$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: zRk47DZHa2o4/xDkQBoHJXWzOeJddjGHG9qmpskFWr8= Subject key identifier: 86:21:9C:D0:4A:51:9D:C9:A4:7E:A4:06:AA:71:8F:3E:F5:A1:F2:71 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0E9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0E80 Signing time: Mon 31 Aug 2026 17:43:34 +0000 Manifest this update: Mon 31 Aug 2026 17:43:34 +0000 Manifest next update: Mon 07 Sep 2026 17:43:34 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: XqDoFhcZIz2VDTAh3jYITOQF7r5DR4PpmW2kDES7zAU=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: nRexK0UA55I5+x5R0A2TMhaYmEDiazdKkjOfJ9kGLwQ=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: J82yfuC+4aLDmhGWjyr0F1wn0ktPZ4aMMMR1qjOd0j4=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: 79PmiP9NpDAtWC6dqYWk56B1VkuYlkflhPnSmUa7hdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 17:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Aug 31 17:43:34 2026 GMT Not After : Sep 7 17:43:34 2026 GMT Subject: CN=6a95bd46-263e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:57:f0:e1:40:f7:9c:a8:34:aa:20:5b:a8: f9:da:c2:d6:ab:23:80:f4:69:9c:6a:38:a5:a9:7f: d0:d3:53:29:77:9a:b1:d4:2d:67:55:9f:d9:32:9d: 36:a1:a0:ab:d9:75:3f:e0:77:e7:f3:e5:61:74:4a: e9:cd:64:cd:e7:7a:f2:85:c0:dc:2d:f7:73:03:d9: 91:19:66:8f:58:b1:1e:6d:7f:4d:8f:68:e1:b3:b7: a6:05:94:28:05:3f:c7:15:64:ee:69:16:de:5f:f2: 2c:eb:59:80:39:fa:b3:ca:75:9d:89:5e:e4:31:04: ae:9d:d2:58:62:d7:48:79:61:1f:ce:89:70:65:d6: 32:34:74:42:6a:a3:6e:2d:a0:4e:19:f4:21:d0:4d: 8a:57:d9:50:cf:aa:35:16:88:67:a1:1f:a5:92:8a: ed:08:27:23:04:d7:48:20:e5:a0:9b:c9:c7:2e:d0: 48:67:62:7c:14:b1:f0:28:bb:3c:0d:18:4f:5f:71: ad:8b:c0:71:9c:97:45:e7:58:df:96:88:a5:84:7f: 34:17:02:04:f5:c0:d1:4b:f5:5c:31:09:6b:c9:bb: 75:8e:9f:1e:17:74:be:ca:99:e6:f0:a2:f1:6e:99: da:d9:a1:30:cf:7b:80:6c:9c:b7:73:0c:d3:95:ac: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:21:9C:D0:4A:51:9D:C9:A4:7E:A4:06:AA:71:8F:3E:F5:A1:F2:71 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c0:e2:00:76:c3:96:7d:a9:c0:57:8f:cb:a1:e5:d3:1b:01: 7c:63:14:36:cf:08:7b:d7:cf:90:51:2f:c4:50:5a:a1:ca:e7: 71:bc:a7:02:8a:0b:a0:46:e2:9f:97:3d:1b:d5:4f:5c:78:e6: 59:d3:ba:4c:97:29:52:84:74:1a:11:b5:42:76:a2:e5:49:1a: 54:8e:2e:53:e5:4a:a5:d4:03:0a:53:07:57:73:6d:7b:79:e9: 04:74:d1:90:11:70:6f:44:34:ce:aa:4f:0d:9e:bc:42:a8:2f: fa:71:d4:1a:d2:b8:ad:cf:38:80:b9:8b:cb:b1:de:3f:f3:7c: cc:94:ce:fb:e1:fb:91:c0:d9:23:bb:e9:14:d3:75:0e:50:bf: ea:53:63:58:3d:b7:66:a2:00:28:71:58:7e:c5:35:a9:bf:f1: 41:55:24:34:12:55:52:d4:aa:e5:c4:b1:08:5d:8f:53:a8:cd: 74:bc:d7:91:80:17:3a:f5:c5:f5:70:62:83:bc:36:9d:71:65: cb:e8:6f:6d:2d:be:88:13:3b:e5:1c:fd:e9:b1:d0:1c:28:d6: 10:32:97:cf:bb:ba:76:9d:03:3a:0d:1c:a9:c3:54:0b:21:a0: 27:96:7f:ef:09:46:93:86:38:ee:e1:3b:3e:6f:6a:8a:14:a8: b5:6e:c0:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjYwODMxMTc0MzM0WhcNMjYwOTA3MTc0MzM0WjAYMRYwFAYD VQQDEw02YTk1YmQ0Ni0yNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr65X8OFA95yoNKogW6j52sLWqyOA9GmcajilqX/Q01Mpd5qx1C1nVZ/ZMp02 oaCr2XU/4Hfn8+VhdErpzWTN53ryhcDcLfdzA9mRGWaPWLEebX9Nj2jhs7emBZQo BT/HFWTuaRbeX/Is61mAOfqzynWdiV7kMQSundJYYtdIeWEfzolwZdYyNHRCaqNu LaBOGfQh0E2KV9lQz6o1FohnoR+lkortCCcjBNdIIOWgm8nHLtBIZ2J8FLHwKLs8 DRhPX3Gti8BxnJdF51jfloilhH80FwIE9cDRS/VcMQlrybt1jp8eF3S+ypnm8KLx bpna2aEwz3uAbJy3cwzTlaxU3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYhnNBK UZ3JpH6kBqpxjz71ofJxMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8DiAHbDln2pwFePy6Hl0xsBfGMUNs8Ie9fPkFEvxFBaocrncbynAooLoEbi n5c9G9VPXHjmWdO6TJcpUoR0GhG1Qnai5UkaVI4uU+VKpdQDClMHV3Nte3npBHTR kBFwb0Q0zqpPDZ68Qqgv+nHUGtK4rc84gLmLy7HeP/N8zJTO++H7kcDZI7vpFNN1 DlC/6lNjWD23ZqIAKHFYfsU1qb/xQVUkNBJVUtSq5cSxCF2PU6jNdLzXkYAXOvXF 9XBig7w2nXFly+hvbS2+iBM75Rz96bHQHCjWEDKXz7u6dp0DOg0cqcNUCyGgJ5Z/ 7wlGk4Y47uE7Pm9qihSotW7AOw== -----END CERTIFICATE-----Generated at Tue Sep 1 03:47:48 2026 by rpki-client