$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: v3HYyELHRzq+FQIT83yKtIkMhbUVvAzjjo4q/pQuO1c= Subject key identifier: FB:90:A2:7E:0F:FA:7C:13:CF:B2:26:EE:67:DC:21:58:15:7F:32:93 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 0137 Signing time: Mon 27 Jul 2026 07:31:53 +0000 Manifest this update: Mon 27 Jul 2026 07:31:53 +0000 Manifest next update: Mon 03 Aug 2026 07:31:53 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: zgmylTjvZmXH0lzswnmTTxOF5MPE/V9Y+mdBQsIEwKM=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jul 27 07:31:53 2026 GMT Not After : Aug 3 07:31:53 2026 GMT Subject: CN=6a670969-da68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:04:a3:18:a5:bc:00:da:73:9e:76:98:e8: 36:bc:17:09:68:71:af:ea:86:1c:83:bc:d4:7d:11: e9:f4:36:d8:4a:ee:ae:14:cb:ef:8f:33:ac:22:22: ec:9a:29:cf:55:8f:30:d0:96:a1:8e:8e:08:81:41: 3a:b0:cf:f9:f1:e1:25:77:b1:58:0d:83:10:fa:59: 20:1e:fc:80:c0:a7:86:b7:2a:e0:bc:37:fd:68:d8: 37:c5:42:dc:ac:51:26:e5:11:d1:60:e2:80:69:c2: d1:ed:29:fb:a1:35:5e:e0:d6:ec:93:61:91:fb:b5: 8f:a0:4c:92:b3:d9:d0:73:11:14:83:4b:2b:ba:f1: 54:af:7d:bf:56:80:96:65:13:3a:70:cb:10:a1:c3: 62:73:85:13:64:57:0b:93:1b:2c:50:fb:84:6f:3a: ab:0c:47:1d:6f:74:16:55:a5:5e:41:14:0f:24:6d: 98:e4:91:71:6c:34:d3:df:f6:5a:3b:62:46:70:36: cd:11:e2:3a:a3:13:23:4a:a3:2d:8d:48:0c:42:2b: a4:a8:05:d5:48:04:d5:52:ad:e8:b9:d5:d5:5d:2a: 2d:60:62:d8:b9:bf:06:b9:0b:9f:be:a6:6e:e2:35: ff:68:05:4f:81:27:8e:e2:ce:38:44:97:6e:ba:32: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:90:A2:7E:0F:FA:7C:13:CF:B2:26:EE:67:DC:21:58:15:7F:32:93 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7e:ce:fb:fc:7c:d4:f9:a9:73:83:88:35:9b:d4:52:d6:77: 79:e4:cc:31:7d:5d:14:21:a6:7f:9c:6d:67:5a:62:ab:9d:b4: bb:eb:7f:ec:19:ba:64:8d:7d:7c:2e:c1:a5:d8:70:09:da:1c: 9b:7a:0b:6b:18:ee:9e:e6:f2:8d:93:cb:f8:67:aa:82:5e:97: a5:7a:eb:b8:48:73:a3:1c:41:ec:d8:78:ae:22:b8:14:e4:08: fa:e6:85:e3:d8:b7:2d:cc:7f:c1:f9:93:87:8a:93:da:d5:dc: dc:52:26:af:c7:c1:b3:8a:36:78:e8:05:86:44:63:c9:ed:8a: 03:90:5f:6d:5c:29:dd:ee:e6:d1:5f:db:42:59:c1:6d:80:8b: 1c:fd:60:15:a5:2c:4b:5f:81:56:de:eb:92:3e:15:86:2b:e7: 97:bd:5a:a5:c3:19:6c:8d:b5:44:59:17:cc:50:f9:8f:94:d3: 81:5f:b2:ac:f2:67:29:59:15:de:20:a1:f5:84:b2:b6:01:5f: a8:cb:e2:33:ed:78:ab:35:2a:48:07:21:93:05:02:11:8e:fd: 60:58:b6:8e:1d:b7:ca:f6:13:eb:eb:7a:92:d8:7b:3d:17:b8: 53:1b:6f:a1:b0:a4:7a:47:38:90:2b:c7:0c:44:70:70:20:9b: f5:1d:0b:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYwNzI3MDczMTUzWhcNMjYwODAzMDczMTUzWjAYMRYwFAYD VQQDEw02YTY3MDk2OS1kYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmf4EoxilvADac552mOg2vBcJaHGv6oYcg7zUfRHp9DbYSu6uFMvvjzOsIiLs minPVY8w0Jahjo4IgUE6sM/58eEld7FYDYMQ+lkgHvyAwKeGtyrgvDf9aNg3xULc rFEm5RHRYOKAacLR7Sn7oTVe4Nbsk2GR+7WPoEySs9nQcxEUg0sruvFUr32/VoCW ZRM6cMsQocNic4UTZFcLkxssUPuEbzqrDEcdb3QWVaVeQRQPJG2Y5JFxbDTT3/Za O2JGcDbNEeI6oxMjSqMtjUgMQiukqAXVSATVUq3oudXVXSotYGLYub8GuQufvqZu 4jX/aAVPgSeO4s44RJduujKltQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuQon4P +nwTz7Im7mfcIVgVfzKTMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbX7O+/x81Pmpc4OINZvUUtZ3eeTMMX1dFCGmf5xtZ1piq520u+t/7Bm6ZI19 fC7BpdhwCdocm3oLaxjunubyjZPL+Geqgl6XpXrruEhzoxxB7Nh4riK4FOQI+uaF 49i3Lcx/wfmTh4qT2tXc3FImr8fBs4o2eOgFhkRjye2KA5BfbVwp3e7m0V/bQlnB bYCLHP1gFaUsS1+BVt7rkj4Vhivnl71apcMZbI21RFkXzFD5j5TTgV+yrPJnKVkV 3iCh9YSytgFfqMviM+14qzUqSAchkwUCEY79YFi2jh23yvYT6+t6kth7PRe4Uxtv obCkekc4kCvHDERwcCCb9R0LDg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:45:40 2026 by rpki-client