$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: U6iI/d+SNEau+XZu7pCKkUpYqZBnqNa7Dh+r03pP3Gc= Subject key identifier: 07:DF:C9:29:4C:25:01:7C:50:F0:A4:DF:23:69:15:FA:5A:35:CD:1B Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 08A4 Signing time: Tue 18 Aug 2026 20:57:29 +0000 Manifest this update: Tue 18 Aug 2026 20:57:28 +0000 Manifest next update: Tue 25 Aug 2026 20:57:28 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: RiLnl1k6VI0Pg/IOD0OXEEROr7UAPizttjLVgOQBPfM=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jge7X+MNv7ydTsqhAul87mOGnW+YO1JzoDIYM4IKKXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: Aug 18 20:57:28 2026 GMT Not After : Aug 25 20:57:28 2026 GMT Subject: CN=6a84c738-f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:77:91:a5:b7:ea:de:13:38:03:62:19:71: 33:ee:9a:ba:89:59:a8:7d:53:48:db:35:79:7b:77: a5:16:33:79:d8:84:c0:d5:5c:54:58:7a:d6:4b:b7: ce:8e:c0:b3:e7:52:85:51:1c:31:23:d0:50:24:e0: 54:48:87:c0:cc:5e:27:03:18:45:6c:a6:2a:82:61: 47:73:dd:14:20:7e:4e:19:36:31:03:c6:50:ef:68: ce:c9:5a:66:b3:d4:ea:b6:5b:9f:98:c2:80:bc:a5: f3:e3:55:8b:31:91:0f:bf:1a:b5:20:c9:16:90:d1: 2c:ec:41:4b:d8:1f:a1:72:df:c8:76:a2:43:79:77: 18:ff:0a:30:f9:c6:b0:54:18:90:60:db:7c:b1:2a: 19:83:e1:fc:27:d6:8c:e4:47:be:5a:2f:f3:77:ac: ba:47:e6:07:e1:a0:fa:99:0c:26:fe:af:f9:e4:84: 2b:81:43:a4:f3:5f:b6:50:dd:4a:e0:01:4c:c2:1b: 3f:9b:d7:d4:3c:bb:e4:2c:ec:da:c4:d6:4d:64:58: 58:cd:e8:42:51:d3:32:99:4e:cc:6f:ae:71:ac:57: 62:9b:5f:c4:42:fd:32:19:16:65:e9:27:2f:05:07: 64:13:fd:1d:4b:4e:dd:15:a3:37:66:f4:c5:15:16: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:C9:29:4C:25:01:7C:50:F0:A4:DF:23:69:15:FA:5A:35:CD:1B X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:92:1d:7b:ed:1e:d5:d3:fb:e4:42:5f:64:08:80:70:e9:95: 55:8a:29:9a:a2:5e:f1:c9:28:55:0c:96:e0:17:a6:36:23:8a: 89:b5:a6:a2:62:ae:ce:1b:3c:83:2e:bf:b4:c2:ef:f8:62:0d: 89:9b:5d:60:a6:79:2b:6b:76:d6:00:fb:4c:46:83:f2:92:f3: 56:67:bd:ac:11:43:f5:70:03:73:d9:c6:9c:a3:1f:15:23:86: 7e:6e:a0:59:53:c3:8a:ca:cb:54:48:a6:13:4b:c5:de:63:65: a4:ec:2e:67:c9:8c:60:34:31:77:57:66:00:35:42:39:88:c1: 64:0e:f1:c9:00:cc:a9:66:ea:8f:65:86:a4:92:a1:e3:d7:19: 42:12:b6:1c:ed:98:1f:33:fe:61:78:c5:4a:71:17:53:e8:3f: 7d:49:58:32:14:57:cf:bc:0c:3c:d6:00:49:08:51:8c:23:b0: d9:2c:c8:65:bb:54:b5:50:d1:84:6a:9f:fd:15:d7:87:33:c6: de:4e:13:b3:1c:74:9a:b7:4b:51:d7:77:bd:fc:8e:84:80:fc: f2:65:33:d3:ac:55:68:78:9f:13:a0:f9:d8:95:d2:95:95:c4: 59:b3:71:25:8c:27:f8:e6:e7:f2:cd:67:32:90:99:7a:67:fa: 31:55:a5:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjYwODE4MjA1NzI4WhcNMjYwODI1MjA1NzI4WjAYMRYwFAYD VQQDEw02YTg0YzczOC1mN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdJ3kaW36t4TOANiGXEz7pq6iVmofVNI2zV5e3elFjN52ITA1VxUWHrWS7fO jsCz51KFURwxI9BQJOBUSIfAzF4nAxhFbKYqgmFHc90UIH5OGTYxA8ZQ72jOyVpm s9TqtlufmMKAvKXz41WLMZEPvxq1IMkWkNEs7EFL2B+hct/IdqJDeXcY/wow+caw VBiQYNt8sSoZg+H8J9aM5Ee+Wi/zd6y6R+YH4aD6mQwm/q/55IQrgUOk81+2UN1K 4AFMwhs/m9fUPLvkLOzaxNZNZFhYzehCUdMymU7Mb65xrFdim1/EQv0yGRZl6Scv BQdkE/0dS07dFaM3ZvTFFRba4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAffySlM JQF8UPCk3yNpFfpaNc0bMB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZIde+0e1dP75EJfZAiAcOmVVYopmqJe8ckoVQyW4BemNiOKibWmomKuzhs8 gy6/tMLv+GINiZtdYKZ5K2t21gD7TEaD8pLzVme9rBFD9XADc9nGnKMfFSOGfm6g WVPDisrLVEimE0vF3mNlpOwuZ8mMYDQxd1dmADVCOYjBZA7xyQDMqWbqj2WGpJKh 49cZQhK2HO2YHzP+YXjFSnEXU+g/fUlYMhRXz7wMPNYASQhRjCOw2SzIZbtUtVDR hGqf/RXXhzPG3k4Tsxx0mrdLUdd3vfyOhID88mUz06xVaHifE6D52JXSlZXEWbNx JYwn+Obn8s1nMpCZemf6MVWl5A== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:05 2026 by rpki-client