$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: ajRqvjE56vLic1lTmeUrnP95kUnM14dOSKDN/wWMsxI= Subject key identifier: 0B:AD:DE:F9:1B:02:D7:00:64:9E:11:50:0A:43:29:B0:E4:C1:D8:91 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 02A1 Signing time: Wed 05 Aug 2026 02:33:26 +0000 Manifest this update: Wed 05 Aug 2026 02:33:26 +0000 Manifest next update: Wed 12 Aug 2026 02:33:26 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: ASVLhRfUvXKoXln0N6NYzmKCJr/ePHCv8Jd05ezcxNI=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 02:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Aug 5 02:33:26 2026 GMT Not After : Aug 12 02:33:26 2026 GMT Subject: CN=6a72a0f6-f2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:8a:3e:22:fb:e1:64:50:54:ad:04:88:e6: 0f:2c:ad:6b:5e:11:83:43:d1:f8:2b:b5:18:29:09: 0c:51:4d:c1:a0:4f:63:40:c9:62:fd:db:e9:d3:52: 65:68:99:5e:e1:e0:a4:47:ea:3b:02:e4:53:29:71: c6:2c:f9:fb:77:96:15:30:40:68:55:6b:98:d0:d6: 31:2e:ea:a7:a0:e0:36:3c:86:3a:f3:8b:3a:0a:08: 3a:73:07:7c:14:53:7a:b4:c5:5f:73:e5:f1:b1:00: 84:b9:be:9e:05:5c:7c:56:6d:17:5d:11:58:5b:66: f5:e5:3d:42:43:1c:76:49:a7:ed:83:a1:52:d1:11: 10:32:d6:8a:26:22:eb:7b:03:e5:77:b3:2d:31:c8: e2:e4:68:74:fb:19:3e:ca:f3:f0:fa:75:84:12:91: e4:d3:9b:e3:7d:1d:22:b4:08:48:2a:7f:a2:e9:80: ef:0c:39:25:cd:19:d7:37:62:39:c9:59:ae:6f:20: 02:e1:aa:7d:3e:72:9c:ba:c3:b9:29:be:9d:13:95: 86:ea:31:11:20:7a:e2:52:b0:26:e1:85:fd:ed:b8: 14:db:bb:b1:63:36:62:b8:3b:96:21:52:dd:2a:bc: 49:cd:02:1f:40:80:42:1c:12:5f:9a:f7:b4:ff:43: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AD:DE:F9:1B:02:D7:00:64:9E:11:50:0A:43:29:B0:E4:C1:D8:91 X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e1:1d:3e:1a:b3:5f:18:7f:ad:ea:84:ba:09:27:a6:5c:05: 8d:b9:ba:45:16:a0:3e:02:bb:0d:18:15:3f:62:a9:60:92:8e: 3d:29:62:2e:38:b1:ef:f6:c3:62:b2:41:5e:3a:71:aa:8c:b5: 9a:b9:f7:92:5e:97:a6:b8:d9:b9:ea:71:b8:a3:71:32:29:7a: cd:d9:bc:a6:a2:7b:2f:79:2f:58:cc:60:b2:f2:de:86:6c:49: b8:d8:11:ba:56:b7:04:b0:be:f7:b3:7e:26:78:05:5d:bc:79: 44:cb:b1:18:3f:bc:1a:4c:9c:dc:7d:bf:ba:91:66:22:80:af: 55:5d:35:38:2b:c5:f2:0d:98:92:b9:e9:2c:40:62:82:8e:69: 06:8b:9f:0e:a1:e5:5d:2e:fb:83:91:b3:5b:96:de:7f:70:a5: 66:ed:93:b2:1b:68:42:45:4e:57:72:d4:a4:2f:51:14:b2:b0: 83:05:a8:26:a2:2e:8f:81:3f:40:4b:b4:a7:09:a8:b6:68:ff: eb:d9:32:a3:e1:c3:02:c9:2b:00:46:96:f6:d0:d7:87:f5:aa: da:9e:c3:9b:7c:fa:35:d0:6a:2e:c2:5b:5f:2a:90:7a:3d:a0: 55:02:2b:09:dd:1f:0a:8c:97:c0:ec:87:89:ef:47:eb:99:f7: 4a:88:41:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjYwODA1MDIzMzI2WhcNMjYwODEyMDIzMzI2WjAYMRYwFAYD VQQDEw02YTcyYTBmNi1mMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuaKPiL74WRQVK0EiOYPLK1rXhGDQ9H4K7UYKQkMUU3BoE9jQMli/dvp01Jl aJle4eCkR+o7AuRTKXHGLPn7d5YVMEBoVWuY0NYxLuqnoOA2PIY684s6Cgg6cwd8 FFN6tMVfc+XxsQCEub6eBVx8Vm0XXRFYW2b15T1CQxx2Saftg6FS0REQMtaKJiLr ewPld7MtMcji5Gh0+xk+yvPw+nWEEpHk05vjfR0itAhIKn+i6YDvDDklzRnXN2I5 yVmubyAC4ap9PnKcusO5Kb6dE5WG6jERIHriUrAm4YX97bgU27uxYzZiuDuWIVLd KrxJzQIfQIBCHBJfmve0/0MvRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAut3vkb AtcAZJ4RUApDKbDkwdiRMB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkeEdPhqzXxh/reqEugknplwFjbm6RRagPgK7DRgVP2KpYJKOPSliLjix7/bD YrJBXjpxqoy1mrn3kl6XprjZuepxuKNxMil6zdm8pqJ7L3kvWMxgsvLehmxJuNgR ula3BLC+97N+JngFXbx5RMuxGD+8Gkyc3H2/upFmIoCvVV01OCvF8g2YkrnpLEBi go5pBoufDqHlXS77g5GzW5bef3ClZu2TshtoQkVOV3LUpC9RFLKwgwWoJqIuj4E/ QEu0pwmotmj/69kyo+HDAskrAEaW9tDXh/Wq2p7Dm3z6NdBqLsJbXyqQej2gVQIr Cd0fCoyXwOyHie9H65n3SohBqA== -----END CERTIFICATE-----Generated at Wed Aug 5 22:14:17 2026 by rpki-client