$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: +BqC1u8PFON2AZsjpBCi4pXVhqYg8zzVSeeBS+OeikU= Subject key identifier: B8:93:35:BC:0F:77:FE:7D:52:87:8B:61:BA:57:0A:D6:69:EB:BE:7D Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0DF4 Signing time: Mon 20 Jul 2026 19:27:14 +0000 Manifest this update: Mon 20 Jul 2026 19:27:14 +0000 Manifest next update: Mon 27 Jul 2026 19:27:14 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: C9CiSAk7XWh5LifDe+qi6xw5G6exPJJJ9Bii8zrvN+E=) 2: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=) 3: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: tr2lD7o9Jj2eezYb6KX+vn/JZs+QxwzBoXg4U7YfC4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: Jul 20 19:27:14 2026 GMT Not After : Jul 27 19:27:14 2026 GMT Subject: CN=6a5e7692-1685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:0c:d8:86:de:6c:ad:e1:63:2d:fc:a0:6b: c2:b5:f2:48:8d:45:64:07:6f:a7:b6:ac:b9:17:0d: cc:ac:27:b5:a5:1c:8a:e1:0c:c4:39:4f:95:a9:14: fb:fb:0d:76:db:b8:9c:32:a4:73:91:3e:ac:e6:56: 5b:f5:77:45:0f:34:6a:7a:07:5f:00:1e:59:e0:08: b3:95:47:af:43:56:e7:77:a8:2c:5d:a8:56:68:7f: a8:10:f8:c3:9c:3d:60:0b:39:60:37:0d:c3:08:7b: 09:f2:a7:a7:ad:c9:5d:8a:50:11:47:4f:03:c5:23: f9:95:6b:00:0c:fe:25:4d:13:43:40:6f:7d:3a:4f: 0a:8a:7f:e3:0b:bd:4c:9c:c4:54:c0:22:b0:30:96: 4f:02:af:fb:50:e6:fd:bc:40:2c:aa:70:37:4c:3c: 28:d5:e0:a5:6c:5f:aa:27:01:47:92:87:b6:30:93: 03:3a:04:dc:01:94:e0:62:4b:5f:c0:f0:15:c3:33: c9:c1:df:6a:7d:28:be:12:e4:5b:1f:d7:75:dd:cd: 11:f5:96:56:39:eb:15:62:97:0a:55:00:f7:37:f6: 38:4e:82:4b:3a:58:c4:ca:a6:ba:f7:46:65:ef:bd: ec:54:6e:3b:d1:e3:8e:16:67:1f:58:48:23:a1:f8: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:93:35:BC:0F:77:FE:7D:52:87:8B:61:BA:57:0A:D6:69:EB:BE:7D X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:28:27:20:23:40:f4:8c:7d:b1:3b:fa:9c:31:89:29:2d:d3: 92:cc:46:27:3a:7a:18:20:b0:1f:75:c8:0f:fa:11:b7:0a:6c: c4:a9:a4:ef:fa:57:f5:87:eb:bd:9e:7f:45:00:ac:a1:e2:3e: 36:30:06:e2:22:8f:ec:7d:7b:bc:b4:46:26:88:39:84:05:dc: 49:b6:70:c7:51:8f:0b:8b:ae:f2:e4:2a:49:72:bc:af:1d:82: 15:83:5a:54:ef:31:0a:f5:50:c3:92:f6:0a:65:15:2d:d9:6d: 0a:99:d5:61:81:ad:0b:ac:0b:2e:5d:74:1d:36:46:5f:44:33: 75:0b:f1:ba:14:01:4b:11:b4:99:e6:44:99:c2:74:8e:67:d6: 6a:6e:6f:fc:f8:9d:4b:59:06:18:a8:a9:67:f0:7d:87:a6:44: 08:2d:23:eb:59:7e:15:17:8b:22:8f:d2:f1:1e:a5:f4:fc:9d: 23:01:8d:51:b2:8b:4e:17:28:97:a9:81:e8:aa:0f:5e:12:6b: 30:fc:20:6f:56:7b:87:c9:22:99:59:66:e7:c2:7d:6f:e4:4e: 61:80:29:49:ae:28:e6:71:d3:ad:31:3e:df:6b:90:c8:f8:28: ab:3c:34:45:06:fe:25:21:82:28:21:02:ff:56:c3:e8:50:11: c9:d1:13:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjYwNzIwMTkyNzE0WhcNMjYwNzI3MTkyNzE0WjAYMRYwFAYD VQQDEw02YTVlNzY5Mi0xNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyEM2IbebK3hYy38oGvCtfJIjUVkB2+ntqy5Fw3MrCe1pRyK4QzEOU+VqRT7 +w1227icMqRzkT6s5lZb9XdFDzRqegdfAB5Z4AizlUevQ1bnd6gsXahWaH+oEPjD nD1gCzlgNw3DCHsJ8qenrcldilARR08DxSP5lWsADP4lTRNDQG99Ok8Kin/jC71M nMRUwCKwMJZPAq/7UOb9vEAsqnA3TDwo1eClbF+qJwFHkoe2MJMDOgTcAZTgYktf wPAVwzPJwd9qfSi+EuRbH9d13c0R9ZZWOesVYpcKVQD3N/Y4ToJLOljEyqa690Zl 773sVG470eOOFmcfWEgjofh3UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiTNbwP d/59UoeLYbpXCtZp6759MB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADCgnICNA9Ix9sTv6nDGJKS3TksxGJzp6GCCwH3XID/oRtwpsxKmk7/pX9Yfr vZ5/RQCsoeI+NjAG4iKP7H17vLRGJog5hAXcSbZwx1GPC4uu8uQqSXK8rx2CFYNa VO8xCvVQw5L2CmUVLdltCpnVYYGtC6wLLl10HTZGX0QzdQvxuhQBSxG0meZEmcJ0 jmfWam5v/PidS1kGGKipZ/B9h6ZECC0j61l+FReLIo/S8R6l9PydIwGNUbKLThco l6mB6KoPXhJrMPwgb1Z7h8kimVlm58J9b+ROYYApSa4o5nHTrTE+32uQyPgoqzw0 RQb+JSGCKCEC/1bD6FARydET3A== -----END CERTIFICATE-----Generated at Tue Jul 21 23:48:36 2026 by rpki-client