$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: aRDVa+Akdry7tXIfYS0h9CxCHWsmYFOjdnPpjqvcpUU= Subject key identifier: 3D:85:4B:6A:76:18:3F:0E:CF:50:74:13:31:F8:E1:DA:04:AF:03:AA Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 0152 Signing time: Sat 17 Oct 2026 05:57:26 +0000 Manifest this update: Sat 17 Oct 2026 05:57:26 +0000 Manifest next update: Sat 24 Oct 2026 05:57:26 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: RGQTAMjljWdq1MzpUvht2IWJ8JQEV6MOnQAieBHN6iw=) 2: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: yNjcbXSQe954tG4iPQoh2HGC3/zMHGuxKNsySG8+1DI=) 3: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: Otxavzn9wqai7bz3j2wOAOhJHM7zPHSQjLLYM4IbP1Q=) 4: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: XFH0Q1KpeOYZLCrrHNLmbgTNMLaKVPfV4xztcVnCyR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 05:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Oct 17 05:57:26 2026 GMT Not After : Oct 24 05:57:26 2026 GMT Subject: CN=6ad30e46-6c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:5d:9a:31:9c:81:8f:bc:78:ea:c2:95:14: 31:92:f2:9b:c4:ef:60:f5:f2:bf:cb:92:9c:71:95: e0:dc:07:03:88:de:15:d7:c4:2d:cf:75:af:d0:7b: e1:72:52:cd:cf:36:23:c2:32:b6:d6:30:00:25:93: db:f9:6c:d2:e8:7b:b8:58:03:6e:64:bb:ba:a2:8e: 81:27:77:ac:c8:17:10:31:69:0d:0e:1b:fd:23:09: c8:9e:bc:8e:16:5e:e0:b1:2d:ba:ed:b9:0a:96:56: be:cd:57:2d:6e:6d:1b:92:24:f6:d4:98:5c:0e:d3: ee:f2:26:15:89:cc:c8:51:34:37:42:41:99:09:e2: 74:1f:47:5c:12:43:a7:51:41:ed:72:09:30:1f:b2: e4:03:3a:e8:18:9a:66:aa:4f:b0:6b:10:d3:32:8c: dc:ec:40:82:40:0d:54:be:7d:91:91:e3:11:6f:d1: fa:75:65:fb:8a:c1:af:82:62:91:2b:6f:b3:e6:47: 18:73:55:ef:6e:a8:27:9f:06:02:7b:6c:d0:bd:23: ab:87:d2:b9:6d:51:00:8b:83:2e:96:ec:9c:4a:01: e9:05:2a:37:71:b1:b0:b0:de:09:10:d5:4c:34:bb: 4a:b7:5a:f0:55:4d:d8:78:15:ad:c9:dd:fd:0a:88: 73:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:4B:6A:76:18:3F:0E:CF:50:74:13:31:F8:E1:DA:04:AF:03:AA X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:62:90:aa:f8:aa:a6:84:2c:2d:4c:95:8e:31:35:bc:94:b9: e9:41:5c:b0:5e:03:63:db:a7:36:2d:93:1b:28:57:f2:f0:00: d9:5d:ec:12:25:ca:c7:9a:7f:59:c1:b4:56:0e:96:09:54:b8: 0d:c0:f6:4f:2f:8e:45:96:05:15:20:59:a2:9b:8b:61:d1:b3: 17:78:f8:1c:4a:c7:43:f6:b1:02:ce:d8:91:7d:9b:30:62:02: 1e:be:73:7b:dd:21:f3:49:fe:71:b7:90:32:ff:28:3e:5d:6c: 6d:d1:f2:02:9c:da:8a:1c:1b:c6:e5:1d:c8:04:23:61:6a:fe: 7a:3b:38:86:15:37:3b:91:62:d9:96:7b:ff:dc:78:79:b9:2e: 30:88:59:9d:02:b5:f4:9d:36:0d:13:50:46:d2:2f:1c:0d:30: 34:66:af:c9:29:5f:7d:b9:85:e7:b0:6d:fd:8a:08:2a:08:96: eb:82:06:b7:51:50:df:dc:21:03:7c:65:72:6d:56:37:f6:d2: e8:2a:eb:fd:1f:b7:3b:41:1c:67:5b:42:76:6c:5d:fb:33:a6: eb:8a:f4:7f:73:f7:26:9d:7f:3b:b5:01:9a:43:2f:79:41:12: d5:50:2a:79:c9:47:92:c2:3a:57:9b:3a:1b:ac:8c:03:89:7a: 1c:f1:7a:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjYxMDE3MDU1NzI2WhcNMjYxMDI0MDU1NzI2WjAYMRYwFAYD VQQDEw02YWQzMGU0Ni02YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/5dmjGcgY+8eOrClRQxkvKbxO9g9fK/y5KccZXg3AcDiN4V18Qtz3Wv0Hvh clLNzzYjwjK21jAAJZPb+WzS6Hu4WANuZLu6oo6BJ3esyBcQMWkNDhv9IwnInryO Fl7gsS267bkKlla+zVctbm0bkiT21JhcDtPu8iYViczIUTQ3QkGZCeJ0H0dcEkOn UUHtcgkwH7LkAzroGJpmqk+waxDTMozc7ECCQA1Uvn2RkeMRb9H6dWX7isGvgmKR K2+z5kcYc1XvbqgnnwYCe2zQvSOrh9K5bVEAi4MuluycSgHpBSo3cbGwsN4JENVM NLtKt1rwVU3YeBWtyd39CohzOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2FS2p2 GD8Oz1B0EzH44doErwOqMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA2KQqviqpoQsLUyVjjE1vJS56UFcsF4DY9unNi2TGyhX8vAA2V3sEiXKx5p/ WcG0Vg6WCVS4DcD2Ty+ORZYFFSBZopuLYdGzF3j4HErHQ/axAs7YkX2bMGICHr5z e90h80n+cbeQMv8oPl1sbdHyApzaihwbxuUdyAQjYWr+ejs4hhU3O5Fi2ZZ7/9x4 ebkuMIhZnQK19J02DRNQRtIvHA0wNGavySlffbmF57Bt/YoIKgiW64IGt1FQ39wh A3xlcm1WN/bS6Crr/R+3O0EcZ1tCdmxd+zOm64r0f3P3Jp1/O7UBmkMveUES1VAq eclHksI6V5s6G6yMA4l6HPF61A== -----END CERTIFICATE-----Generated at Sun Oct 18 04:09:45 2026 by rpki-client