$ rpki-client -vvvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: D0SCuI1nfmU+syAZnxuVg+gAw29CT09WGflhaoFdguk= Subject key identifier: 3E:10:99:3D:13:A4:7C:95:2A:B0:98:80:3A:CD:51:1D:5A:C5:9D:6A Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 0857 Signing time: Thu 10 Sep 2026 20:57:39 +0000 Manifest this update: Thu 10 Sep 2026 20:57:39 +0000 Manifest next update: Thu 17 Sep 2026 20:57:39 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: BPb8GbovPvN5otiw7mQBvVYrTZkS2Lx1s4wDudfkjls=) 2: D44CB1088D9511F18884790F3F11F970.roa (hash: wV1zl2AYz6koE/d18QPJJFKohfdA8vraKL1i7qfQDbc=) 3: 7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa (hash: y02tkPqWkRUuFzYRyDSp8BRV329jb14C5pvIrtHdumk=) 4: A08D36808D9511F18CE7BA083F11F970.roa (hash: y0Dvh0/VOEW6Vmpl7IJY53LBbE9h/rKg1gCLV+jDFR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Sep 10 20:57:39 2026 GMT Not After : Sep 17 20:57:39 2026 GMT Subject: CN=6aa319c3-818a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:d6:6b:25:bd:cb:ba:5c:92:e1:6b:0f:c2: d0:84:63:49:42:07:ad:a6:98:cc:a7:cc:8a:d6:5a: 0d:1c:03:79:63:13:e6:67:fa:ce:9e:c2:fe:45:a3: 3c:2b:a0:45:9c:47:35:16:34:f4:d1:e1:17:f7:c7: b5:dd:d9:b9:c0:5b:03:fe:4c:64:a5:d8:45:7e:d2: 6d:47:91:34:65:fe:f6:f4:eb:a9:30:cc:ab:c6:61: 46:e1:f2:73:36:fa:28:e8:e3:9a:18:6f:ac:24:91: 45:03:aa:92:aa:40:e8:35:52:f0:34:24:02:0f:6b: 4a:83:2e:dc:bf:bf:3c:13:47:49:f0:e2:75:f7:d0: 56:ac:bc:fa:83:d2:21:7c:11:87:94:05:1b:e9:84: da:b7:ee:a9:f9:68:25:56:e6:0e:49:66:a3:c2:e7: 82:ad:3c:6a:e6:65:32:36:36:53:d2:85:b5:2a:eb: da:26:42:c7:cf:4e:ce:27:20:54:0b:e8:1f:c6:b4: 2a:2e:44:70:6b:e1:f3:12:cb:5c:bd:87:65:85:00: a5:ec:82:7e:13:99:ac:14:6b:0e:45:82:f6:14:af: 89:e7:ad:09:fb:61:0c:67:b7:d8:f5:b8:71:bc:13: 6b:0a:21:aa:8b:d6:90:da:ff:97:1f:9f:f1:98:a0: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:99:3D:13:A4:7C:95:2A:B0:98:80:3A:CD:51:1D:5A:C5:9D:6A X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6b:13:1a:64:46:6e:57:b6:48:09:76:01:8d:98:ca:39:7d: 81:92:7a:2d:fa:40:fb:3b:9e:d1:82:9a:87:e0:ca:a4:17:b8: 3d:8f:ea:f7:69:ab:3a:50:fb:4c:ff:9e:6a:05:cf:c2:bd:37: 1c:22:32:79:33:7d:3b:fc:ff:73:8a:df:b2:12:0e:0b:25:ee: 63:37:c2:62:59:5b:76:1d:44:f7:23:b9:e9:6d:1e:5d:64:40: 48:cb:3f:f3:8e:c8:54:88:5b:38:23:a8:b2:d3:50:16:d4:e3: 58:04:83:5b:df:3b:ca:9b:d6:fb:f5:ed:5b:4a:ce:f7:ba:ff: de:81:c4:7d:d5:fe:6d:5e:96:7b:9a:e3:24:ae:67:b1:7e:4d: 0e:c0:81:e8:c4:95:07:c0:73:a3:27:d5:66:a0:11:2b:8c:42: 15:26:6b:34:36:19:84:85:26:18:f3:29:c8:7c:84:76:df:5f: b2:2d:04:9b:3c:c0:6d:8a:bd:e2:da:59:33:73:55:9d:84:f0: 6e:04:79:18:ff:cc:31:7a:f9:0a:4b:3e:0c:82:3b:11:55:9d: 1a:14:85:09:af:16:79:dc:14:02:11:a9:d9:1c:c1:56:a9:f7: 1e:2a:22:85:94:e4:63:33:42:ac:2e:68:1e:66:10:b4:18:58: 02:d4:d0:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjYwOTEwMjA1NzM5WhcNMjYwOTE3MjA1NzM5WjAYMRYwFAYD VQQDEw02YWEzMTljMy04MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzHWayW9y7pckuFrD8LQhGNJQgetppjMp8yK1loNHAN5YxPmZ/rOnsL+RaM8 K6BFnEc1FjT00eEX98e13dm5wFsD/kxkpdhFftJtR5E0Zf729OupMMyrxmFG4fJz Nvoo6OOaGG+sJJFFA6qSqkDoNVLwNCQCD2tKgy7cv788E0dJ8OJ199BWrLz6g9Ih fBGHlAUb6YTat+6p+WglVuYOSWajwueCrTxq5mUyNjZT0oW1KuvaJkLHz07OJyBU C+gfxrQqLkRwa+HzEstcvYdlhQCl7IJ+E5msFGsORYL2FK+J560J+2EMZ7fY9bhx vBNrCiGqi9aQ2v+XH5/xmKDpzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4QmT0T pHyVKrCYgDrNUR1axZ1qMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFmsTGmRGble2SAl2AY2Yyjl9gZJ6LfpA+zue0YKah+DKpBe4PY/q92mrOlD7 TP+eagXPwr03HCIyeTN9O/z/c4rfshIOCyXuYzfCYllbdh1E9yO56W0eXWRASMs/ 847IVIhbOCOostNQFtTjWASDW987ypvW+/XtW0rO97r/3oHEfdX+bV6We5rjJK5n sX5NDsCB6MSVB8BzoyfVZqARK4xCFSZrNDYZhIUmGPMpyHyEdt9fsi0EmzzAbYq9 4tpZM3NVnYTwbgR5GP/MMXr5Cks+DII7EVWdGhSFCa8WedwUAhGp2RzBVqn3Hioi hZTkYzNCrC5oHmYQtBhYAtTQRw== -----END CERTIFICATE-----Generated at Fri Sep 11 13:24:44 2026 by rpki-client