$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: RN3y625NLuQ46vROlUpmihN0hgb6vXXL8Rfn3Vq/QRc= Subject key identifier: 0E:FB:C1:4D:F2:7D:EF:8D:48:2C:AF:17:4B:F0:7A:61:3A:E8:C5:CB Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 21C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 21B2 Signing time: Tue 18 Aug 2026 16:00:01 +0000 Manifest this update: Tue 18 Aug 2026 16:00:00 +0000 Manifest next update: Tue 25 Aug 2026 16:00:00 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: 017gdp4aKQFNfy/wEsv/S9s0oWPoQpK6xq7VIf6I0H0=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: cxHZgIn5a1/ZA9XMExrABMXo9q2aRlc+y7PTtXON5ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8641 (0x21c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: Aug 18 16:00:00 2026 GMT Not After : Aug 25 16:00:00 2026 GMT Subject: CN=6a848181-62f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:a4:09:29:1c:0c:cb:e3:b9:76:09:f8:e4: 30:55:9b:a2:11:7c:81:44:d0:ec:73:47:99:a7:f2: 6e:17:4f:32:1d:db:bb:f4:82:cc:2f:6f:73:a4:5b: 3e:b5:67:43:13:11:7f:7c:eb:09:be:fc:92:aa:26: 1b:d7:a0:a8:a9:d2:5b:d6:1c:90:48:56:0b:3f:4a: 98:67:1b:23:03:93:45:ef:71:de:be:fb:f3:9a:8e: d5:d8:2f:3b:80:a0:4a:66:29:a2:85:e7:95:14:23: 3d:5c:6b:e6:fb:c5:e0:28:18:c9:ad:55:30:fa:69: cb:0f:e4:33:0c:42:24:a9:ff:e3:0b:12:bb:23:1b: 09:e9:c8:37:d3:6c:3c:bf:40:78:e4:44:77:9e:ce: b1:92:18:1f:3e:df:d6:2c:d3:26:f3:9e:a5:52:2a: 0d:7f:69:be:70:2d:d0:8e:b6:6f:75:12:14:2b:ad: a5:db:7d:4a:79:70:a7:96:4e:82:c4:26:a7:c1:35: 41:3f:2b:3a:f3:a4:91:ff:6a:6b:c4:d0:70:18:7a: 07:86:57:eb:d6:67:02:ff:35:35:3c:a1:02:93:12: 92:e3:23:f1:19:1e:96:70:c4:f5:29:e9:c4:6e:a5: f6:41:cb:ce:99:5e:9b:4f:c5:c5:17:dc:fe:03:44: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:C1:4D:F2:7D:EF:8D:48:2C:AF:17:4B:F0:7A:61:3A:E8:C5:CB X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:29:08:fe:0a:ae:02:b5:25:bc:9b:1a:86:5d:1c:e9:1b:aa: a1:b1:1f:c3:75:d7:b8:0c:ba:56:15:b3:63:5d:85:a7:f5:05: e1:26:66:25:14:07:7c:83:5d:8f:39:a6:69:8f:83:d3:c1:06: 7e:51:10:8b:10:0b:82:27:48:d4:ec:ad:d8:ae:4f:87:9d:9f: 21:19:10:40:d8:5e:b8:83:3f:cb:e4:35:52:b8:3b:2b:65:34: 07:72:76:f2:3c:92:58:3a:76:27:bc:25:02:cf:95:97:7a:8d: 2f:65:93:2a:e6:24:52:1e:70:c8:63:68:88:a2:fa:e7:13:82: ae:4e:54:75:36:20:b2:80:ed:87:c6:b6:42:52:1d:30:a9:cc: e2:ee:c3:8e:f6:dd:bd:a7:37:44:0f:a1:cb:8f:b5:12:40:ce: 0b:42:c5:f2:8d:96:60:d3:40:33:79:f8:4c:4e:b1:e1:ff:08: 0e:0c:f3:f8:7f:a8:52:d0:3f:6f:ef:6a:17:39:3c:69:2c:b0: 99:d3:f3:44:a7:5f:49:5a:ec:d5:b1:c1:e5:15:1d:36:58:0d: 2b:86:24:22:6d:24:0f:44:c5:3d:07:e6:7b:08:68:eb:de:e8: 4f:85:2d:b9:e3:57:33:f8:cd:b1:c0:f3:3c:7f:7a:d0:47:2a: fe:f1:98:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjYwODE4MTYwMDAwWhcNMjYwODI1MTYwMDAwWjAYMRYwFAYD VQQDEw02YTg0ODE4MS02MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0akCSkcDMvjuXYJ+OQwVZuiEXyBRNDsc0eZp/JuF08yHdu79ILML29zpFs+ tWdDExF/fOsJvvySqiYb16CoqdJb1hyQSFYLP0qYZxsjA5NF73Hevvvzmo7V2C87 gKBKZimiheeVFCM9XGvm+8XgKBjJrVUw+mnLD+QzDEIkqf/jCxK7IxsJ6cg302w8 v0B45ER3ns6xkhgfPt/WLNMm856lUioNf2m+cC3QjrZvdRIUK62l231KeXCnlk6C xCanwTVBPys686SR/2prxNBwGHoHhlfr1mcC/zU1PKECkxKS4yPxGR6WcMT1KenE bqX2QcvOmV6bT8XFF9z+A0RdhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA77wU3y fe+NSCyvF0vwemE66MXLMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCkI/gquArUlvJsahl0c6RuqobEfw3XXuAy6VhWzY12Fp/UF4SZmJRQHfINd jzmmaY+D08EGflEQixALgidI1Oyt2K5Ph52fIRkQQNheuIM/y+Q1Urg7K2U0B3J2 8jySWDp2J7wlAs+Vl3qNL2WTKuYkUh5wyGNoiKL65xOCrk5UdTYgsoDth8a2QlId MKnM4u7Djvbdvac3RA+hy4+1EkDOC0LF8o2WYNNAM3n4TE6x4f8IDgzz+H+oUtA/ b+9qFzk8aSywmdPzRKdfSVrs1bHB5RUdNlgNK4YkIm0kD0TFPQfmewho697oT4Ut ueNXM/jNscDzPH960Ecq/vGYMw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:29 2026 by rpki-client