$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json) Hash identifier: 9M0Tsb0SCMi1bcl7LqyoT8U8zwKbbBdqX/Ycso7RIHs= Subject key identifier: 35:0E:79:3C:99:CF:17:BC:C3:10:F9:5F:E0:36:94:D3:40:EA:26:5D Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft Manifest number: 0D28 Signing time: Tue 18 Aug 2026 18:25:26 +0000 Manifest this update: Tue 18 Aug 2026 18:25:25 +0000 Manifest next update: Tue 25 Aug 2026 18:25:25 +0000 Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: Bx157H8rzIBHns0o4GV8zkeottdlXawwvoNoNoQtZpE=) 2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Aug 18 18:25:25 2026 GMT Not After : Aug 25 18:25:25 2026 GMT Subject: CN=6a84a396-4d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:3d:fb:e7:cb:d1:16:91:93:62:61:fe:2e: 47:1a:85:0a:b0:4c:80:c8:4a:a4:0c:d2:fb:3c:ea: e9:f1:f1:54:d1:b7:99:47:da:b4:f9:cb:56:fd:3d: 96:b5:0d:b3:29:2f:5d:fe:1e:7a:aa:40:85:ab:1f: 96:86:ca:e1:7c:15:cd:73:5d:ad:9d:52:76:8d:b8: 37:91:2f:f9:c5:d1:12:73:9f:2b:8a:c2:e0:49:45: df:ca:8c:85:db:1a:87:54:20:b2:b2:4c:bb:00:2b: 2d:a6:7a:68:a7:2a:54:df:28:ec:f2:d6:cc:b1:67: 7a:76:81:c6:e6:72:cb:7b:cd:97:1f:e6:96:f9:ee: df:37:4e:98:a0:ab:08:20:05:9a:52:f0:1a:83:19: 2f:0d:9d:51:6d:9c:0e:8a:f0:02:a8:7d:19:4a:9d: 43:e7:7e:7e:b9:1f:91:05:a7:9f:53:07:95:7b:cf: 73:b0:86:b6:5f:88:c2:ff:27:ab:1b:3f:7e:1c:0d: a4:78:07:0e:af:67:ce:6a:99:66:a3:d2:6d:8c:53: 29:ff:63:6e:3e:29:38:74:e6:5b:c5:6e:9a:f3:b5: 81:d9:12:ea:41:b0:10:de:30:0d:b6:20:1e:b3:a2: 81:67:c8:3c:81:08:0a:5e:64:66:5e:2b:39:d8:d6: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:79:3C:99:CF:17:BC:C3:10:F9:5F:E0:36:94:D3:40:EA:26:5D X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d7:e1:bc:20:72:2a:30:03:11:6c:5f:0f:11:7c:6c:7c:c0: fe:c8:0d:16:e3:29:79:74:a7:53:d9:e9:83:76:b8:ed:03:c9: cf:03:89:7f:03:a4:18:63:9c:95:db:a2:e3:6b:fc:37:98:7c: b8:73:71:8f:a4:e1:ea:f2:b0:e9:7a:24:67:5f:ac:ed:0b:a1: 29:bb:f7:0e:a3:ff:58:fc:31:94:da:8a:82:8e:3e:78:0f:26: b4:1d:8e:af:c5:c9:7d:b1:e7:fc:97:37:b4:33:2c:7d:12:9b: 93:1b:a6:82:5b:68:89:9e:61:fd:ef:b3:f7:6d:82:64:6a:d0: 56:0a:82:3e:19:80:fb:a8:73:f6:79:30:05:67:13:54:9b:69: 7a:80:19:ba:ad:7a:cd:a6:2f:a8:77:e2:e2:39:63:4c:48:4d: 79:52:0a:39:a7:ba:17:83:4b:be:97:5e:53:be:41:a8:ef:56: ca:3e:6f:32:63:a3:58:b1:5e:ce:98:0d:61:cf:d0:d8:69:d9: 85:a1:fb:77:b8:34:81:26:c6:b4:59:5d:c4:e9:29:33:f2:4b: b4:da:eb:60:bf:6b:93:23:0f:35:30:62:57:9a:dc:90:28:03: ba:a2:9e:7b:c7:78:50:7f:02:71:7d:4b:31:24:24:03:6d:de: a9:49:b5:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjYwODE4MTgyNTI1WhcNMjYwODI1MTgyNTI1WjAYMRYwFAYD VQQDEw02YTg0YTM5Ni00ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsso9++fL0RaRk2Jh/i5HGoUKsEyAyEqkDNL7POrp8fFU0beZR9q0+ctW/T2W tQ2zKS9d/h56qkCFqx+WhsrhfBXNc12tnVJ2jbg3kS/5xdESc58risLgSUXfyoyF 2xqHVCCysky7ACstpnpopypU3yjs8tbMsWd6doHG5nLLe82XH+aW+e7fN06YoKsI IAWaUvAagxkvDZ1RbZwOivACqH0ZSp1D535+uR+RBaefUweVe89zsIa2X4jC/yer Gz9+HA2keAcOr2fOaplmo9JtjFMp/2NuPik4dOZbxW6a87WB2RLqQbAQ3jANtiAe s6KBZ8g8gQgKXmRmXis52NaaowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUOeTyZ zxe8wxD5X+A2lNNA6iZdMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTA2NC8wNzYzOTYyMDA1MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVot S2hRTlRTTVU0ckRwd0VkREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdfhvCByKjADEWxfDxF8bHzA/sgNFuMpeXSnU9npg3a47QPJzwOJfwOkGGOc ldui42v8N5h8uHNxj6Th6vKw6XokZ1+s7QuhKbv3DqP/WPwxlNqKgo4+eA8mtB2O r8XJfbHn/Jc3tDMsfRKbkxumgltoiZ5h/e+z922CZGrQVgqCPhmA+6hz9nkwBWcT VJtpeoAZuq16zaYvqHfi4jljTEhNeVIKOae6F4NLvpdeU75BqO9Wyj5vMmOjWLFe zpgNYc/Q2GnZhaH7d7g0gSbGtFldxOkpM/JLtNrrYL9rkyMPNTBiV5rckCgDuqKe e8d4UH8CcX1LMSQkA23eqUm1zQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:04 2026 by rpki-client