$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: +4jIxDTW6K6bMG6CQQDzh2YzlyrBSkTHEswhnyevZYc= Subject key identifier: 59:91:4C:7E:BE:60:A5:5F:7D:79:07:BE:92:A5:EA:B5:B9:80:1A:D9 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 0583 Signing time: Tue 21 Jul 2026 00:06:57 +0000 Manifest this update: Tue 21 Jul 2026 00:06:57 +0000 Manifest next update: Tue 28 Jul 2026 00:06:57 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: 3xg8Q8nYyqIbzTmsY2Q4ph7hp4891hkFz52+NaTZiJg=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Jul 21 00:06:57 2026 GMT Not After : Jul 28 00:06:57 2026 GMT Subject: CN=6a5eb821-7a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:09:d3:10:00:a9:ee:10:af:ca:fa:a7:02: 21:43:f4:af:95:00:16:76:bc:de:9b:d9:a8:a7:cd: 87:f3:50:2f:4d:d7:24:f7:0e:9f:d3:07:13:5d:25: 19:df:64:14:93:b7:2b:e9:47:59:0b:ed:cb:dd:d8: 96:c2:56:7b:54:d4:0a:7c:14:94:dc:2d:1e:af:36: ed:4e:65:7f:b7:f7:32:34:e0:33:3b:ef:72:10:cf: 66:09:96:61:3a:88:2a:20:ac:9b:47:6e:f4:c0:15: f3:6a:19:c0:5d:a4:da:0d:d7:04:7b:3e:cb:3d:1d: 97:19:79:a7:7e:b9:5f:0c:19:05:75:52:83:5c:03: e3:61:5d:1f:8a:6f:8d:70:eb:15:04:58:da:27:60: b0:a1:4f:fc:11:46:d5:5c:91:86:0d:37:5e:c5:a0: 8f:dc:c8:17:ae:a0:e4:d8:0f:65:c0:bc:18:44:ff: 97:a6:3c:2d:6f:48:fb:fe:0b:5e:cf:e1:9f:85:4d: a3:da:e6:a0:2b:19:61:b5:60:ce:65:02:ce:98:dc: f1:5e:ae:a5:4e:90:62:d6:f5:04:20:f3:fe:1f:ba: 4e:a5:3d:41:f2:59:68:49:3d:a9:19:2d:bc:af:00: e3:d8:eb:99:cc:0d:4e:05:b8:1d:49:6e:50:e4:1b: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:4C:7E:BE:60:A5:5F:7D:79:07:BE:92:A5:EA:B5:B9:80:1A:D9 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fc:8d:92:db:0e:2b:ff:0f:cd:3b:f9:a8:65:9e:83:e4:2b: 74:9c:d5:0f:f8:48:14:f6:5d:1b:7b:5f:d3:a6:fe:76:65:db: 4d:ea:85:9f:21:b8:97:16:8f:e6:f0:fb:8d:85:1d:4d:f7:bd: a4:4f:ca:fe:c5:7a:d6:4f:9f:3a:e1:74:39:2c:46:a6:02:19: c4:5a:7d:5a:1a:58:a6:d4:46:74:df:55:42:e0:65:9c:63:54: 8c:70:1b:47:34:cd:48:91:89:56:2a:c6:10:4d:d3:b9:db:8e: 19:07:7e:29:75:5b:23:56:5c:3f:fc:4a:b6:2a:f0:41:9f:e1: b5:da:82:4e:f8:ac:9e:c6:3a:50:55:6b:2e:b9:48:a6:25:08: c4:13:e6:8a:0e:84:23:8d:cc:20:43:42:ab:5a:5b:7b:e3:d7: 1e:7b:16:17:49:be:fb:0e:17:0f:e7:d7:9b:b9:ab:c6:d8:44: 43:1c:59:6f:6e:3f:3d:d9:7d:03:d3:b3:87:1d:f1:57:54:c4: 48:56:d9:bd:9d:f4:79:4c:19:01:1b:5c:43:22:48:a3:96:4c: 7b:d3:35:c9:2f:59:8b:f0:66:bd:cc:1e:37:a9:1b:6d:a1:db: b4:43:49:10:2e:01:54:2e:23:0c:f4:76:d7:b6:e1:e3:fd:7a: f8:a5:91:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYwNzIxMDAwNjU3WhcNMjYwNzI4MDAwNjU3WjAYMRYwFAYD VQQDEw02YTVlYjgyMS03YTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dUJ0xAAqe4Qr8r6pwIhQ/SvlQAWdrzem9mop82H81AvTdck9w6f0wcTXSUZ 32QUk7cr6UdZC+3L3diWwlZ7VNQKfBSU3C0erzbtTmV/t/cyNOAzO+9yEM9mCZZh OogqIKybR270wBXzahnAXaTaDdcEez7LPR2XGXmnfrlfDBkFdVKDXAPjYV0fim+N cOsVBFjaJ2CwoU/8EUbVXJGGDTdexaCP3MgXrqDk2A9lwLwYRP+Xpjwtb0j7/gte z+GfhU2j2uagKxlhtWDOZQLOmNzxXq6lTpBi1vUEIPP+H7pOpT1B8lloST2pGS28 rwDj2OuZzA1OBbgdSW5Q5BudnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmRTH6+ YKVffXkHvpKl6rW5gBrZMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs/yNktsOK/8PzTv5qGWeg+QrdJzVD/hIFPZdG3tf06b+dmXbTeqFnyG4lxaP 5vD7jYUdTfe9pE/K/sV61k+fOuF0OSxGpgIZxFp9WhpYptRGdN9VQuBlnGNUjHAb RzTNSJGJVirGEE3TuduOGQd+KXVbI1ZcP/xKtirwQZ/htdqCTvisnsY6UFVrLrlI piUIxBPmig6EI43MIENCq1pbe+PXHnsWF0m++w4XD+fXm7mrxthEQxxZb24/Pdl9 A9Ozhx3xV1TESFbZvZ30eUwZARtcQyJIo5ZMe9M1yS9Zi/BmvcweN6kbbaHbtENJ EC4BVC4jDPR217bh4/16+KWRjg== -----END CERTIFICATE-----Generated at Tue Jul 21 09:58:45 2026 by rpki-client