$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: XXVOB/2TtqfZ/o4Yxm4V+dGx88nAWYrgQYd0hwYAuRM= Subject key identifier: B0:45:43:65:C2:00:52:5B:11:6D:73:3F:11:00:15:3F:4F:B3:C4:E6 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0BBC Signing time: Tue 08 Sep 2026 19:11:40 +0000 Manifest this update: Tue 08 Sep 2026 19:11:39 +0000 Manifest next update: Tue 15 Sep 2026 19:11:39 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: O2K7jaAOg2a93S7fHBSY6g/f4l0/sF5q9e/ooQ5Mstk=) 2: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) 3: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) 4: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 19:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Sep 8 19:11:39 2026 GMT Not After : Sep 15 19:11:39 2026 GMT Subject: CN=6aa05dec-3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:8c:c0:c9:3c:ba:a4:7a:f1:1c:6f:74:7f: 33:fd:07:2b:0b:35:5e:bb:be:92:d8:1a:56:68:e4: c1:40:6a:84:8e:37:f9:09:e3:b3:eb:17:3b:d9:53: a1:db:af:86:0f:49:cb:e1:e0:b9:f5:ab:ab:26:1c: fb:e5:4a:ed:17:7e:27:d1:fa:53:aa:06:2e:c0:fa: 37:4b:94:7b:17:bf:fc:12:4d:e7:e6:22:73:0d:67: b5:4f:f6:e0:c6:0d:9c:bc:28:e8:06:df:73:b4:ef: f1:d5:e2:0d:d3:f4:be:ca:ae:41:44:ec:5f:d5:b6: 06:29:46:9d:4f:8e:4d:5d:21:5f:80:ef:43:49:59: a2:07:1e:f0:b2:fb:3d:fa:36:11:bd:90:17:8d:b1: e8:0c:c1:d2:19:f6:0c:82:00:54:5d:3a:7f:8e:d3: b0:71:13:06:d7:cf:66:fa:3f:8f:e3:0f:5e:9a:25: 0c:e3:c2:62:0b:cc:5e:d3:70:c8:52:63:ae:32:62: b5:53:e2:75:29:48:7e:55:64:10:ee:19:f7:1a:2f: 89:74:1b:ad:7f:96:1c:d5:71:ee:14:9b:c4:66:6e: 33:18:e6:62:fe:fa:c0:5f:6e:a2:94:53:05:2e:62: 66:d6:58:eb:4a:d2:70:56:f9:fa:e4:ce:2d:7b:b9: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:45:43:65:C2:00:52:5B:11:6D:73:3F:11:00:15:3F:4F:B3:C4:E6 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a4:c3:3c:31:41:95:0f:51:6b:c1:c3:71:d5:8c:40:8f:f8: 2a:75:e8:94:b2:84:fc:81:96:d6:00:c0:38:7f:ef:b4:52:f4: 8a:19:ad:6c:7c:56:7d:e8:ef:e4:a1:5f:87:7a:c2:3c:20:a5: e2:65:05:37:72:49:ad:2d:a0:6e:12:f5:da:74:00:48:cd:14: 60:ef:e5:30:9e:c4:27:0e:3e:13:91:d2:92:43:75:e1:fa:ce: 5f:c1:bc:18:6c:1e:32:e5:28:be:5d:04:64:a3:79:05:6f:28: fc:40:69:31:9a:94:cf:0c:23:12:26:5c:75:8c:be:e1:6b:17: a4:a8:b6:c9:17:f2:58:94:39:5a:a3:6b:e4:e2:fc:1b:c0:b7: e4:a8:48:a6:e7:e5:24:47:8e:7b:cb:9f:41:d8:be:2a:d9:be: 6b:9c:ab:52:1a:53:e7:80:1c:48:a1:be:76:a4:10:3b:64:44: 26:06:db:0d:bb:97:65:4f:dd:54:a7:4b:95:76:f8:81:7a:01: 77:ef:f9:e4:83:00:81:80:cb:50:da:20:db:0d:17:54:ec:79: 7a:5c:8e:19:bb:fb:f5:34:79:c8:76:e6:3a:6f:34:f6:7f:78: 62:c6:c9:bc:66:67:7b:91:5e:7c:f8:b8:35:72:a9:a7:2a:d8: 32:d1:d9:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYwOTA4MTkxMTM5WhcNMjYwOTE1MTkxMTM5WjAYMRYwFAYD VQQDEw02YWEwNWRlYy0zNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgiMwMk8uqR68RxvdH8z/QcrCzVeu76S2BpWaOTBQGqEjjf5CeOz6xc72VOh 26+GD0nL4eC59aurJhz75UrtF34n0fpTqgYuwPo3S5R7F7/8Ek3n5iJzDWe1T/bg xg2cvCjoBt9ztO/x1eIN0/S+yq5BROxf1bYGKUadT45NXSFfgO9DSVmiBx7wsvs9 +jYRvZAXjbHoDMHSGfYMggBUXTp/jtOwcRMG189m+j+P4w9emiUM48JiC8xe03DI UmOuMmK1U+J1KUh+VWQQ7hn3Gi+JdButf5Yc1XHuFJvEZm4zGOZi/vrAX26ilFMF LmJm1ljrStJwVvn65M4te7mr4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBFQ2XC AFJbEW1zPxEAFT9Ps8TmMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsaTDPDFBlQ9Ra8HDcdWMQI/4KnXolLKE/IGW1gDAOH/vtFL0ihmtbHxWfejv 5KFfh3rCPCCl4mUFN3JJrS2gbhL12nQASM0UYO/lMJ7EJw4+E5HSkkN14frOX8G8 GGweMuUovl0EZKN5BW8o/EBpMZqUzwwjEiZcdYy+4WsXpKi2yRfyWJQ5WqNr5OL8 G8C35KhIpuflJEeOe8ufQdi+Ktm+a5yrUhpT54AcSKG+dqQQO2REJgbbDbuXZU/d VKdLlXb4gXoBd+/55IMAgYDLUNog2w0XVOx5elyOGbv79TR5yHbmOm809n94YsbJ vGZne5FefPi4NXKppyrYMtHZdg== -----END CERTIFICATE-----Generated at Thu Sep 10 15:18:22 2026 by rpki-client