$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: zzr7Db1FoK1aUIsFKArrzzHrTz/8doWoSnvQPf3h63k= Subject key identifier: 9B:83:C9:59:62:E7:10:59:47:40:9F:C1:20:C2:49:85:34:65:2A:A0 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 21B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 21A5 Signing time: Tue 28 Jul 2026 15:59:47 +0000 Manifest this update: Tue 28 Jul 2026 15:59:46 +0000 Manifest next update: Tue 04 Aug 2026 15:59:46 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: OoXOgl4jSjVY0C5eACS6+YlXqjOOg6bW5fhltMFrPqE=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: HhQxUt8kfX+mJlXHn9AIcVCVvv1AbgL+l8SBK6m5XSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8627 (0x21b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: Jul 28 15:59:46 2026 GMT Not After : Aug 4 15:59:46 2026 GMT Subject: CN=6a68d1f3-8428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:a5:ef:0c:0e:87:c1:d3:b5:f7:d4:cc:df: 9a:e7:80:42:e3:de:1b:14:e8:f8:2b:e9:a8:a3:49: 83:eb:4c:f2:79:e3:a7:44:41:29:c7:38:1a:c2:e3: 70:a6:00:97:39:eb:59:6a:63:81:7e:61:d8:9b:c4: 19:12:f7:24:cc:19:2f:99:63:0a:6d:64:50:95:e6: cd:7f:c8:69:85:ba:0f:59:c1:9e:28:c6:01:bb:c8: 91:0e:e4:a5:5d:21:66:ff:ad:66:77:0e:e1:12:fb: 02:84:dd:09:55:fe:9b:95:c3:bf:4c:51:7b:66:5a: cd:f7:04:8b:57:7a:e2:7b:dc:4c:19:c0:e0:ac:de: 2a:05:2b:d0:25:46:c0:43:41:5f:3e:db:8e:cd:ee: 51:a1:b8:34:3b:88:33:92:80:be:e5:36:2f:c6:c9: 26:c2:b1:df:c6:b4:0b:04:c4:0c:0f:a2:1c:0b:26: a3:96:6c:b1:02:78:d2:b6:6c:98:29:bd:bc:32:3c: 3a:a7:78:23:d4:b1:ed:6c:73:85:a1:fa:4d:8e:2a: f4:2a:b0:f1:de:53:3c:19:3d:93:e3:e9:9b:6d:52: e8:a9:7e:87:83:56:39:ca:a2:c7:ae:33:8b:28:d9: 3b:98:f6:46:d3:0a:f1:1d:e4:7f:bf:d3:64:05:5c: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:83:C9:59:62:E7:10:59:47:40:9F:C1:20:C2:49:85:34:65:2A:A0 X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e3:25:4a:5f:5b:8c:08:0e:ce:c7:4f:4d:1a:89:f6:ae:a3: 21:e4:ed:bb:42:b7:33:76:22:55:d3:47:c2:a4:3f:88:56:9b: 0a:64:37:f0:81:48:0f:22:b6:db:e7:b6:e2:fb:e5:e4:c1:9a: f1:12:97:8b:5f:c4:24:cd:cc:bc:d8:85:ef:de:bb:b4:ff:72: 82:ea:94:65:62:2f:c6:d0:30:43:ed:4c:ad:69:c8:97:84:b0: 38:bb:e2:b5:bf:ee:f2:8e:4a:c3:d0:1c:55:0e:f9:9c:eb:70: 50:d4:bc:9a:e7:0c:b2:e7:dd:c0:45:c6:5a:3c:a6:8c:a9:72: 89:93:82:b0:5e:a5:23:39:63:30:5f:df:dd:84:11:c3:aa:70: cf:fa:1d:ac:30:a0:f8:58:cb:da:56:1e:4b:0a:af:cf:e3:19: 7b:c1:70:ca:db:52:64:1d:0e:79:65:df:9c:c3:a2:61:cc:21: 0e:36:c5:ac:6b:c6:52:1c:50:5c:76:62:64:4a:95:b3:5e:5a: 5d:90:c4:c5:32:70:a6:a9:92:42:ae:56:47:54:79:69:88:02: f7:08:c3:33:e1:7a:22:77:c9:1e:8d:0f:d9:59:43:d5:69:b5: 9d:17:62:78:94:82:46:96:27:0f:7d:a7:b3:a5:41:40:7d:ab: b3:56:a0:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjYwNzI4MTU1OTQ2WhcNMjYwODA0MTU1OTQ2WjAYMRYwFAYD VQQDEw02YTY4ZDFmMy04NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWSl7wwOh8HTtffUzN+a54BC494bFOj4K+moo0mD60zyeeOnREEpxzgawuNw pgCXOetZamOBfmHYm8QZEvckzBkvmWMKbWRQlebNf8hphboPWcGeKMYBu8iRDuSl XSFm/61mdw7hEvsChN0JVf6blcO/TFF7ZlrN9wSLV3rie9xMGcDgrN4qBSvQJUbA Q0FfPtuOze5Robg0O4gzkoC+5TYvxskmwrHfxrQLBMQMD6IcCyajlmyxAnjStmyY Kb28Mjw6p3gj1LHtbHOFofpNjir0KrDx3lM8GT2T4+mbbVLoqX6Hg1Y5yqLHrjOL KNk7mPZG0wrxHeR/v9NkBVwKmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuDyVli 5xBZR0CfwSDCSYU0ZSqgMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJuMlSl9bjAgOzsdPTRqJ9q6jIeTtu0K3M3YiVdNHwqQ/iFabCmQ38IFIDyK2 2+e24vvl5MGa8RKXi1/EJM3MvNiF7967tP9yguqUZWIvxtAwQ+1MrWnIl4SwOLvi tb/u8o5Kw9AcVQ75nOtwUNS8mucMsufdwEXGWjymjKlyiZOCsF6lIzljMF/f3YQR w6pwz/odrDCg+FjL2lYeSwqvz+MZe8FwyttSZB0OeWXfnMOiYcwhDjbFrGvGUhxQ XHZiZEqVs15aXZDExTJwpqmSQq5WR1R5aYgC9wjDM+F6InfJHo0P2VlD1Wm1nRdi eJSCRpYnD32ns6VBQH2rs1agIQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:16 2026 by rpki-client