$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json) Hash identifier: jaDce/s1N5qDhgoLluNuSpXsXTte7nySDrdmmbdXqG0= Subject key identifier: 07:96:96:91:52:DF:9F:29:2D:84:B0:E1:B6:B1:48:11:FD:55:0D:2A Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft Manifest number: CA Signing time: Fri 17 Jul 2026 08:03:25 +0000 Manifest this update: Fri 17 Jul 2026 08:03:24 +0000 Manifest next update: Fri 24 Jul 2026 08:03:24 +0000 Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: 4UTjJI4ZGnkTSEWhcOEa7HEb8SBwG0RS9n1mcLEVOHg=) 2: 05939A1C554611F09F737331C4F9AE02.roa (hash: gUXNFVaxSQufYdqyGN4kaVGgCYgVtungC4DrMnEIpG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Validity Not Before: Jul 17 08:03:24 2026 GMT Not After : Jul 24 08:03:24 2026 GMT Subject: CN=6a59e1cd-efa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:db:c3:ba:0e:a8:2b:93:b5:75:62:d3:7a: 34:dc:ce:42:bb:ae:8e:c7:56:a4:63:84:d0:c6:13: 42:0a:0a:1c:7d:d9:38:19:66:8f:99:1f:67:70:09: a5:66:ca:2d:14:3a:53:dc:a5:f2:8d:04:71:73:10: 6e:e2:7e:34:73:65:6e:53:79:47:05:32:ef:19:e8: 31:d0:20:e6:7d:47:27:2e:0d:f0:f6:f2:a0:17:49: d5:5c:f3:d5:4c:d6:9e:63:58:d8:79:2a:26:44:cb: 92:f8:1e:a2:51:50:08:47:f7:3b:ce:0a:e1:28:96: 02:38:83:ad:96:ee:8f:b8:62:b1:3d:d2:1f:9e:dd: a3:1c:7c:85:75:b4:8a:9e:20:f9:11:14:7f:a3:8c: f5:d7:4c:5b:8f:93:4c:47:4b:be:98:29:1b:c9:d0: b6:ad:29:01:56:6d:be:51:55:4b:5f:cc:96:9c:f3: 28:48:86:20:3d:89:6a:2a:d4:60:bc:1f:3d:8b:96: c8:8b:03:c0:68:c3:08:f0:6f:17:e6:96:1c:71:13: e5:ae:ca:c7:34:44:c9:6a:87:39:80:0e:aa:37:82: ae:e3:6c:77:71:06:8a:66:ec:91:4e:a7:a3:79:81: 09:4c:73:70:07:84:bd:7a:d9:fe:5b:96:d8:42:96: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:96:91:52:DF:9F:29:2D:84:B0:E1:B6:B1:48:11:FD:55:0D:2A X509v3 Authority Key Identifier: keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:99:e2:9d:f4:19:da:60:99:de:38:18:f9:a0:e4:c4:97:78: aa:03:f5:cc:e4:d6:31:af:d5:0c:76:61:74:72:fb:af:ed:53: f6:c4:12:12:20:a9:69:e6:9f:16:b8:01:fa:d5:41:78:d5:e5: 25:f0:24:e0:eb:5a:6d:1f:f7:7b:77:aa:f7:29:5b:f6:75:80: f2:25:58:8e:43:e3:fc:e3:c5:a8:3d:39:a5:45:82:09:7e:1c: 4f:af:d4:b8:dd:e7:c5:bc:b7:e7:7a:73:97:6d:c8:41:67:2c: bb:34:ef:8b:a3:8d:fb:ce:29:bd:5a:36:6a:4c:1e:c2:b5:ae: 78:95:bd:d3:03:51:11:ba:f6:4e:fc:0c:06:c3:37:bf:69:0a: db:72:b3:38:86:e1:85:c8:3d:af:22:0c:78:39:0a:6d:2a:3a: 22:31:9f:5b:59:e8:34:d7:f5:2f:03:60:64:78:27:84:f7:43: 71:48:77:fc:d8:3f:ba:af:b1:70:02:04:dc:cd:00:87:79:f7: 92:a6:6a:58:50:dc:03:8f:5f:3a:53:a2:36:da:db:65:67:83: 82:2f:51:be:fd:77:56:16:de:28:c5:c7:87:64:e1:b8:35:85: b2:b7:a8:36:d9:7f:b8:da:5b:a4:c0:ba:93:cf:ba:3e:ca:3a: 3b:4b:7e:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc5OUMxMTAvBgNVBAUTKDYwMDI1MEY2MzgzNkZCNEMyRjIzRjQ4N0Q3MTRCRjMy Rjc1OUE1QjUwHhcNMjYwNzE3MDgwMzI0WhcNMjYwNzI0MDgwMzI0WjAYMRYwFAYD VQQDEw02YTU5ZTFjZC1lZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqPbw7oOqCuTtXVi03o03M5Cu66Ox1akY4TQxhNCCgocfdk4GWaPmR9ncAml ZsotFDpT3KXyjQRxcxBu4n40c2VuU3lHBTLvGegx0CDmfUcnLg3w9vKgF0nVXPPV TNaeY1jYeSomRMuS+B6iUVAIR/c7zgrhKJYCOIOtlu6PuGKxPdIfnt2jHHyFdbSK niD5ERR/o4z110xbj5NMR0u+mCkbydC2rSkBVm2+UVVLX8yWnPMoSIYgPYlqKtRg vB89i5bIiwPAaMMI8G8X5pYccRPlrsrHNETJaoc5gA6qN4Ku42x3cQaKZuyRTqej eYEJTHNwB4S9etn+W5bYQpbYvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeWlpFS 358pLYSw4baxSBH9VQ0qMB8GA1UdIwQYMBaAFGACUPY4NvtMLyP0h9cUvzL3WaW1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzk5Qy8zNUVCRDhFODU1 NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9ZQUpROWpnMi0wd3ZJX1NIMXhTX012ZFpw YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Nzk5Qy8zNUVCRDhFODU1NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9ZQUpROWpnMi0w d3ZJX1NIMXhTX012ZFpwYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpninfQZ2mCZ3jgY+aDkxJd4qgP1zOTWMa/VDHZhdHL7r+1T9sQSEiCpaeaf FrgB+tVBeNXlJfAk4OtabR/3e3eq9ylb9nWA8iVYjkPj/OPFqD05pUWCCX4cT6/U uN3nxby353pzl23IQWcsuzTvi6ON+84pvVo2akwewrWueJW90wNREbr2TvwMBsM3 v2kK23KzOIbhhcg9ryIMeDkKbSo6IjGfW1noNNf1LwNgZHgnhPdDcUh3/Ng/uq+x cAIE3M0Ah3n3kqZqWFDcA49fOlOiNtrbZWeDgi9Rvv13VhbeKMXHh2ThuDWFsreo Ntl/uNpbpMC6k8+6Pso6O0t+MA== -----END CERTIFICATE-----Generated at Sat Jul 18 07:16:09 2026 by rpki-client