$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: rR96V0+tKL/7sYOTN6YAGiNMtIc+F5xJsAtee6CkGlA= Subject key identifier: F9:72:50:27:92:69:7E:F6:55:23:13:9D:45:A5:F7:24:BA:B8:BE:4A Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 022C Signing time: Fri 11 Sep 2026 02:53:29 +0000 Manifest this update: Fri 11 Sep 2026 02:53:28 +0000 Manifest next update: Fri 18 Sep 2026 02:53:28 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: xRV8SxXDgRz5WbBMKDIO1hYzMlL7JOoaJC5MrbWbupA=) 2: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: pvNtxEebaDqgsEGcGKNlJatXfUnFwrPrh9xqF+/MFUI=) 3: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=) 4: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Sep 11 02:53:28 2026 GMT Not After : Sep 18 02:53:28 2026 GMT Subject: CN=6aa36d28-8632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:30:03:41:d7:a1:ba:a3:2d:fe:42:05:5f: 8f:af:70:0b:88:33:ea:60:5f:fc:04:93:3c:4f:71: a6:f1:ca:c5:be:5a:e3:fd:ba:b5:40:58:ed:67:39: 27:7c:7b:e3:fb:9d:10:6a:38:f9:f3:b3:39:eb:67: fa:52:04:d0:de:7c:f7:2a:da:ee:a6:0a:a8:85:69: 43:05:da:a2:ef:b1:99:12:b2:c3:50:ad:7d:f3:23: 2d:81:8e:5f:90:b5:60:3f:25:22:28:f3:b8:46:9b: f7:53:64:39:50:1e:c1:f9:8a:65:e2:d6:25:08:90: 1f:fc:09:aa:a4:a6:c7:df:ac:7f:2e:3c:e6:2b:c2: 33:d0:05:af:52:a6:28:7e:66:ab:2d:c4:a9:42:8a: 8b:4d:b5:d1:26:9a:75:df:93:da:d3:e3:d8:74:c5: ce:a9:08:8f:8c:b1:e2:fd:a3:53:c8:7a:8b:5e:8a: 86:0d:79:79:e3:96:7d:26:49:a6:90:f3:1f:01:fa: 5a:85:0d:fe:64:a8:4c:5a:a8:4a:e2:3e:32:8c:37: f5:65:6d:8c:50:a0:e5:f5:44:f2:e6:20:45:87:61: e4:7f:ac:6b:bb:82:c1:fe:b7:09:84:f2:5d:ed:54: 3f:96:eb:a3:fe:9e:00:4f:ba:b8:dc:43:f1:2c:23: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:72:50:27:92:69:7E:F6:55:23:13:9D:45:A5:F7:24:BA:B8:BE:4A X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fc:55:fa:71:9d:35:bc:c5:41:15:12:45:d1:c4:e5:f8:1e: bc:47:94:66:4c:3e:f3:ef:b5:6c:1a:26:f5:e5:f3:67:dd:14: 0c:96:1b:4b:de:f5:d6:0a:6c:76:54:ab:25:5f:8a:10:bb:99: d4:35:1b:19:45:e1:a0:cf:ec:09:78:3c:18:02:99:a7:05:1b: 45:75:7e:ba:35:d0:e1:f3:17:eb:50:a8:99:73:38:82:45:29: 68:d1:09:cf:af:f0:e9:90:fe:a1:39:2f:59:2c:b0:9c:45:b9: a5:7b:1c:c4:56:1b:b3:ce:80:26:cc:ff:ec:85:66:5d:fc:83: f8:b5:6f:e7:af:07:77:93:ef:5e:e9:d6:6d:f6:85:52:7d:30: 56:d6:7d:37:a8:3a:75:83:a9:5f:e2:fa:85:06:e7:66:df:9f: 36:57:19:f9:5e:2c:8d:9c:19:93:60:3a:c6:40:c1:11:26:00: ae:d6:74:90:6e:00:ed:5a:70:34:b0:c0:42:5f:a1:5f:e0:17: 1b:2c:82:a8:0b:06:9e:31:d7:09:d2:1d:52:09:69:db:45:3f: 3d:21:33:64:2d:e5:7a:09:b5:fe:b6:67:03:81:7f:9c:25:d9: 33:c8:ec:2c:c4:20:65:1d:39:84:07:f8:3c:86:d8:08:38:8c: e1:3e:1f:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjYwOTExMDI1MzI4WhcNMjYwOTE4MDI1MzI4WjAYMRYwFAYD VQQDEw02YWEzNmQyOC04NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD0wA0HXobqjLf5CBV+Pr3ALiDPqYF/8BJM8T3Gm8crFvlrj/bq1QFjtZzkn fHvj+50Qajj587M562f6UgTQ3nz3KtrupgqohWlDBdqi77GZErLDUK198yMtgY5f kLVgPyUiKPO4Rpv3U2Q5UB7B+Ypl4tYlCJAf/AmqpKbH36x/LjzmK8Iz0AWvUqYo fmarLcSpQoqLTbXRJpp135Pa0+PYdMXOqQiPjLHi/aNTyHqLXoqGDXl545Z9Jkmm kPMfAfpahQ3+ZKhMWqhK4j4yjDf1ZW2MUKDl9UTy5iBFh2Hkf6xru4LB/rcJhPJd 7VQ/luuj/p4AT7q43EPxLCNuKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlyUCeS aX72VSMTnUWl9yS6uL5KMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb/xV+nGdNbzFQRUSRdHE5fgevEeUZkw+8++1bBom9eXzZ90UDJYbS9711gps dlSrJV+KELuZ1DUbGUXhoM/sCXg8GAKZpwUbRXV+ujXQ4fMX61ComXM4gkUpaNEJ z6/w6ZD+oTkvWSywnEW5pXscxFYbs86AJsz/7IVmXfyD+LVv568Hd5PvXunWbfaF Un0wVtZ9N6g6dYOpX+L6hQbnZt+fNlcZ+V4sjZwZk2A6xkDBESYArtZ0kG4A7Vpw NLDAQl+hX+AXGyyCqAsGnjHXCdIdUglp20U/PSEzZC3legm1/rZnA4F/nCXZM8js LMQgZR05hAf4PIbYCDiM4T4fQA== -----END CERTIFICATE-----Generated at Fri Sep 11 09:25:57 2026 by rpki-client