$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: drNWEXvQwYp2dfM+3UjCPr6SoyAk9WMAWR5J7pS9wB4= Subject key identifier: B7:67:25:E3:CE:C9:6E:F1:FB:25:B9:03:70:C0:7F:29:92:6D:18:52 Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 0204 Signing time: Thu 27 Aug 2026 02:46:35 +0000 Manifest this update: Thu 27 Aug 2026 02:46:34 +0000 Manifest next update: Thu 03 Sep 2026 02:46:34 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: 3XrxZ8pVHBMZ9kYxJvbjlBvDg/GPr1BoSII1kj2MatY=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: MD6k5wA0AqG/dEECYzynxqcMbFFUqeKVXvzHIx4QFZQ=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: u48zpmX4MX32BsS3SWmiT1sLqFE6P1rFb2rRJj5ZiBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 02:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Aug 27 02:46:34 2026 GMT Not After : Sep 3 02:46:34 2026 GMT Subject: CN=6a8fa50b-cc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:fe:de:76:08:54:a3:05:54:4c:66:1a:23: 57:ec:8e:5f:98:cc:48:40:76:9e:48:03:8d:3b:e0: 30:a4:c9:4a:06:e3:c6:50:0d:49:7c:42:f4:f3:1c: 44:cf:4d:c5:4c:df:13:df:d4:a3:5d:a3:17:fc:22: 0e:97:11:79:90:5c:d2:ea:77:02:50:cd:79:6b:e0: 34:1f:cb:b6:ae:7a:dd:a0:04:c1:43:35:15:4a:41: 42:0b:06:2c:bf:15:30:d9:64:64:87:29:74:59:5e: 9d:b5:33:f9:fa:58:60:6f:de:35:67:d0:9f:b7:23: 3b:7d:f2:7e:63:db:54:97:d0:2c:1d:1e:2b:2e:17: 9a:01:05:53:7f:06:4c:aa:78:33:2a:b5:38:9d:b0: b2:cd:8a:d3:fe:17:ed:d4:e2:7e:96:d8:f8:79:a9: 7d:65:08:73:86:04:09:18:f7:09:b3:e1:88:d4:82: 94:88:30:fe:4d:f8:7b:fb:a5:2a:e0:ad:ba:3a:8a: b2:4b:fa:96:00:a6:c5:7d:2b:55:99:b6:da:aa:37: 04:4c:a4:d5:c1:08:23:36:40:b2:a6:30:87:65:61: 72:34:ec:ce:55:01:19:ad:73:5e:b7:6b:53:a9:f6: 77:9e:ab:7a:d4:2a:85:13:23:b2:42:19:99:a5:23: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:67:25:E3:CE:C9:6E:F1:FB:25:B9:03:70:C0:7F:29:92:6D:18:52 X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:cf:f9:1b:3e:17:ca:93:38:a2:ef:b9:d3:6d:51:17:e4:b2: 58:18:fa:75:25:25:1f:e7:e9:be:00:1e:c2:71:58:33:4b:24: 64:b4:28:ce:4f:41:c1:52:ad:89:23:d4:e4:6d:4c:72:71:67: fb:81:c8:70:59:a0:e8:a8:cf:f6:46:6b:61:bf:ac:1e:f1:44: 82:8f:ba:96:05:fe:40:9a:36:d4:a2:09:3b:f6:03:0c:a1:1f: eb:ac:a0:19:9c:da:d0:ed:88:2c:64:e9:39:ae:fc:ee:ce:28: 30:28:4f:7e:98:a9:77:07:46:7d:7f:3d:86:dd:3a:9e:0e:73: 51:79:56:6d:eb:b2:55:17:f7:59:27:38:0c:df:c7:dd:e1:29: 73:7c:af:71:72:84:9f:d7:b2:c9:68:12:3f:ec:aa:7f:b5:dc: 36:8b:cf:df:4c:27:8d:39:e7:53:ab:49:88:3f:71:69:13:1e: 25:ca:b6:12:12:a6:9c:6b:a0:3a:29:a9:31:4a:67:d4:7c:93: 92:78:fa:48:0a:aa:62:a1:4c:af:68:b0:91:86:a6:fc:d0:c5: a6:c0:6d:12:e3:57:eb:45:87:13:e6:dc:ae:da:c9:2b:76:98: cf:2e:d8:31:08:26:e3:7b:17:f9:a0:ff:ab:4c:25:86:c9:7a: d0:a9:63:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjYwODI3MDI0NjM0WhcNMjYwOTAzMDI0NjM0WjAYMRYwFAYD VQQDEw02YThmYTUwYi1jYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4H+3nYIVKMFVExmGiNX7I5fmMxIQHaeSAONO+AwpMlKBuPGUA1JfEL08xxE z03FTN8T39SjXaMX/CIOlxF5kFzS6ncCUM15a+A0H8u2rnrdoATBQzUVSkFCCwYs vxUw2WRkhyl0WV6dtTP5+lhgb941Z9CftyM7ffJ+Y9tUl9AsHR4rLheaAQVTfwZM qngzKrU4nbCyzYrT/hft1OJ+ltj4eal9ZQhzhgQJGPcJs+GI1IKUiDD+Tfh7+6Uq 4K26OoqyS/qWAKbFfStVmbbaqjcETKTVwQgjNkCypjCHZWFyNOzOVQEZrXNet2tT qfZ3nqt61CqFEyOyQhmZpSMmIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdnJePO yW7x+yW5A3DAfymSbRhSMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtM/5Gz4XypM4ou+5021RF+SyWBj6dSUlH+fpvgAewnFYM0skZLQozk9BwVKt iSPU5G1McnFn+4HIcFmg6KjP9kZrYb+sHvFEgo+6lgX+QJo21KIJO/YDDKEf66yg GZza0O2ILGTpOa787s4oMChPfpipdwdGfX89ht06ng5zUXlWbeuyVRf3WSc4DN/H 3eEpc3yvcXKEn9eyyWgSP+yqf7XcNovP30wnjTnnU6tJiD9xaRMeJcq2EhKmnGug OimpMUpn1HyTknj6SAqqYqFMr2iwkYam/NDFpsBtEuNX60WHE+bcrtrJK3aYzy7Y MQgm43sX+aD/q0wlhsl60Klj9g== -----END CERTIFICATE-----Generated at Thu Aug 27 08:48:22 2026 by rpki-client