoreMeCOZJv3uc0SjaA2g2Acd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi8yN0UzRURBNDk4 MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1a21fZTV6UktOb0RhRFlC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJERi8yN0UzRURBNDk4MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1 a21fZTV6UktOb0RhRFlCeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjmdRq46k5DFcF/8naYU9bKqUeJhV+P51og5oBMuphDZI6pHg77Y7p1fo1ylg PUJyvVd8x/Wb6M3mdCSLijUZWOFfOpGOJbPyGlPj/FoLzg2X36ZVpb04Zr2DaXRY QsZGs7fQmaVjGYOj2v6NTIBDsnQE0TF2iCMx6V7QDczbzBm/D7ec3+KOE+Qraaeq /1sv0j5u9vSeGVp/9dh3NOl4H1JspA7RuC8jX3meMYOqBXy0wgjPI0bGlK2H8uol UNcjWK1/yZo0sqdu9t+yzdeo+WjjQWj6WSkFmpWzfCKgDol/3/G3MhicWU90vZRd Iax5pWvYp73Dof3562EgWU9bxA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:40:50 2026 by rpki-client