$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: zIWoiHuQGH4P+ymFWrhSRxO3flGTy3GpyGOvF5DiLxo= Subject key identifier: 10:9E:72:82:D8:07:0A:19:B7:DE:C9:0D:30:D8:89:07:91:F7:72:14 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 013A Signing time: Mon 31 Aug 2026 05:57:18 +0000 Manifest this update: Mon 31 Aug 2026 05:57:18 +0000 Manifest next update: Mon 07 Sep 2026 05:57:18 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: zqRVaA/FdfXorDTx/9NRRYZkUYBwPXmWVzAwrFwp9Sk=) 2: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: yNjcbXSQe954tG4iPQoh2HGC3/zMHGuxKNsySG8+1DI=) 3: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: XFH0Q1KpeOYZLCrrHNLmbgTNMLaKVPfV4xztcVnCyR8=) 4: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: Otxavzn9wqai7bz3j2wOAOhJHM7zPHSQjLLYM4IbP1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 05:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Aug 31 05:57:18 2026 GMT Not After : Sep 7 05:57:18 2026 GMT Subject: CN=6a9517be-4ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:1d:9a:c8:73:c4:98:5c:8f:98:02:6a:87: a2:6d:42:bd:38:88:52:5e:26:1c:36:76:91:11:ac: 81:00:23:1c:8f:f0:a0:6a:0e:4c:56:d3:e3:4b:ce: ea:33:f1:ca:01:52:11:f4:20:2e:e0:cc:43:65:c5: 63:ab:0d:89:a2:f3:53:4e:81:01:6d:1c:26:fe:86: 2e:72:9b:76:05:b2:d3:2a:b4:45:9b:6b:7f:b5:7e: dc:86:b1:8e:2f:99:94:94:8f:c0:d1:44:67:4c:30: d2:8d:88:d4:2f:04:ca:63:11:ab:67:51:24:2e:a1: a7:a1:80:fb:3d:ef:cb:40:03:e8:de:e1:eb:9c:4a: b3:b6:ba:9f:37:de:85:9a:7a:94:8a:df:df:3c:5d: 63:f0:09:d5:0e:f3:1a:de:90:d1:76:8c:76:8c:1e: 53:81:e2:64:af:74:41:24:3b:c6:ab:df:7b:05:55: 44:50:6a:a5:dd:77:9a:2a:36:55:da:1a:da:2f:93: da:35:05:26:e6:c3:73:2f:25:90:0d:73:1b:86:be: f6:29:42:48:29:7a:8f:10:23:a2:3b:33:e1:de:09: 97:33:24:fb:a5:05:72:f2:5e:91:dc:e7:eb:9a:b8: 8c:88:40:e9:1b:95:2d:98:57:eb:ff:0e:a7:63:f4: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9E:72:82:D8:07:0A:19:B7:DE:C9:0D:30:D8:89:07:91:F7:72:14 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:20:a6:af:20:99:3e:8f:17:3b:45:ff:b4:80:48:b7:13:0b: 5c:82:64:4f:15:0f:7b:d8:ef:77:84:ba:5c:ee:05:8f:95:91: a3:c0:0a:e7:89:75:e7:89:74:0f:7c:1f:01:bf:c5:eb:54:39: e9:e0:6e:64:d6:3c:e8:46:d3:04:b6:6d:7c:51:ab:d2:6c:8e: f0:cb:6b:61:ed:14:b4:a7:7a:28:8b:d7:1d:63:7a:f8:58:d9: 6d:d8:1e:59:a7:67:ce:67:f3:e2:e9:29:ed:fb:b1:09:82:3d: 0a:78:8d:ed:24:d0:5f:3b:7e:6f:87:12:b5:b8:ab:d3:6f:13: e8:56:09:09:68:52:b3:b2:e6:35:e8:0b:f5:b8:9b:c3:eb:ad: 27:f8:a0:c0:00:ee:98:f9:b9:06:ec:2e:db:63:ff:c8:3c:8d: 3b:73:88:91:13:45:6a:c0:d0:1f:c1:fc:d2:88:0d:ec:af:ac: d0:9f:8e:4a:1b:7a:14:af:1a:c0:86:d9:ed:13:c1:94:0c:2d: 83:65:66:7d:76:02:93:2c:67:58:1c:3c:1e:82:f2:9a:8c:6d: 67:2b:c8:17:2f:5a:73:9c:84:6e:66:e3:61:59:25:08:ff:04: 55:f9:b1:4a:f4:64:b6:63:20:b1:05:1a:70:e4:f2:62:17:8f: 17:db:e5:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjYwODMxMDU1NzE4WhcNMjYwOTA3MDU1NzE4WjAYMRYwFAYD VQQDEw02YTk1MTdiZS00ZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMMdmshzxJhcj5gCaoeibUK9OIhSXiYcNnaREayBACMcj/Cgag5MVtPjS87q M/HKAVIR9CAu4MxDZcVjqw2JovNTToEBbRwm/oYucpt2BbLTKrRFm2t/tX7chrGO L5mUlI/A0URnTDDSjYjULwTKYxGrZ1EkLqGnoYD7Pe/LQAPo3uHrnEqztrqfN96F mnqUit/fPF1j8AnVDvMa3pDRdox2jB5TgeJkr3RBJDvGq997BVVEUGql3XeaKjZV 2hraL5PaNQUm5sNzLyWQDXMbhr72KUJIKXqPECOiOzPh3gmXMyT7pQVy8l6R3Ofr mriMiEDpG5UtmFfr/w6nY/SSbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCecoLY BwoZt97JDTDYiQeR93IUMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATyCmryCZPo8XO0X/tIBItxMLXIJkTxUPe9jvd4S6XO4Fj5WRo8AK54l154l0 D3wfAb/F61Q56eBuZNY86EbTBLZtfFGr0myO8MtrYe0UtKd6KIvXHWN6+FjZbdge Wadnzmfz4ukp7fuxCYI9CniN7STQXzt+b4cStbir028T6FYJCWhSs7LmNegL9bib w+utJ/igwADumPm5Buwu22P/yDyNO3OIkRNFasDQH8H80ogN7K+s0J+OSht6FK8a wIbZ7RPBlAwtg2VmfXYCkyxnWBw8HoLymoxtZyvIFy9ac5yEbmbjYVklCP8EVfmx SvRktmMgsQUacOTyYhePF9vl3g== -----END CERTIFICATE-----Generated at Tue Sep 1 03:54:56 2026 by rpki-client