$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: OJQs3Bz6wqbQNojaX4az/h5DP2M1v2gD93Rb8SJwf9o= Subject key identifier: 58:79:5B:C4:89:CC:6D:EE:97:15:9B:48:F3:30:6C:B0:16:74:3D:9A Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0CA8 Signing time: Sun 26 Jul 2026 18:57:41 +0000 Manifest this update: Sun 26 Jul 2026 18:57:40 +0000 Manifest next update: Sun 02 Aug 2026 18:57:40 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: /O+MvuIvsny7nAXBV9UxeoUM23poGZbhwuYFHBvKIUA=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: EHjk/F86ucLzY9sYVqsytzQA1yeTqJoqFn2Dz1cc9Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Jul 26 18:57:40 2026 GMT Not After : Aug 2 18:57:40 2026 GMT Subject: CN=6a6658a5-1a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:10:c6:03:34:14:3f:5b:fa:02:e3:67:e0:fd: f2:8a:77:b0:96:b4:1e:f0:3c:2a:d4:bb:64:34:10: e3:80:db:c3:fb:8c:19:68:e1:86:4c:a4:51:66:d4: e4:31:42:d4:65:98:28:8c:15:1e:96:32:66:2d:57: 2a:71:c9:fe:2a:12:06:a9:81:e2:9b:a8:4b:f1:c1: 4f:a1:74:88:3b:45:42:73:50:ce:fd:96:a7:90:5b: fc:b9:dd:67:6c:11:78:64:58:51:fe:80:f3:4b:da: 0d:50:33:44:d2:d4:5c:88:96:da:a3:43:e8:3e:7f: 3f:77:06:ca:20:75:f6:0a:4a:73:af:9e:c5:7b:da: 68:b2:68:e0:17:0a:59:fd:ca:6a:db:45:21:7c:63: 9e:51:40:e4:ea:37:36:f8:36:a6:25:21:33:4e:2a: 82:19:ab:4f:8b:d3:a5:4c:59:ed:91:7c:9a:30:49: 0a:dd:eb:a7:61:26:2b:e0:2e:21:49:f3:97:02:9b: 41:95:a0:8f:01:9f:2e:0c:43:a1:61:a8:c7:d5:0d: 8b:a7:c3:68:59:60:ec:b1:02:87:c9:1f:a3:6d:6b: 29:39:1d:18:c9:66:6c:5f:62:f5:4e:4b:6c:ef:17: 2c:52:bf:15:b5:08:02:ef:e7:71:f9:97:17:54:3c: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:5B:C4:89:CC:6D:EE:97:15:9B:48:F3:30:6C:B0:16:74:3D:9A X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:c6:05:fd:7f:4c:e4:f4:a5:6a:2f:38:47:4f:1c:b2:a0: 79:4b:cb:55:df:92:77:d4:7c:91:c7:f0:f2:28:e4:61:aa:37: 1e:fc:24:95:32:47:9e:de:31:51:82:e8:3b:40:2a:e3:23:d0: 9d:6a:84:c4:fd:db:90:d7:52:51:2b:96:f5:8e:11:2c:ea:14: 85:f9:9f:b4:47:c5:ea:04:11:a4:8a:14:01:94:20:d6:88:fe: b9:46:19:79:7d:30:76:f7:6f:f1:40:ff:af:82:fb:5f:fb:0f: 5b:19:5c:67:fc:68:ac:36:32:23:1d:be:e4:a1:c5:fb:c9:6a: d7:44:08:3d:8c:af:55:5e:89:34:c7:2b:39:28:91:d8:fe:95: 79:df:7a:42:23:7f:c6:c9:3a:69:16:35:86:a9:31:bf:13:47: d1:1b:3a:a4:da:f8:fe:76:86:7b:2e:d7:b5:2d:8c:62:61:78: df:78:27:eb:b3:a7:3b:e9:92:a8:42:18:85:d2:ed:2e:a2:75: 80:bc:19:1d:b1:4d:31:7e:b2:3c:9e:58:33:55:d9:43:7d:29: 64:0e:df:b1:f5:a1:fb:33:1c:15:a1:88:34:d8:92:1a:4e:25: 9f:1e:3d:ff:c2:12:c2:c3:3a:9a:2b:09:b5:1d:d5:ec:82:74: ff:59:95:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjYwNzI2MTg1NzQwWhcNMjYwODAyMTg1NzQwWjAYMRYwFAYD VQQDEw02YTY2NThhNS0xYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hDGAzQUP1v6AuNn4P3yinewlrQe8Dwq1LtkNBDjgNvD+4wZaOGGTKRRZtTk MULUZZgojBUeljJmLVcqccn+KhIGqYHim6hL8cFPoXSIO0VCc1DO/ZankFv8ud1n bBF4ZFhR/oDzS9oNUDNE0tRciJbao0PoPn8/dwbKIHX2Ckpzr57Fe9posmjgFwpZ /cpq20UhfGOeUUDk6jc2+DamJSEzTiqCGatPi9OlTFntkXyaMEkK3eunYSYr4C4h SfOXAptBlaCPAZ8uDEOhYajH1Q2Lp8NoWWDssQKHyR+jbWspOR0YyWZsX2L1Tkts 7xcsUr8VtQgC7+dx+ZcXVDzzNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh5W8SJ zG3ulxWbSPMwbLAWdD2aMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRXGBf1/TOT0pWovOEdPHLKgeUvLVd+Sd9R8kcfw8ijkYao3HvwklTJHnt4x UYLoO0Aq4yPQnWqExP3bkNdSUSuW9Y4RLOoUhfmftEfF6gQRpIoUAZQg1oj+uUYZ eX0wdvdv8UD/r4L7X/sPWxlcZ/xorDYyIx2+5KHF+8lq10QIPYyvVV6JNMcrOSiR 2P6Ved96QiN/xsk6aRY1hqkxvxNH0Rs6pNr4/naGey7XtS2MYmF433gn67OnO+mS qEIYhdLtLqJ1gLwZHbFNMX6yPJ5YM1XZQ30pZA7fsfWh+zMcFaGINNiSGk4lnx49 /8ISwsM6misJtR3V7IJ0/1mVtg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:58 2026 by rpki-client