$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: wrhscCWfWdazqboqmfCoxrv5AE30ViuoKDMvPLljZ6g= Subject key identifier: 1D:45:02:51:96:B8:1B:9C:D9:7F:D6:83:82:03:B7:F6:4C:1D:47:C7 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0F2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0F15 Signing time: Tue 28 Jul 2026 17:45:00 +0000 Manifest this update: Tue 28 Jul 2026 17:45:00 +0000 Manifest next update: Tue 04 Aug 2026 17:45:00 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: r2yhXDjoPkQff0dbXSCBMqhM3sg3dfvlSrzVtrgdloo=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: JURe/kWLxWBBPujRNutDT5hH/C63Ar6PS7XUiquehOE=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 9PzmGNvK7SqmPlPyXHrhBcEPkqCMbrFtsm/C/q55ytk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3887 (0xf2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Jul 28 17:45:00 2026 GMT Not After : Aug 4 17:45:00 2026 GMT Subject: CN=6a68ea9c-df98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:eb:e9:e7:9a:2e:34:be:23:8e:b3:9e:11:35: 16:ea:14:fd:be:ec:38:87:7e:82:a2:bf:5b:59:af: ee:3d:b3:68:ba:2b:22:6a:dc:30:01:ba:a8:b9:eb: e6:9a:79:68:4a:f9:60:d3:00:36:70:da:4b:e7:4f: 43:b7:80:64:ca:cf:cf:5f:04:e7:69:26:c4:3f:b8: 00:d4:e6:46:40:5b:d3:df:38:bb:ce:79:7e:c6:1c: 9b:dc:4a:00:70:e0:3d:68:74:e8:2e:e5:53:50:b1: 78:68:71:5b:21:69:cc:f2:d9:b3:ae:38:ca:97:99: 9b:bd:ee:ff:03:f6:17:95:4a:1c:89:83:0a:ee:a0: 10:38:d5:7a:2c:65:71:4b:81:3c:52:72:0b:a4:76: 4d:c0:ca:ef:f8:19:28:9e:92:4d:ea:a3:32:a8:0a: ac:7f:d0:ff:35:1a:4a:8a:43:ce:51:af:26:f2:17: aa:5e:61:6a:e1:48:0f:17:e8:18:ea:7b:9e:bd:88: df:bc:54:e8:b6:28:46:5e:8a:e3:1c:ad:67:db:fa: 02:1c:27:a0:72:c2:8e:37:54:1c:9c:64:19:01:6c: e2:14:62:09:3e:46:1e:4c:a2:0e:f6:13:b3:5d:e3: e0:f8:c2:b4:55:65:de:be:35:05:3b:4b:3c:13:90: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:02:51:96:B8:1B:9C:D9:7F:D6:83:82:03:B7:F6:4C:1D:47:C7 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:18:c9:56:4b:81:23:0f:3f:92:82:36:a5:48:f4:bb:3f:1d: ba:65:8f:7b:cf:86:2b:28:31:cf:eb:c2:55:a7:94:4c:14:8f: 57:d7:32:d9:4c:95:f6:b1:c3:0f:83:43:79:8e:aa:1b:6f:fe: 34:96:7b:bb:df:c9:b7:2a:51:c6:8a:13:91:43:aa:87:c4:4e: d5:6f:b0:0d:27:74:02:c4:19:ac:1d:79:41:ad:79:38:a5:45: 63:ee:fe:14:14:93:ca:40:73:7c:7c:f7:90:9c:2a:46:4f:3c: ea:02:24:de:f9:2d:95:f4:45:01:62:76:ea:81:33:37:5c:a6: e0:2c:54:2a:98:b3:fa:fd:f5:19:8e:8f:25:eb:b2:26:32:3d: b9:40:ec:44:cb:c3:60:6f:4a:f8:c4:a3:b9:9f:94:28:ab:fb: e0:e9:c4:63:a0:f5:0a:a0:31:ba:3d:74:fc:1c:b8:17:46:6d: f0:b7:50:b8:b5:e8:50:9e:c8:06:a9:de:e3:c3:8f:42:f9:2f: dd:af:6d:53:21:ca:f3:0b:c0:b9:29:b7:8a:79:f3:c9:0a:6a: e6:22:78:75:b0:c1:98:c8:96:6e:ad:ac:c2:67:13:fa:3b:58: 2d:3b:46:e2:db:15:16:9b:b9:5f:da:e7:6b:93:fe:ed:a6:67: ee:fb:8e:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjYwNzI4MTc0NTAwWhcNMjYwODA0MTc0NTAwWjAYMRYwFAYD VQQDEw02YTY4ZWE5Yy1kZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uvp55ouNL4jjrOeETUW6hT9vuw4h36Cor9bWa/uPbNouisiatwwAbqouevm mnloSvlg0wA2cNpL509Dt4Bkys/PXwTnaSbEP7gA1OZGQFvT3zi7znl+xhyb3EoA cOA9aHToLuVTULF4aHFbIWnM8tmzrjjKl5mbve7/A/YXlUociYMK7qAQONV6LGVx S4E8UnILpHZNwMrv+BkonpJN6qMyqAqsf9D/NRpKikPOUa8m8heqXmFq4UgPF+gY 6nuevYjfvFTotihGXorjHK1n2/oCHCegcsKON1QcnGQZAWziFGIJPkYeTKIO9hOz XePg+MK0VWXevjUFO0s8E5A3cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1FAlGW uBuc2X/Wg4IDt/ZMHUfHMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeBjJVkuBIw8/koI2pUj0uz8dumWPe8+GKygxz+vCVaeUTBSPV9cy2UyV9rHD D4NDeY6qG2/+NJZ7u9/JtypRxooTkUOqh8RO1W+wDSd0AsQZrB15Qa15OKVFY+7+ FBSTykBzfHz3kJwqRk886gIk3vktlfRFAWJ26oEzN1ym4CxUKpiz+v31GY6PJeuy JjI9uUDsRMvDYG9K+MSjuZ+UKKv74OnEY6D1CqAxuj10/By4F0Zt8LdQuLXoUJ7I Bqne48OPQvkv3a9tUyHK8wvAuSm3innzyQpq5iJ4dbDBmMiWbq2swmcT+jtYLTtG 4tsVFpu5X9rna5P+7aZn7vuOjw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:02:03 2026 by rpki-client