$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: A7mqKx6ltsxWZBw2vGedvJW9v+axzkbJ5BldSrcFcOc= Subject key identifier: 12:9B:40:B7:01:E5:F4:69:02:C2:EF:9D:86:E6:DD:B6:37:B8:7B:C4 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0214 Signing time: Mon 27 Jul 2026 04:38:49 +0000 Manifest this update: Mon 27 Jul 2026 04:38:49 +0000 Manifest next update: Mon 03 Aug 2026 04:38:49 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: 0vyf2i/nRGwnm1/LAtFHefsZ78J3YMRkOQV+jFe0aq4=) 2: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) 3: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 4: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Jul 27 04:38:49 2026 GMT Not After : Aug 3 04:38:49 2026 GMT Subject: CN=6a66e0d9-4d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:5d:12:e8:c3:2c:ca:2d:6d:b6:64:9b:49: 5c:6f:bf:76:cb:8a:84:c0:2b:d0:11:1b:13:bc:1a: fb:5b:44:c6:da:b3:bd:1c:5c:a1:73:5e:fb:73:5c: 20:ba:fd:37:f0:01:fa:43:dd:b8:fb:b7:91:89:b7: 22:e1:63:f4:1b:a2:fb:3d:8e:b1:28:ec:b3:f1:f8: 80:62:9b:28:96:f2:bd:bd:a2:59:95:35:c0:31:d5: e4:3e:65:56:ba:d0:8b:72:ff:bd:e0:96:d7:8a:48: 27:fc:33:5d:03:f4:4a:34:67:eb:6e:b5:1c:d4:9b: 8e:d8:3d:b6:68:dd:d3:26:87:5d:8c:d8:0c:33:41: 92:50:bb:49:4c:fd:88:70:d4:f9:4d:bb:4f:f2:f7: 51:c2:74:b5:b5:76:dd:18:7a:8c:0a:b6:e0:cf:fb: 96:b3:2b:a6:6f:5d:9e:63:ed:d3:18:b7:af:51:76: a5:53:37:4a:00:3f:c2:3f:88:4f:fe:fb:d3:7f:e9: 2c:70:e6:5f:90:f4:80:2f:e2:6d:ca:85:e3:e7:49: eb:8d:0f:6a:ee:d1:56:3b:12:b8:e2:11:ee:9d:d1: c4:a3:b6:74:7a:51:45:b7:27:b1:28:78:b1:4e:94: 0e:82:46:e1:9b:29:fa:7c:b4:7f:15:d8:0f:b2:6f: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9B:40:B7:01:E5:F4:69:02:C2:EF:9D:86:E6:DD:B6:37:B8:7B:C4 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:16:ab:1b:56:d7:10:07:67:37:7a:a2:82:cf:84:43:ac: 73:d1:65:b3:bd:ed:72:f3:d7:77:f4:d3:12:69:7e:d4:88:ba: 54:73:10:43:48:33:ba:df:29:e6:34:9f:3f:7b:5b:9c:8e:cb: 1c:d0:7e:ac:11:5f:2b:b0:5d:ce:df:1a:02:86:ea:b4:36:9d: ff:ee:12:7c:7a:2e:7e:61:79:fb:34:b2:53:22:b6:61:46:da: e4:a3:58:be:5e:4e:8d:df:1e:60:0d:6a:4d:47:be:1b:cc:fe: 2d:a3:8a:d3:13:b5:dc:23:55:7f:ed:43:b4:09:7f:80:e0:f3: 79:c1:bd:47:b8:ea:b4:17:af:3d:06:91:51:81:f2:1a:55:a5: 31:1c:85:0b:ec:30:96:40:4c:7d:f0:2f:74:b4:4a:27:a7:83: cd:24:76:ed:b4:22:2d:7d:ce:9b:28:7e:4e:f2:9d:af:86:14: af:33:f6:29:6c:55:03:ea:ab:27:e4:37:8b:16:37:9b:16:90: b1:2d:79:73:b5:d5:9a:b3:b6:72:2d:46:f2:ae:03:de:1c:7d: 62:2a:c0:2e:a3:8c:60:99:7f:ff:af:33:1e:ee:df:ae:b7:37: fa:63:05:47:ed:ad:1b:8f:ba:c4:a3:f6:8d:98:f3:ec:90:1b: e4:a2:ae:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwNzI3MDQzODQ5WhcNMjYwODAzMDQzODQ5WjAYMRYwFAYD VQQDEw02YTY2ZTBkOS00ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybRdEujDLMotbbZkm0lcb792y4qEwCvQERsTvBr7W0TG2rO9HFyhc177c1wg uv038AH6Q924+7eRibci4WP0G6L7PY6xKOyz8fiAYpsolvK9vaJZlTXAMdXkPmVW utCLcv+94JbXikgn/DNdA/RKNGfrbrUc1JuO2D22aN3TJoddjNgMM0GSULtJTP2I cNT5TbtP8vdRwnS1tXbdGHqMCrbgz/uWsyumb12eY+3TGLevUXalUzdKAD/CP4hP /vvTf+kscOZfkPSAL+JtyoXj50nrjQ9q7tFWOxK44hHundHEo7Z0elFFtyexKHix TpQOgkbhmyn6fLR/FdgPsm/ixwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKbQLcB 5fRpAsLvnYbm3bY3uHvEMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARnAWqxtW1xAHZzd6ooLPhEOsc9Fls73tcvPXd/TTEml+1Ii6VHMQQ0gzut8p 5jSfP3tbnI7LHNB+rBFfK7Bdzt8aAobqtDad/+4SfHoufmF5+zSyUyK2YUba5KNY vl5Ojd8eYA1qTUe+G8z+LaOK0xO13CNVf+1DtAl/gODzecG9R7jqtBevPQaRUYHy GlWlMRyFC+wwlkBMffAvdLRKJ6eDzSR27bQiLX3Omyh+TvKdr4YUrzP2KWxVA+qr J+Q3ixY3mxaQsS15c7XVmrO2ci1G8q4D3hx9YirALqOMYJl//68zHu7frrc3+mMF R+2tG4+6xKP2jZjz7JAb5KKu6g== -----END CERTIFICATE-----Generated at Mon Jul 27 22:59:05 2026 by rpki-client