$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: mizfVvW+8AtuZM7FBkbStptnSzpzr1GNaOWNDWUc/YM= Subject key identifier: 6A:08:00:14:6E:D1:4A:A0:FF:5A:6D:0D:40:E4:16:96:1E:E9:FB:20 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 02B9 Signing time: Mon 21 Sep 2026 01:23:23 +0000 Manifest this update: Mon 21 Sep 2026 01:23:23 +0000 Manifest next update: Mon 28 Sep 2026 01:23:23 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: uvjAGRqZcYnBHSWpVOtPoKwUeHnCVkQCUMWC1k69960=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Sep 21 01:23:23 2026 GMT Not After : Sep 28 01:23:23 2026 GMT Subject: CN=6ab0870b-2c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:eb:a2:24:c8:e7:a3:db:f9:54:1e:a8:01: 8c:cd:75:36:7c:ee:3c:f5:75:33:87:83:72:96:f8: ec:82:3e:8b:9a:af:28:aa:07:91:ae:6b:5d:6f:96: fe:39:52:f4:f2:29:08:b1:bd:a8:13:8d:46:f2:c0: 5d:4f:76:f9:e6:89:c2:58:6f:e6:da:8b:36:b7:3e: 65:70:a3:37:39:b4:ed:87:0e:9c:65:8f:9b:16:3a: fb:4b:e8:c9:18:c5:aa:ff:39:c2:d7:75:b5:52:8b: e4:12:d3:2b:d6:f8:78:da:2d:69:05:5e:3e:02:6a: 20:ee:b1:be:00:ec:aa:52:74:fa:ad:d4:c4:5d:9b: 07:19:ec:2d:be:eb:b3:04:00:b1:38:cd:5e:65:8b: b2:68:09:18:43:1a:ee:90:75:90:60:2b:a0:c0:11: e5:f3:2c:2a:c4:24:31:f6:04:dd:37:57:d1:78:4c: 1a:38:f6:e2:ba:d7:ac:6e:07:d9:32:77:22:75:7e: 9a:b5:0d:09:d4:35:75:d0:5b:b9:59:8e:6d:01:0c: b2:a3:0c:35:dd:62:8b:40:d5:90:79:b9:41:91:e9: 66:93:88:ec:4c:74:09:d4:34:89:08:b7:b4:cb:05: 06:d8:51:e1:4b:ec:3a:18:18:53:5c:c0:09:58:9e: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:00:14:6E:D1:4A:A0:FF:5A:6D:0D:40:E4:16:96:1E:E9:FB:20 X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:70:65:03:07:61:2a:bf:51:f4:7c:d0:ce:46:04:54:10:9a: 27:e7:9c:38:4e:df:da:80:50:b4:0f:fe:b1:33:9f:25:91:db: c5:48:8e:25:68:3a:ee:06:e2:cc:cf:04:be:fe:d0:99:9f:af: 46:9f:1c:14:a5:d6:f9:20:0e:fd:63:de:9e:d1:70:88:bf:c1: 01:bd:64:a7:74:eb:70:1d:d0:2d:7b:ab:16:9d:20:d2:63:bf: 11:6b:b7:90:6f:49:81:e7:13:9e:55:17:e6:d5:5d:35:fa:e7: c1:eb:4f:20:4e:a7:01:d1:94:53:f7:d5:4f:bb:16:d3:f6:93: 50:18:09:1c:f5:ce:10:49:8d:d9:bb:ae:4f:b7:d4:a4:bc:eb: 67:ca:0f:48:19:7e:a5:6a:2e:c7:28:40:14:b9:a2:7a:df:95: cf:23:b2:04:e5:bf:cb:36:a0:83:70:16:5d:52:13:27:e5:ef: 50:db:1c:08:46:6d:29:51:30:04:2c:22:b7:2c:47:aa:38:b1: 47:67:c1:61:6e:d6:dd:e6:9b:26:6d:fd:be:53:b1:e8:1b:38: 77:64:e0:e9:44:1d:88:93:5a:76:2e:5a:5e:f9:ff:a4:cc:64: 91:af:6d:d4:72:61:e7:df:2a:2f:2f:16:35:4e:c7:7a:32:37: 63:c9:b3:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjYwOTIxMDEyMzIzWhcNMjYwOTI4MDEyMzIzWjAYMRYwFAYD VQQDEw02YWIwODcwYi0yYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwifroiTI56Pb+VQeqAGMzXU2fO489XUzh4Nylvjsgj6Lmq8oqgeRrmtdb5b+ OVL08ikIsb2oE41G8sBdT3b55onCWG/m2os2tz5lcKM3ObTthw6cZY+bFjr7S+jJ GMWq/znC13W1UovkEtMr1vh42i1pBV4+Amog7rG+AOyqUnT6rdTEXZsHGewtvuuz BACxOM1eZYuyaAkYQxrukHWQYCugwBHl8ywqxCQx9gTdN1fReEwaOPbiutesbgfZ MncidX6atQ0J1DV10Fu5WY5tAQyyoww13WKLQNWQeblBkelmk4jsTHQJ1DSJCLe0 ywUG2FHhS+w6GBhTXMAJWJ4D3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoIABRu 0Uqg/1ptDUDkFpYe6fsgMB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdHBlAwdhKr9R9HzQzkYEVBCaJ+ecOE7f2oBQtA/+sTOfJZHbxUiOJWg67gbi zM8Evv7QmZ+vRp8cFKXW+SAO/WPentFwiL/BAb1kp3TrcB3QLXurFp0g0mO/EWu3 kG9JgecTnlUX5tVdNfrnwetPIE6nAdGUU/fVT7sW0/aTUBgJHPXOEEmN2buuT7fU pLzrZ8oPSBl+pWouxyhAFLmiet+VzyOyBOW/yzagg3AWXVITJ+XvUNscCEZtKVEw BCwityxHqjixR2fBYW7W3eabJm39vlOx6Bs4d2Tg6UQdiJNadi5aXvn/pMxkka9t 1HJh598qLy8WNU7HejI3Y8mzNw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:40:18 2026 by rpki-client