$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft File: y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json) Hash identifier: kz69EPcMpxCsjnyD3Gs5Je9qDxgHhgT4sIiOOdj7Swk= Subject key identifier: E3:B7:70:12:4E:1D:DB:B6:E8:18:8D:78:29:57:86:AC:5E:25:4A:FB Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Certificate serial: 1009 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft Manifest number: 0FF8 Signing time: Tue 28 Jul 2026 17:35:03 +0000 Manifest this update: Tue 28 Jul 2026 17:35:02 +0000 Manifest next update: Tue 04 Aug 2026 17:35:02 +0000 Files and hashes: 1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: bY5pm4pG230z5MBou6KLpwVZ0I/a6g8K6D8EqrZRYl8=) 2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: RJ14Wr4LV/wXhdMBKMrnSZc5mLGEgm5MX8wuJCoDPHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4105 (0x1009) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5C25, serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Validity Not Before: Jul 28 17:35:02 2026 GMT Not After : Aug 4 17:35:02 2026 GMT Subject: CN=6a68e847-5d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:01:0e:60:47:73:4a:e6:00:31:49:e3:1e: 1f:c3:eb:04:59:0e:88:af:0c:ab:81:fe:26:11:a8: 97:e8:ee:f3:e7:6b:d2:e9:eb:f4:04:ff:1f:a0:36: 0a:8d:cf:5a:cd:4f:68:9e:a5:87:c3:7f:e4:11:3a: 50:4e:07:f6:c7:e9:52:0c:c0:c5:ae:d1:2d:84:7f: f5:8f:ce:a0:68:a3:20:48:a9:a6:c1:e7:36:74:0f: a6:18:3f:13:ed:4e:ad:15:c3:1d:32:f9:e5:10:99: c3:da:13:30:ca:07:ab:6d:f7:d8:b2:8a:bb:74:02: d4:95:0f:ae:7e:68:4a:90:93:e6:44:36:e9:6b:00: 06:70:61:f5:17:37:92:60:ca:44:0b:77:e8:9c:40: 2a:73:33:bb:b0:cf:5b:90:e4:a1:1c:ea:d5:86:7a: 05:82:9c:05:c5:47:55:b3:96:bb:b5:93:35:52:44: 56:02:34:44:e2:17:dc:e1:34:44:98:89:6e:42:32: d4:39:16:17:4c:bb:0c:3a:4a:07:6d:2b:9c:1e:f2: d8:a0:33:0f:3c:5b:8b:da:9e:1a:9d:52:28:66:07: f9:f1:be:7c:86:c6:df:e6:3c:9f:ff:2d:7b:62:49: c4:ec:56:97:06:b5:9e:57:05:af:da:b4:4a:5a:f7: 16:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B7:70:12:4E:1D:DB:B6:E8:18:8D:78:29:57:86:AC:5E:25:4A:FB X509v3 Authority Key Identifier: keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:57:0e:9c:23:cd:85:9b:c7:3d:dd:fc:b2:2e:c7:87:a9:7f: c4:8c:99:b4:ab:a1:e6:d7:be:36:f9:43:d7:86:a1:d4:50:5e: cc:15:d3:e6:42:7f:c3:ff:ec:fd:ae:39:c4:cf:6b:c0:98:07: 6c:65:71:89:d1:72:d6:8c:53:5a:4d:e0:ed:6f:e0:b0:ef:21: b9:57:de:5b:bd:45:64:37:f9:89:f5:32:2a:4a:9c:84:0d:7f: 84:a6:dd:d2:c9:c2:d3:fc:bf:e3:e6:41:65:ec:ae:f3:b6:b7: f5:e6:fb:d2:b4:df:14:18:2e:dd:49:b3:20:d6:d0:34:0e:bc: 3c:a5:66:ff:48:05:ec:15:03:6e:ee:28:e5:21:04:52:ce:21: 56:fc:48:04:ba:9e:99:d3:4b:4c:5a:1f:d6:6e:b7:c8:dd:00: 96:ac:61:e1:5e:5d:26:02:d1:96:a3:c8:ee:aa:a8:f0:de:67: 55:81:6f:af:7d:db:1b:d6:eb:7e:ce:f5:94:66:6c:37:f1:49: f0:52:7d:12:cf:d9:e9:7e:6d:42:af:79:20:be:43:a8:71:c0: 6b:65:bb:58:e7:69:1c:f3:36:bf:8d:02:27:51:d5:b8:f6:8f: a8:a0:cc:08:b4:18:6d:c7:2b:12:c5:66:90:34:0e:25:d4:20: 16:76:4b:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVDMjUxMTAvBgNVBAUTKENCRjJBOURBODhBQzA4RjhENTEwNkRFQ0JENzJENkZB MDlDODE4RTkwHhcNMjYwNzI4MTczNTAyWhcNMjYwODA0MTczNTAyWjAYMRYwFAYD VQQDEw02YTY4ZTg0Ny01ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVoBDmBHc0rmADFJ4x4fw+sEWQ6Irwyrgf4mEaiX6O7z52vS6ev0BP8foDYK jc9azU9onqWHw3/kETpQTgf2x+lSDMDFrtEthH/1j86gaKMgSKmmwec2dA+mGD8T 7U6tFcMdMvnlEJnD2hMwygerbffYsoq7dALUlQ+ufmhKkJPmRDbpawAGcGH1FzeS YMpEC3fonEAqczO7sM9bkOShHOrVhnoFgpwFxUdVs5a7tZM1UkRWAjRE4hfc4TRE mIluQjLUORYXTLsMOkoHbSucHvLYoDMPPFuL2p4anVIoZgf58b58hsbf5jyf/y17 YknE7FaXBrWeVwWv2rRKWvcWRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOO3cBJO Hdu26BiNeClXhqxeJUr7MB8GA1UdIwQYMBaAFMvyqdqIrAj41RBt7L1y1voJyBjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUMyNS82ODdBMTBBNjc2 NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQalZFRzNzdlhMVy1nbklH T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lfS3Ayb2lzQ1BqVkVHM3N2WExXLWduSUdPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUMyNS82ODdBMTBBNjc2NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQ alZFRzNzdlhMVy1nbklHT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANFcOnCPNhZvHPd38si7Hh6l/xIyZtKuh5te+NvlD14ah1FBezBXT5kJ/w//s /a45xM9rwJgHbGVxidFy1oxTWk3g7W/gsO8huVfeW71FZDf5ifUyKkqchA1/hKbd 0snC0/y/4+ZBZeyu87a39eb70rTfFBgu3UmzINbQNA68PKVm/0gF7BUDbu4o5SEE Us4hVvxIBLqemdNLTFof1m63yN0Alqxh4V5dJgLRlqPI7qqo8N5nVYFvr33bG9br fs71lGZsN/FJ8FJ9Es/Z6X5tQq95IL5DqHHAa2W7WOdpHPM2v40CJ1HVuPaPqKDM CLQYbccrEsVmkDQOJdQgFnZLsg== -----END CERTIFICATE-----Generated at Wed Jul 29 12:54:24 2026 by rpki-client