$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: am44+0q6aSX9vFiAXr7he/pTevpDB1D87Ki/xDq7pdM= Subject key identifier: 89:F0:3D:A2:A7:E9:5A:B4:A4:20:89:EF:7E:1B:87:04:19:C8:2A:9F Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 01CA Signing time: Mon 07 Sep 2026 03:40:21 +0000 Manifest this update: Mon 07 Sep 2026 03:40:20 +0000 Manifest next update: Mon 14 Sep 2026 03:40:20 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: YPlgdAEb3tZQ01zsfS3Ufmn4iT3nLHT+rnZGTLaZA8c=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: IRQ5tUvjSdYBMHXJtMeaFpdBVsbhUU9VeI4w+7YPShY=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: EXf60aPYaF6V19CZAmIAiXajARXVjVYLev6p/NnSpqE=) 4: C43ADC9898A011F197259AE96111F970.roa (hash: qUX0d4svcA2ISwsDOMGvmImpbdf1PX0kSQo3+dTZN0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 03:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Sep 7 03:40:20 2026 GMT Not After : Sep 14 03:40:20 2026 GMT Subject: CN=6a9e3224-7689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:64:ca:82:0c:d0:8a:1b:8c:5b:2b:80:00: b0:34:aa:ea:52:b0:c8:fe:ee:7c:1e:b3:e7:a1:77: 01:eb:5a:fa:69:8d:5b:63:70:49:34:29:55:6a:c7: 3b:ca:4f:82:4e:83:2f:b0:28:d2:1b:69:38:96:8a: 6e:23:f2:86:26:d0:4a:36:38:99:7d:88:b5:7d:91: 26:49:f8:07:ca:b8:08:39:81:88:fd:2a:ba:30:cc: 0b:9d:a5:33:08:a8:09:d4:c9:2a:cd:b1:be:7f:c3: 95:86:f0:a2:83:95:e9:e0:dd:e3:b1:d2:af:60:e8: 16:ca:4c:99:be:3e:c9:2e:a0:94:36:d1:ed:7f:9a: f8:19:08:a2:70:b7:86:8d:36:67:63:74:73:87:35: a9:9b:01:9b:22:95:99:23:f1:28:d5:d2:f7:39:2f: 65:d9:c1:2a:cf:92:cb:4a:9e:e3:ff:0b:d1:36:ae: 2e:5d:45:4a:dc:4a:be:1f:92:d5:8f:34:23:a4:c2: 4c:68:b3:be:83:a1:47:fb:98:84:c2:51:6b:87:6a: d2:6b:50:61:9a:9f:cb:32:24:7c:61:e1:c4:24:a0: cb:ec:96:b6:90:56:3b:0f:bc:09:b1:80:04:ea:a9: 82:79:2e:d2:47:00:97:a0:2c:7a:73:52:96:6f:7f: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:3D:A2:A7:E9:5A:B4:A4:20:89:EF:7E:1B:87:04:19:C8:2A:9F X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ac:3b:0f:66:6a:cf:a7:45:0e:ba:35:f9:6b:f7:7c:61:2d: c9:71:b3:34:e3:8f:f2:3a:af:6e:d5:93:03:bc:9e:8f:ee:ef: ec:b9:43:76:c4:54:8b:96:a6:6e:0e:69:5a:6d:62:e4:8a:03: 4e:27:0d:01:83:6d:4d:23:0b:3f:8a:18:44:ae:87:f6:5d:03: 17:46:1a:9a:4f:56:a6:97:0f:6b:51:c2:65:e2:4c:8c:b7:05: e1:8a:97:c3:d7:5f:83:87:6a:73:41:ce:c1:dd:e3:ac:bc:b8: 85:76:52:1c:78:21:be:f4:f9:6a:17:0a:89:cb:00:9a:59:40: b7:9a:1f:e9:0e:d6:5c:c7:ab:b5:c6:9f:e3:d9:d4:bf:d3:ce: 7d:20:4f:59:1d:05:38:cc:e6:7e:fe:09:dc:b6:d8:43:95:94: 92:01:0b:95:1d:89:3b:ad:52:03:13:b4:2a:81:eb:e6:32:7a: 03:05:5a:16:6f:51:ed:16:2f:6f:4a:a5:69:2a:9e:9b:a3:a6: 6a:0e:3a:d5:bf:45:63:b5:46:c5:b3:c0:9d:a7:66:1f:70:98: e0:ce:02:db:f3:2d:06:e2:d5:b6:63:21:c5:ec:b9:4d:56:03: 72:43:66:57:e5:15:a1:5c:88:30:f6:00:8b:93:e5:8d:64:57: b9:f7:aa:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjYwOTA3MDM0MDIwWhcNMjYwOTE0MDM0MDIwWjAYMRYwFAYD VQQDEw02YTllMzIyNC03Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTxkyoIM0IobjFsrgACwNKrqUrDI/u58HrPnoXcB61r6aY1bY3BJNClVasc7 yk+CToMvsCjSG2k4lopuI/KGJtBKNjiZfYi1fZEmSfgHyrgIOYGI/Sq6MMwLnaUz CKgJ1MkqzbG+f8OVhvCig5Xp4N3jsdKvYOgWykyZvj7JLqCUNtHtf5r4GQiicLeG jTZnY3RzhzWpmwGbIpWZI/Eo1dL3OS9l2cEqz5LLSp7j/wvRNq4uXUVK3Eq+H5LV jzQjpMJMaLO+g6FH+5iEwlFrh2rSa1Bhmp/LMiR8YeHEJKDL7Ja2kFY7D7wJsYAE 6qmCeS7SRwCXoCx6c1KWb3/uFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInwPaKn 6Vq0pCCJ734bhwQZyCqfMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqw7D2Zqz6dFDro1+Wv3fGEtyXGzNOOP8jqvbtWTA7yej+7v7LlDdsRUi5am bg5pWm1i5IoDTicNAYNtTSMLP4oYRK6H9l0DF0Yamk9WppcPa1HCZeJMjLcF4YqX w9dfg4dqc0HOwd3jrLy4hXZSHHghvvT5ahcKicsAmllAt5of6Q7WXMertcaf49nU v9POfSBPWR0FOMzmfv4J3LbYQ5WUkgELlR2JO61SAxO0KoHr5jJ6AwVaFm9R7RYv b0qlaSqem6Omag461b9FY7VGxbPAnadmH3CY4M4C2/MtBuLVtmMhxey5TVYDckNm V+UVoVyIMPYAi5PljWRXufeqqQ== -----END CERTIFICATE-----Generated at Tue Sep 8 21:56:34 2026 by rpki-client