$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: yFtJosVl0hMAdmOp8p5o/fSW+tBrjViP4nH+Wzz6R4c= Subject key identifier: 79:9A:8F:A1:31:4E:83:17:B5:9F:51:3E:D8:FA:6C:33:83:E4:0C:28 Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 0AA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 0A9F Signing time: Tue 18 Aug 2026 19:48:51 +0000 Manifest this update: Tue 18 Aug 2026 19:48:51 +0000 Manifest next update: Tue 25 Aug 2026 19:48:51 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: MiZXQBNxjX5YJehcBrUoHwhKzZv6t0UsgUYIe5D7vto=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: gzbpBLHjuyIbIn1f9T7JlFlrPpRUrvtd4lxp7A9hka0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2727 (0xaa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Aug 18 19:48:51 2026 GMT Not After : Aug 25 19:48:51 2026 GMT Subject: CN=6a84b723-488c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:bc:c1:7a:f8:a8:19:ce:c5:6a:26:04:5a: 77:e9:8c:fc:98:eb:d1:69:5c:86:b4:56:74:ad:82: 84:72:b8:a9:b7:ec:c5:b1:20:8c:48:d2:89:a7:f2: b8:88:ae:3c:35:ab:5e:4a:01:ef:9d:fb:bb:c6:a5: 30:1b:11:59:d6:2a:ff:2b:91:26:a0:48:52:22:eb: 3b:b7:ec:6a:32:d7:d8:b2:2b:d7:18:8e:26:11:57: 47:29:20:da:ad:96:c8:dc:b1:47:f7:a2:12:23:39: e3:b7:21:2d:70:57:3b:d0:12:d2:b3:c5:c8:26:93: c2:54:d6:d2:ef:65:f8:60:89:ba:40:a4:a1:4d:1d: 3a:a5:82:4a:9d:88:68:b7:cd:e1:2a:6b:1d:1f:29: 87:17:43:93:31:21:00:70:a2:0b:5c:e8:89:5a:7d: 0d:0d:27:75:0e:f5:56:d3:3a:48:53:69:e9:8a:4b: 8e:bd:7a:04:db:00:b2:30:de:a2:22:ca:41:95:a1: 7c:84:11:15:bd:27:38:ac:36:e5:cf:21:00:73:cf: 8c:ac:12:bb:9d:e4:b9:66:11:1b:ee:85:ac:53:17: 2f:82:7f:2e:3f:f4:16:28:ad:9d:9d:24:d7:a3:d9: 2d:0a:cd:09:fa:15:63:61:79:0b:19:79:f4:ba:35: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:8F:A1:31:4E:83:17:B5:9F:51:3E:D8:FA:6C:33:83:E4:0C:28 X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4f:be:d3:ab:eb:57:a6:3f:a2:cf:da:0f:22:8c:54:d0:93: 81:05:b1:4d:b8:32:f8:c0:4e:68:0f:0b:3e:19:a4:08:4a:d5: 3c:e4:85:b9:ad:98:21:bf:5e:42:95:5e:5f:f3:85:58:d9:83: c2:6a:3c:88:65:ae:53:9c:8e:fd:48:b3:30:20:b4:00:c5:da: 29:b6:b8:51:68:53:cf:3d:03:bf:33:83:1a:a8:e9:63:fe:f1: 25:4d:6e:43:15:b5:8c:ea:0f:82:8f:9a:d1:3f:73:f2:de:54: 04:cc:68:0a:c4:22:4c:4c:f4:ab:30:0d:f7:5f:92:43:6f:85: a2:04:44:cc:51:fe:a0:75:20:05:1b:d9:00:2e:09:e3:25:f9: 3a:80:71:df:35:c3:c0:bf:f3:2f:46:77:4a:c6:ac:45:5f:b6: 03:02:78:69:79:f9:4c:65:fa:e9:d9:be:53:63:b0:7b:d6:fa: 7f:96:2f:44:89:0c:a8:c1:2e:13:5d:30:0e:f4:fa:c5:1d:4f: b6:8c:9e:10:a3:99:6d:ec:c3:23:cb:8f:99:37:70:5d:2f:84: db:92:b7:43:ba:0f:2d:2f:4c:a1:47:d8:d9:eb:ca:6b:94:70: 35:f2:04:15:ce:25:51:e4:ae:12:c0:93:ba:0b:b0:c5:7b:94: dc:03:44:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjYwODE4MTk0ODUxWhcNMjYwODI1MTk0ODUxWjAYMRYwFAYD VQQDEw02YTg0YjcyMy00ODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL+8wXr4qBnOxWomBFp36Yz8mOvRaVyGtFZ0rYKEcript+zFsSCMSNKJp/K4 iK48NateSgHvnfu7xqUwGxFZ1ir/K5EmoEhSIus7t+xqMtfYsivXGI4mEVdHKSDa rZbI3LFH96ISIznjtyEtcFc70BLSs8XIJpPCVNbS72X4YIm6QKShTR06pYJKnYho t83hKmsdHymHF0OTMSEAcKILXOiJWn0NDSd1DvVW0zpIU2npikuOvXoE2wCyMN6i IspBlaF8hBEVvSc4rDblzyEAc8+MrBK7neS5ZhEb7oWsUxcvgn8uP/QWKK2dnSTX o9ktCs0J+hVjYXkLGXn0ujXwBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmaj6Ex ToMXtZ9RPtj6bDOD5AwoMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI0++06vrV6Y/os/aDyKMVNCTgQWxTbgy+MBOaA8LPhmkCErVPOSFua2YIb9e QpVeX/OFWNmDwmo8iGWuU5yO/UizMCC0AMXaKba4UWhTzz0DvzODGqjpY/7xJU1u QxW1jOoPgo+a0T9z8t5UBMxoCsQiTEz0qzAN91+SQ2+FogREzFH+oHUgBRvZAC4J 4yX5OoBx3zXDwL/zL0Z3SsasRV+2AwJ4aXn5TGX66dm+U2Owe9b6f5YvRIkMqMEu E10wDvT6xR1PtoyeEKOZbezDI8uPmTdwXS+E25K3Q7oPLS9MoUfY2evKa5RwNfIE Fc4lUeSuEsCTuguwxXuU3ANE2g== -----END CERTIFICATE-----Generated at Wed Aug 19 17:02:22 2026 by rpki-client