$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json) Hash identifier: K7tI8vbzbeKrM/i3BPA2U+d5E7B/YdFzulWcHKGwUr0= Subject key identifier: D5:56:CB:CB:68:D6:1F:9B:D0:20:E1:0B:05:C1:99:9B:5D:DC:A7:82 Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 11D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft Manifest number: 11B3 Signing time: Tue 18 Aug 2026 17:22:23 +0000 Manifest this update: Tue 18 Aug 2026 17:22:23 +0000 Manifest next update: Tue 25 Aug 2026 17:22:23 +0000 Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: APgrGKFLjdF+INXixsqDGRbSKIreW1qDj1Insdp4K5U=) 2: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: EtRVC+Tnay/XwjjnfrzZ4VWnKxvjsSi9zbht2seIWhQ=) 3: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: tkQkh0SeDKmYlFagbGUi9uFru4fwo8KYtzlYsDdAl6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4561 (0x11d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Validity Not Before: Aug 18 17:22:23 2026 GMT Not After : Aug 25 17:22:23 2026 GMT Subject: CN=6a8494cf-b22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:41:1d:0c:6d:64:fa:e1:c7:5a:0a:f8:22: 8c:95:3d:25:16:d6:ec:17:57:89:41:b6:f7:99:02: 99:27:ee:cd:8b:e2:75:a6:17:44:95:67:94:6d:38: f8:f1:2b:f0:bc:cd:48:83:49:82:e2:87:da:fb:9b: c9:2b:78:6e:23:08:22:d1:d0:c6:fb:76:98:53:af: 86:a2:34:c7:92:91:5c:cd:b2:67:d1:2d:59:24:ac: e0:fa:6e:4a:4a:cb:76:fd:1c:60:4c:cf:a6:3f:22: 3e:14:57:3d:8e:ee:c0:dd:50:53:be:f2:66:d0:d0: 1e:42:5e:99:8a:0c:8e:da:ef:70:92:6f:53:da:12: 14:2a:ff:07:ec:77:f0:a5:7f:09:64:09:68:e2:22: fb:ae:9a:bf:d8:d9:7f:41:34:9e:4e:a6:3a:7b:c5: a4:73:7f:a5:d3:79:aa:20:57:06:ad:c2:92:8f:a8: 03:32:91:2f:ba:de:7e:76:9a:ad:50:47:e5:d0:ff: 81:54:62:92:be:6f:58:df:04:bd:5b:b3:ba:98:e4: f5:99:75:ef:1b:a5:b1:0b:01:4c:0f:ad:aa:07:a5: 31:dd:d5:82:b9:d0:6f:7a:66:c7:47:d7:dd:dd:c9: 9d:d6:4d:df:73:63:32:ea:55:ae:a7:07:c4:9c:89: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:56:CB:CB:68:D6:1F:9B:D0:20:E1:0B:05:C1:99:9B:5D:DC:A7:82 X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a2:b8:ea:69:81:c7:d1:b2:6e:20:d5:2d:00:6e:5f:1f:8f: 0d:1e:91:ec:2b:2a:e4:7e:8d:45:45:df:a5:9e:2b:52:0f:9d: 21:8b:6f:7a:2b:85:cf:26:cc:67:54:bb:10:b1:4b:df:e5:fe: 36:4a:19:71:13:97:33:96:96:6f:1a:63:13:3f:47:69:03:23: 23:65:d3:11:9a:a4:ee:58:1f:e1:7d:7d:ad:18:8e:4b:f5:ce: fd:4f:bc:8b:66:b1:6e:75:53:f4:9e:73:54:a4:65:c5:98:91: 13:54:6d:54:60:ef:b4:a2:6d:a1:a2:ea:cc:5d:2d:fa:39:b8: 86:3f:fe:ab:c2:57:44:7f:22:a2:14:e8:87:7a:ec:7e:2c:8f: 8d:36:cb:58:55:ee:db:0a:c9:a9:19:22:fb:83:e5:5a:1c:88: 40:7b:53:de:f1:cd:29:b1:31:03:f6:8e:c0:87:25:88:77:89: c7:f6:97:89:7f:46:43:bf:3e:e6:4e:40:bb:e8:89:9c:da:e3: f2:39:9f:3e:b4:41:6d:19:e3:ba:f3:b9:fd:73:9b:90:ce:38: f5:92:f7:27:41:af:a6:39:c7:f9:f5:bf:c2:dd:9f:e6:1b:92: 0d:73:60:e8:ee:5c:ee:56:52:2d:1f:7a:fc:b7:ab:0e:74:1a: c7:4a:6e:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjYwODE4MTcyMjIzWhcNMjYwODI1MTcyMjIzWjAYMRYwFAYD VQQDEw02YTg0OTRjZi1iMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsidBHQxtZPrhx1oK+CKMlT0lFtbsF1eJQbb3mQKZJ+7Ni+J1phdElWeUbTj4 8SvwvM1Ig0mC4ofa+5vJK3huIwgi0dDG+3aYU6+GojTHkpFczbJn0S1ZJKzg+m5K Sst2/RxgTM+mPyI+FFc9ju7A3VBTvvJm0NAeQl6ZigyO2u9wkm9T2hIUKv8H7Hfw pX8JZAlo4iL7rpq/2Nl/QTSeTqY6e8Wkc3+l03mqIFcGrcKSj6gDMpEvut5+dpqt UEfl0P+BVGKSvm9Y3wS9W7O6mOT1mXXvG6WxCwFMD62qB6Ux3dWCudBvembHR9fd 3cmd1k3fc2My6lWupwfEnInrYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVWy8to 1h+b0CDhCwXBmZtd3KeCMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQzMS82NUVGMjk2QTIzMTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVw VmxZQ01lZmdNWDVweThiQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcqK46mmBx9GybiDVLQBuXx+PDR6R7Csq5H6NRUXfpZ4rUg+dIYtveiuFzybM Z1S7ELFL3+X+NkoZcROXM5aWbxpjEz9HaQMjI2XTEZqk7lgf4X19rRiOS/XO/U+8 i2axbnVT9J5zVKRlxZiRE1RtVGDvtKJtoaLqzF0t+jm4hj/+q8JXRH8iohToh3rs fiyPjTbLWFXu2wrJqRki+4PlWhyIQHtT3vHNKbExA/aOwIcliHeJx/aXiX9GQ78+ 5k5Au+iJnNrj8jmfPrRBbRnjuvO5/XObkM449ZL3J0GvpjnH+fW/wt2f5huSDXNg 6O5c7lZSLR96/LerDnQax0puXg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:52:53 2026 by rpki-client