$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: l4PUZShidOOnnxfuQAmnCmwZvMLq6TQPVHohmT7T/48= Subject key identifier: FF:19:A5:DC:91:A4:21:C1:C7:0A:4E:33:BB:31:6C:5B:CF:18:90:2E Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 022F Signing time: Mon 27 Jul 2026 04:15:22 +0000 Manifest this update: Mon 27 Jul 2026 04:15:21 +0000 Manifest next update: Mon 03 Aug 2026 04:15:21 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: 2C589jtZuIajeG9GsS3qibdPPuffcQ4NnhUK9qj233Q=) 2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=) 3: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=) 4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Jul 27 04:15:21 2026 GMT Not After : Aug 3 04:15:21 2026 GMT Subject: CN=6a66db5a-47a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:7c:a1:f4:06:2b:42:37:ab:19:cc:46:cd: 5b:fb:b1:bf:16:90:16:3e:d3:9f:47:a4:6b:67:e2: 42:54:3f:c9:dd:a0:28:ad:35:56:6c:ca:66:c1:f6: 56:e1:6e:cb:b7:fd:9d:b5:8d:33:83:8e:0c:fa:fc: b7:58:b9:99:63:cf:fd:9e:99:e1:ec:9a:04:a0:01: 79:82:fc:b2:b7:6c:30:2e:ce:d6:cb:ba:aa:c7:a9: d2:cf:42:c5:13:7e:f6:be:a7:82:5e:d2:ca:1b:1c: 5d:bd:9a:5e:5d:3b:08:c6:af:20:be:04:2f:bb:f6: 47:9c:82:e4:0b:c8:4e:53:e4:fd:99:41:36:2e:3b: 91:87:db:06:1c:05:54:f1:67:85:72:27:c7:ec:29: 4c:63:b3:2f:ad:0e:d2:c6:62:c0:1d:41:69:7e:ae: e3:9c:12:69:dd:37:a0:ea:65:c8:3f:43:11:0e:65: 9e:f9:9a:35:a2:91:87:d4:87:f0:5e:76:10:68:d7: b7:9e:65:cb:59:64:09:37:d3:0c:0d:8f:23:3c:fe: c0:3f:b6:c4:0c:f1:4d:50:f0:c4:d2:9f:bf:cb:8f: f0:12:33:a6:9f:c0:02:49:30:14:29:c2:e6:82:43: 32:26:12:7f:35:9d:b0:b5:0a:6f:67:cd:99:88:d6: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:A5:DC:91:A4:21:C1:C7:0A:4E:33:BB:31:6C:5B:CF:18:90:2E X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d5:59:0d:b1:90:4a:0c:4a:14:0f:63:c0:8f:12:e3:4e:5a: 03:d9:f1:e1:64:d4:1a:66:d4:a1:bd:59:a6:fa:da:f8:c4:de: 67:90:d9:3d:76:f9:2b:15:2c:7b:4c:de:6b:34:c2:7f:c6:62: b3:ec:74:ec:e5:83:b2:1c:43:33:ff:ae:77:47:c4:df:0b:61: c6:79:c0:a4:89:3a:28:87:d4:10:d2:34:06:98:6f:b9:ff:02: d5:0c:31:14:c1:9d:d3:70:4d:0e:16:af:98:54:97:05:5a:3b: 91:eb:27:4e:91:c5:22:12:21:32:f9:24:1f:73:93:89:73:3f: 89:a8:b1:df:fb:ff:51:ab:68:a0:9a:87:2d:42:46:15:b8:d9: fe:9d:9b:f1:64:7f:84:e9:3f:de:44:a3:e4:23:2e:8f:f0:de: 12:5e:fb:c1:9b:42:d7:7c:ff:bf:45:a7:00:5e:6f:07:1b:43: 9e:cc:b0:32:30:b2:06:01:93:23:24:30:f1:0d:63:6e:d3:ef: 72:76:2b:83:b4:1d:62:18:02:1e:48:29:73:5d:83:5f:a7:eb: c4:49:11:53:6b:e7:4a:28:f7:0f:9f:06:93:df:f8:72:ef:6d: d5:ad:42:0b:7b:04:d8:8e:82:ac:ed:b1:18:c8:15:7e:2a:0e: 9b:03:ff:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjYwNzI3MDQxNTIxWhcNMjYwODAzMDQxNTIxWjAYMRYwFAYD VQQDEw02YTY2ZGI1YS00N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzR8ofQGK0I3qxnMRs1b+7G/FpAWPtOfR6RrZ+JCVD/J3aAorTVWbMpmwfZW 4W7Lt/2dtY0zg44M+vy3WLmZY8/9npnh7JoEoAF5gvyyt2wwLs7Wy7qqx6nSz0LF E372vqeCXtLKGxxdvZpeXTsIxq8gvgQvu/ZHnILkC8hOU+T9mUE2LjuRh9sGHAVU 8WeFcifH7ClMY7MvrQ7SxmLAHUFpfq7jnBJp3Teg6mXIP0MRDmWe+Zo1opGH1Ifw XnYQaNe3nmXLWWQJN9MMDY8jPP7AP7bEDPFNUPDE0p+/y4/wEjOmn8ACSTAUKcLm gkMyJhJ/NZ2wtQpvZ82ZiNbuKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8ZpdyR pCHBxwpOM7sxbFvPGJAuMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAENVZDbGQSgxKFA9jwI8S405aA9nx4WTUGmbUob1Zpvra+MTeZ5DZPXb5KxUs e0zeazTCf8Zis+x07OWDshxDM/+ud0fE3wthxnnApIk6KIfUENI0Bphvuf8C1Qwx FMGd03BNDhavmFSXBVo7kesnTpHFIhIhMvkkH3OTiXM/iaix3/v/UatooJqHLUJG FbjZ/p2b8WR/hOk/3kSj5CMuj/DeEl77wZtC13z/v0WnAF5vBxtDnsywMjCyBgGT IyQw8Q1jbtPvcnYrg7QdYhgCHkgpc12DX6frxEkRU2vnSij3D58Gk9/4cu9t1a1C C3sE2I6CrO2xGMgVfioOmwP/Eg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:20:28 2026 by rpki-client