$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: DQy28djnq/9jCuCQUT3yH1xKuri9uPXFhX/FKFjDeT4= Subject key identifier: E9:9E:77:FC:75:AE:CC:FB:B6:73:14:70:CD:75:D4:4B:77:C7:9C:22 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0CF7 Signing time: Wed 26 Aug 2026 18:22:04 +0000 Manifest this update: Wed 26 Aug 2026 18:22:03 +0000 Manifest next update: Wed 02 Sep 2026 18:22:03 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: BcAej2HXeTWvF39/0eup6NzI0C8qlFw7t0/qWE+sP3I=) 2: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=) 3: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Aug 26 18:22:03 2026 GMT Not After : Sep 2 18:22:03 2026 GMT Subject: CN=6a8f2ecc-8023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:64:cd:5d:cf:e2:cb:87:f7:7e:03:dc:5c: 99:9a:57:1a:83:57:6c:ae:aa:08:09:67:8e:2b:1d: e3:9c:f0:43:60:d2:73:fb:aa:66:b6:35:5b:a7:be: 02:54:12:0a:26:e4:3a:c2:0e:c0:a4:de:ed:40:29: 67:88:c0:98:8f:fe:61:bd:69:a3:2b:aa:41:4b:26: 46:7a:b6:ca:bb:2c:aa:9b:8f:9c:ce:29:83:11:f3: c2:db:48:31:bf:90:77:cf:eb:dc:5c:15:38:a2:61: d0:2b:48:2b:d1:04:d7:ec:ba:33:a0:f5:36:a7:15: 34:c2:cc:77:72:60:d4:d3:79:4f:23:f0:9d:b9:4c: 90:6d:9b:4f:d4:f7:5e:73:01:24:b8:4d:8a:4b:ee: f5:e9:a3:55:7d:86:dd:ac:42:e9:18:7a:6e:7a:a4: 69:1a:29:f5:d6:94:33:29:7f:d4:9b:22:a9:43:a3: 27:de:f0:9c:35:2c:8f:96:21:33:9a:e8:66:d8:2e: d8:31:fe:db:32:7f:0a:ab:d1:cb:80:fc:85:46:56: a2:35:1a:7a:2e:3a:7d:9a:e3:c5:8a:d8:cc:70:43: 17:5b:31:81:68:94:86:50:11:55:37:dd:f8:7c:52: 66:2d:88:e6:a8:95:a0:73:88:6e:84:dc:d1:73:98: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:77:FC:75:AE:CC:FB:B6:73:14:70:CD:75:D4:4B:77:C7:9C:22 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:18:3f:2d:46:7b:42:6b:5a:d7:57:4a:32:a9:78:74:ea:8e: 23:22:67:ed:7f:3b:9e:bf:79:d8:83:b6:4c:ad:e2:cc:31:8f: b0:a6:84:ad:da:4f:65:fe:93:e9:ff:39:30:02:88:39:4a:92: 0d:38:66:5f:fb:51:0a:d2:ed:cc:36:7c:7f:0a:30:a9:01:82: bf:0a:2e:61:ea:ca:55:7e:74:25:b9:72:7b:e9:d7:bc:fe:7e: 69:54:90:ea:e9:05:f8:e7:19:d2:84:96:cd:3a:fb:41:8b:91: 01:51:68:8b:e1:af:b1:3a:bc:fc:0a:46:14:f6:46:1d:0a:c9: d4:78:e8:d6:9e:7c:e3:4f:65:4d:6e:0c:af:20:c0:cb:b6:f6: 56:d8:ce:ed:80:a7:2b:54:77:1c:53:72:c5:6d:e4:f8:07:50: f5:74:18:46:14:f8:76:8b:04:95:c0:2b:26:36:00:ef:3a:9d: 70:ae:35:87:a7:44:cd:a1:77:32:6e:03:67:55:c3:ca:fc:0a: 13:86:25:b3:53:59:21:22:ed:07:cf:60:fc:2d:23:54:df:38: d6:f1:89:95:48:a4:9e:57:a3:01:a3:c4:a0:3b:0c:d1:31:d0: a3:98:ab:cc:f8:39:4e:d5:d1:f8:77:c8:eb:9f:58:e9:dc:4d: 74:f1:8e:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjYwODI2MTgyMjAzWhcNMjYwOTAyMTgyMjAzWjAYMRYwFAYD VQQDEw02YThmMmVjYy04MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTRkzV3P4suH934D3FyZmlcag1dsrqoICWeOKx3jnPBDYNJz+6pmtjVbp74C VBIKJuQ6wg7ApN7tQClniMCYj/5hvWmjK6pBSyZGerbKuyyqm4+czimDEfPC20gx v5B3z+vcXBU4omHQK0gr0QTX7LozoPU2pxU0wsx3cmDU03lPI/CduUyQbZtP1Pde cwEkuE2KS+716aNVfYbdrELpGHpueqRpGin11pQzKX/UmyKpQ6Mn3vCcNSyPliEz muhm2C7YMf7bMn8Kq9HLgPyFRlaiNRp6Ljp9muPFitjMcEMXWzGBaJSGUBFVN934 fFJmLYjmqJWgc4huhNzRc5hqYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmed/x1 rsz7tnMUcM111Et3x5wiMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPBg/LUZ7Qmta11dKMql4dOqOIyJn7X87nr952IO2TK3izDGPsKaErdpPZf6T 6f85MAKIOUqSDThmX/tRCtLtzDZ8fwowqQGCvwouYerKVX50Jblye+nXvP5+aVSQ 6ukF+OcZ0oSWzTr7QYuRAVFoi+GvsTq8/ApGFPZGHQrJ1Hjo1p58409lTW4MryDA y7b2VtjO7YCnK1R3HFNyxW3k+AdQ9XQYRhT4dosElcArJjYA7zqdcK41h6dEzaF3 Mm4DZ1XDyvwKE4Yls1NZISLtB89g/C0jVN841vGJlUiknlejAaPEoDsM0THQo5ir zPg5TtXR+HfI659Y6dxNdPGOuw== -----END CERTIFICATE-----Generated at Thu Aug 27 01:22:16 2026 by rpki-client