$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft File: RyCit4x4I5km_e5zRKNoDaDYBx0.mft (raw, json) Hash identifier: SaytrzZ96iJ7D97H2sbR/hgO2MXlLJ/4NrHOgtVvMSo= Subject key identifier: A5:6B:44:41:82:C3:7A:F3:D8:1B:34:2F:41:BE:A1:46:28:2F:C5:03 Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft Manifest number: 014C Signing time: Fri 17 Jul 2026 06:13:59 +0000 Manifest this update: Fri 17 Jul 2026 06:13:59 +0000 Manifest next update: Fri 24 Jul 2026 06:13:59 +0000 Files and hashes: 1: RyCit4x4I5km_e5zRKNoDaDYBx0.crl (hash: nWD7aHlNOMb+HzBjGRCa73GBro8MEx0VPalhe7z9MPU=) 2: D2D7B762995611EFADA5D754C4F9AE02.roa (hash: uC7UgU3WUyp6lo8+x5BnzjYje46EFX3E65V33NxoTHM=) 3: 003589503F8311F0AA4DF254C4F9AE02.roa (hash: DKnLp31Pt39zKxYHan0L0UpjSQtw5gIheDfF7NmRFzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Validity Not Before: Jul 17 06:13:59 2026 GMT Not After : Jul 24 06:13:59 2026 GMT Subject: CN=6a59c827-1060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:cc:a1:fa:50:f0:7c:43:c2:89:61:84:2b: 74:ca:88:92:8c:93:89:44:8e:36:ed:8e:e7:c5:86: ab:1a:c7:28:76:d8:03:58:a9:12:87:d6:5b:7f:cd: 25:1a:80:78:74:da:98:78:1a:7e:30:56:08:34:6f: 8b:39:b6:01:2f:e6:88:fb:8d:43:f8:6e:a3:5e:25: 40:78:0a:50:17:44:25:ab:bd:cf:f5:19:5a:3e:3a: d3:f8:64:bc:6c:ae:7b:d2:28:6e:1c:76:a9:96:24: 90:22:36:54:97:55:87:da:5d:ee:96:0a:ad:c5:ea: ea:f8:48:73:00:89:f7:69:f1:80:53:92:5c:d7:7b: 2f:ed:1d:98:c2:18:67:59:37:8a:15:b6:a2:23:eb: d0:58:b0:46:45:de:07:67:46:4c:d2:6c:fb:b3:6b: 68:74:33:dd:17:86:fc:55:9a:cc:99:26:1f:f8:19: 11:ae:8c:2f:52:d0:39:b5:38:99:11:0f:92:d3:1d: f4:07:40:29:65:cd:ee:81:56:91:35:4a:56:cf:39: 90:a1:16:65:cf:08:07:b3:f5:ab:bc:73:9b:d0:9c: 08:02:38:79:e0:bd:f5:63:74:76:80:32:e1:1c:93: 3e:96:65:1a:dc:0e:8c:c0:2a:79:bd:d2:bb:92:d6: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6B:44:41:82:C3:7A:F3:D8:1B:34:2F:41:BE:A1:46:28:2F:C5:03 X509v3 Authority Key Identifier: keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:9d:35:72:68:0a:67:1b:28:28:5a:0f:f7:93:c2:ca:10:b1: 1c:cb:a7:16:07:5c:f1:41:33:2e:02:3e:0c:a8:b0:db:72:c3: 0a:ca:23:29:4e:c5:01:8a:10:d8:fa:ae:e8:e9:c4:48:c6:a7: 3e:ac:50:c9:9c:1a:fc:23:2c:ae:f5:1c:44:f1:28:e1:79:50: 42:9b:b2:94:be:35:ee:c4:7c:1b:37:bf:ae:80:ed:90:5e:0f: 1f:1c:6d:7b:1d:bb:22:70:3a:d4:3c:4f:51:81:5a:3c:ae:8b: b6:ac:05:3a:1e:e4:48:5d:e2:c4:e9:10:2b:b9:14:7d:16:0c: 07:9a:bb:83:29:6b:1a:4e:0b:c4:7c:a2:57:05:a4:43:5d:21: 34:ff:33:f2:1f:67:b9:72:f5:aa:b3:c0:b2:3a:fc:f9:f2:a4: 99:84:b7:35:ac:f1:fa:31:a4:9f:de:73:90:90:69:49:7a:06: 25:a7:6a:39:f1:70:42:4d:f1:f5:32:52:98:2c:f3:3a:6d:a8: 48:e6:6a:c2:6a:53:fc:83:4e:8b:27:dd:9e:b8:e4:c4:b9:d0: 62:84:20:5d:37:9c:cf:98:8c:04:8d:96:b4:6b:fa:ad:39:57: 6d:d0:6d:17:81:b4:83:ec:5a:fb:9a:f6:61:88:d8:9d:b0:91: 6d:30:8a:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDQ3MjBBMkI3OEM3ODIzOTkyNkZERUU3MzQ0QTM2ODBE QTBEODA3MUQwHhcNMjYwNzE3MDYxMzU5WhcNMjYwNzI0MDYxMzU5WjAYMRYwFAYD VQQDEw02YTU5YzgyNy0xMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTfMofpQ8HxDwolhhCt0yoiSjJOJRI427Y7nxYarGscodtgDWKkSh9Zbf80l GoB4dNqYeBp+MFYING+LObYBL+aI+41D+G6jXiVAeApQF0Qlq73P9RlaPjrT+GS8 bK570ihuHHapliSQIjZUl1WH2l3ulgqtxerq+EhzAIn3afGAU5Jc13sv7R2Ywhhn WTeKFbaiI+vQWLBGRd4HZ0ZM0mz7s2todDPdF4b8VZrMmSYf+BkRrowvUtA5tTiZ EQ+S0x30B0ApZc3ugVaRNUpWzzmQoRZlzwgHs/WrvHOb0JwIAjh54L31Y3R2gDLh HJM+lmUa3A6MwCp5vdK7ktZqeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVrREGC w3rz2Bs0L0G+oUYoL8UDMB8GA1UdIwQYMBaAFEcgoreMeCOZJv3uc0SjaA2g2Acd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi8yN0UzRURBNDk4 MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1a21fZTV6UktOb0RhRFlC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJERi8yN0UzRURBNDk4MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1 a21fZTV6UktOb0RhRFlCeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy501cmgKZxsoKFoP95PCyhCxHMunFgdc8UEzLgI+DKiw23LDCsojKU7FAYoQ 2Pqu6OnESManPqxQyZwa/CMsrvUcRPEo4XlQQpuylL417sR8Gze/roDtkF4PHxxt ex27InA61DxPUYFaPK6LtqwFOh7kSF3ixOkQK7kUfRYMB5q7gylrGk4LxHyiVwWk Q10hNP8z8h9nuXL1qrPAsjr8+fKkmYS3Nazx+jGkn95zkJBpSXoGJadqOfFwQk3x 9TJSmCzzOm2oSOZqwmpT/INOiyfdnrjkxLnQYoQgXTecz5iMBI2WtGv6rTlXbdBt F4G0g+xa+5r2YYjYnbCRbTCK6A== -----END CERTIFICATE-----Generated at Sat Jul 18 03:29:13 2026 by rpki-client