$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: YyZUOwDwLBAvQbG1E8AroYRrmgCmR73OPJOTlrQj1ZE= Subject key identifier: 0E:2D:FC:EF:7C:7E:58:35:23:71:87:44:AD:54:E3:59:B9:7A:79:2E Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: 020A Signing time: Wed 05 Aug 2026 04:10:32 +0000 Manifest this update: Wed 05 Aug 2026 04:10:31 +0000 Manifest next update: Wed 12 Aug 2026 04:10:31 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: FIZHn+c5t3axcDaPRbt01JmZNAJOkN12qZqc+NfwkHw=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 04:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: Aug 5 04:10:31 2026 GMT Not After : Aug 12 04:10:31 2026 GMT Subject: CN=6a72b7b8-43d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:f3:60:2c:0c:b9:3e:46:ce:2d:cb:b6:ba: 26:96:46:ff:d5:34:eb:e0:da:ee:aa:00:db:3c:4a: 81:44:ab:88:4d:bc:08:ee:07:14:4c:be:e4:57:f8: d8:e0:ad:1d:5a:74:1c:54:21:fd:4c:0c:c0:15:78: 13:a9:11:88:79:42:37:7c:0c:82:d4:f3:51:9b:42: 69:18:b8:f6:a5:eb:3a:e8:f0:80:05:bd:2c:e8:df: 4a:b2:2b:16:c4:58:4d:6e:d6:24:bf:35:6d:c7:fc: 6e:c7:da:c9:08:96:b8:89:de:40:57:60:6e:6c:ff: 2e:70:93:b8:60:24:8e:f5:b1:9d:31:ec:f0:af:73: 72:d6:85:84:4c:6d:e5:b4:00:4e:94:0d:f2:1f:df: 8c:91:f8:9e:42:e6:04:ab:d7:61:be:8f:60:bb:e8: c1:f6:2d:33:1a:1c:fb:41:fe:e3:69:42:f6:b2:ee: 9f:e4:a9:75:35:28:fe:ee:38:32:9a:e6:d5:b7:df: 0a:eb:dc:d4:f1:30:fe:74:65:ea:75:06:f3:6f:4c: 74:c2:17:db:55:a1:d5:3c:85:d7:4d:c1:34:80:90: 7b:1e:fb:d6:7b:3a:bf:88:2d:33:3f:75:d4:30:8a: a1:1e:10:cb:68:41:b3:6e:57:10:04:c5:53:08:82: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2D:FC:EF:7C:7E:58:35:23:71:87:44:AD:54:E3:59:B9:7A:79:2E X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:55:94:9d:a6:4e:66:39:bd:c4:0b:1a:62:28:93:64:06:1b: c6:2b:c0:4a:17:f7:89:65:fd:a1:fc:3f:5c:77:2f:7f:72:3d: 6d:15:8b:c8:99:bb:bf:2b:26:aa:26:62:13:d5:9b:e5:b6:3a: f3:59:b8:87:c3:2b:26:de:2c:3a:dd:1b:a5:7c:fe:37:73:7a: 62:0b:e4:38:d7:4b:17:6e:1c:0f:99:9b:07:4a:b5:89:6e:da: 21:8c:0d:4c:f5:17:cc:d8:26:fd:e0:14:63:76:2f:6e:38:13: ad:b9:c3:02:dc:5f:b3:29:fc:71:87:c6:ac:a4:e5:1a:e6:77: 20:0c:2b:19:ad:d7:92:ce:d5:0f:89:ba:71:63:be:c0:f8:69: df:3f:32:24:a2:0b:35:56:6a:d1:ab:50:18:7c:d4:f0:90:a5: a2:48:ed:6c:95:e3:48:e7:69:20:f4:a0:c2:a9:76:6c:c6:50: 9b:d9:bc:6e:a6:dd:a4:d4:f7:8e:a0:64:8c:e5:5f:09:17:30: 79:02:aa:23:06:20:69:1b:c6:39:ec:50:9a:22:93:8f:9f:96: da:7e:7b:d8:ef:bd:2e:b4:24:02:be:0f:a5:69:27:5c:40:47: bf:5b:30:69:2f:fd:6a:b4:12:6e:8c:0f:3f:6e:92:aa:45:a8: c5:e1:14:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE MUJDRTkzOUQwHhcNMjYwODA1MDQxMDMxWhcNMjYwODEyMDQxMDMxWjAYMRYwFAYD VQQDEw02YTcyYjdiOC00M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl7zYCwMuT5Gzi3Ltromlkb/1TTr4NruqgDbPEqBRKuITbwI7gcUTL7kV/jY 4K0dWnQcVCH9TAzAFXgTqRGIeUI3fAyC1PNRm0JpGLj2pes66PCABb0s6N9KsisW xFhNbtYkvzVtx/xux9rJCJa4id5AV2BubP8ucJO4YCSO9bGdMezwr3Ny1oWETG3l tABOlA3yH9+MkfieQuYEq9dhvo9gu+jB9i0zGhz7Qf7jaUL2su6f5Kl1NSj+7jgy mubVt98K69zU8TD+dGXqdQbzb0x0whfbVaHVPIXXTcE0gJB7HvvWezq/iC0zP3XU MIqhHhDLaEGzblcQBMVTCIIPfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4t/O98 flg1I3GHRK1U41m5enkuMB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2 bjAxSmZvT0hvNTNSdk9rNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE1WUnaZOZjm9xAsaYiiTZAYbxivAShf3iWX9ofw/XHcvf3I9bRWLyJm7vysm qiZiE9Wb5bY681m4h8MrJt4sOt0bpXz+N3N6YgvkONdLF24cD5mbB0q1iW7aIYwN TPUXzNgm/eAUY3YvbjgTrbnDAtxfsyn8cYfGrKTlGuZ3IAwrGa3Xks7VD4m6cWO+ wPhp3z8yJKILNVZq0atQGHzU8JClokjtbJXjSOdpIPSgwql2bMZQm9m8bqbdpNT3 jqBkjOVfCRcweQKqIwYgaRvGOexQmiKTj5+W2n572O+9LrQkAr4PpWknXEBHv1sw aS/9arQSbowPP26SqkWoxeEUsw== -----END CERTIFICATE-----Generated at Wed Aug 5 13:46:08 2026 by rpki-client