$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: 8kerdrg6mUYFvQ69OObD4mPZufFTok8xap+8ZEqD+eo= Subject key identifier: 03:56:C3:84:D2:E4:F8:7A:26:7A:C3:3E:12:DC:7F:98:15:1C:DF:AA Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 021D Signing time: Mon 27 Jul 2026 04:28:39 +0000 Manifest this update: Mon 27 Jul 2026 04:28:39 +0000 Manifest next update: Mon 03 Aug 2026 04:28:39 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: AcGtAlMmnFaoN+mAWpRMOzh1f5+RcI/9nLd+Aqr2CWY=) 2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) 4: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Jul 27 04:28:39 2026 GMT Not After : Aug 3 04:28:39 2026 GMT Subject: CN=6a66de77-e4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:7b:ff:25:49:2f:be:aa:b2:a5:7a:1e:87: 9d:cd:e9:7f:25:74:c9:16:70:2f:b3:fb:b5:ae:ff: d1:86:22:a4:02:ff:fb:2e:d4:bd:78:dd:1b:73:00: 7d:5d:9e:2a:1d:5d:84:91:60:61:b0:9d:7f:a5:9d: 2c:b3:51:1a:4f:59:48:ce:94:d3:59:75:d0:0c:da: ae:29:1d:e3:10:90:cd:6e:00:46:22:96:e3:4b:7d: 01:7d:60:df:c9:a9:a5:f2:47:dc:ea:10:56:2c:12: ea:e4:a0:69:ce:05:93:82:f5:f7:11:4f:aa:5b:b5: 00:95:b8:3b:7c:22:d7:b7:11:99:8c:2c:3d:e0:17: b6:d5:12:74:16:38:10:cc:03:5b:9b:ef:dd:6c:db: e7:68:e2:89:10:7f:8d:8f:f9:25:34:e3:1f:fb:17: c1:e8:3d:2a:67:83:67:e4:7a:8d:68:15:2f:50:5d: 70:fb:82:4a:5c:0a:3a:e0:ca:ea:bb:32:b9:c3:b2: 13:3e:7b:ac:18:b6:9c:89:23:8e:8a:46:a9:f0:b4: 9a:75:d3:37:80:bd:d6:d8:d8:b7:15:a3:e0:81:2b: 29:4e:d4:0d:5e:09:08:35:d1:72:48:03:ce:39:d5: 4d:2d:ed:52:9e:70:08:24:42:3e:f7:26:a4:b0:7f: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:56:C3:84:D2:E4:F8:7A:26:7A:C3:3E:12:DC:7F:98:15:1C:DF:AA X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ad:94:75:61:da:c8:93:09:93:1f:4a:54:0f:79:a8:14:c2: 1b:05:94:47:3c:5a:53:0b:80:7c:2c:bb:5f:30:69:75:95:b8: f4:e6:35:62:d3:de:0c:95:24:25:b1:1d:d7:a2:2f:d6:2d:f7: 76:a7:f4:fa:75:82:33:bb:c0:38:d2:e9:c0:e2:d8:4d:c2:2f: b2:04:87:40:03:cb:c2:4f:22:f1:a5:49:6c:9c:13:c0:56:b6: 53:a0:28:bf:8a:2a:c9:f4:a9:09:2f:7b:da:ba:81:e5:75:03: 1e:52:62:5c:68:eb:67:0b:87:2c:ac:3c:be:21:b2:cc:86:4f: 9e:0a:b4:0f:20:50:3a:0b:04:46:6f:f6:3d:71:af:50:0e:80: e1:8b:5c:3c:3d:56:06:e5:84:da:5d:19:e6:1e:7a:cc:e9:3c: ab:1b:e6:0b:78:39:0d:7f:1b:6d:80:24:70:39:76:50:25:1a: a5:aa:c3:89:dd:e6:e4:4c:84:bc:69:0d:64:86:4d:c9:44:39: 02:cd:f1:ff:22:07:eb:97:6d:82:56:85:8c:00:e6:67:90:cd: f9:12:87:d9:e6:00:42:33:bd:11:cf:47:af:0a:21:45:f3:5b: 35:1e:1a:60:ed:8f:6f:39:b6:a5:00:15:fd:14:40:0e:c4:1c: a1:6d:a5:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwNzI3MDQyODM5WhcNMjYwODAzMDQyODM5WjAYMRYwFAYD VQQDEw02YTY2ZGU3Ny1lNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrB7/yVJL76qsqV6Hoedzel/JXTJFnAvs/u1rv/RhiKkAv/7LtS9eN0bcwB9 XZ4qHV2EkWBhsJ1/pZ0ss1EaT1lIzpTTWXXQDNquKR3jEJDNbgBGIpbjS30BfWDf yaml8kfc6hBWLBLq5KBpzgWTgvX3EU+qW7UAlbg7fCLXtxGZjCw94Be21RJ0FjgQ zANbm+/dbNvnaOKJEH+Nj/klNOMf+xfB6D0qZ4Nn5HqNaBUvUF1w+4JKXAo64Mrq uzK5w7ITPnusGLaciSOOikap8LSaddM3gL3W2Ni3FaPggSspTtQNXgkINdFySAPO OdVNLe1SnnAIJEI+9yaksH/FjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANWw4TS 5Ph6JnrDPhLcf5gVHN+qMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdq2UdWHayJMJkx9KVA95qBTCGwWURzxaUwuAfCy7XzBpdZW49OY1YtPeDJUk JbEd16Iv1i33dqf0+nWCM7vAONLpwOLYTcIvsgSHQAPLwk8i8aVJbJwTwFa2U6Ao v4oqyfSpCS972rqB5XUDHlJiXGjrZwuHLKw8viGyzIZPngq0DyBQOgsERm/2PXGv UA6A4YtcPD1WBuWE2l0Z5h56zOk8qxvmC3g5DX8bbYAkcDl2UCUaparDid3m5EyE vGkNZIZNyUQ5As3x/yIH65dtglaFjADmZ5DN+RKH2eYAQjO9Ec9HrwohRfNbNR4a YO2Pbzm2pQAV/RRADsQcoW2l3g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:52 2026 by rpki-client