$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: oXjV6PKIUhaVE5aP41tWQ7Bbx5udPKXZhEbkCagQNa4= Subject key identifier: 0F:B9:CB:FA:D2:01:36:86:55:C5:41:01:16:21:EB:49:44:3C:09:7F Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 025E Signing time: Thu 27 Aug 2026 01:56:11 +0000 Manifest this update: Thu 27 Aug 2026 01:56:10 +0000 Manifest next update: Thu 03 Sep 2026 01:56:10 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: GTcuD3O0MmK3qZzU4RwZRQjs6SZIdP+dFn0qGfbLvrY=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: 3A4re4g/qR0hFco4Eir5ke45w0NqiUsRtZgbYDBtDZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 01:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: Aug 27 01:56:10 2026 GMT Not After : Sep 3 01:56:10 2026 GMT Subject: CN=6a8f993b-d510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:85:66:8a:df:ac:53:37:c6:3f:97:41:24: 75:07:00:2f:23:06:48:58:a7:2c:af:38:a7:3c:05: b3:e1:81:18:a2:c2:9f:6d:b7:5b:87:d6:39:9a:e7: 3a:ef:39:6e:2e:f0:4e:93:bc:0e:9e:65:de:a9:58: cd:94:ed:03:cb:ce:93:20:95:95:b3:cd:b2:dd:18: 18:e7:95:07:5b:1f:91:c4:f4:d5:58:e9:27:f5:95: fe:e5:e3:30:cb:4c:0a:5c:6d:85:87:05:c2:22:e6: 02:21:6c:c3:c7:7a:2f:67:6e:38:81:56:10:62:81: a7:d6:f5:c1:00:2d:64:82:a5:5f:74:c1:4a:43:eb: 3f:dc:9b:fa:3c:c4:50:a9:48:f6:b6:32:4d:51:b0: 5f:37:5a:49:f5:1d:2e:e0:81:0a:be:85:d4:33:41: 42:26:2e:c1:0e:0e:47:b8:be:3f:e1:d9:2b:c8:01: 22:ae:88:5f:16:af:01:3a:61:1d:c3:e3:6d:2a:d6: 53:ae:92:59:f7:80:60:39:d3:3b:7c:4f:75:71:ca: 7c:b1:05:44:37:b3:3b:4d:c9:56:8e:70:8c:2d:81: d3:5d:2a:53:45:26:17:17:9a:4f:af:65:63:90:37: 64:b7:e9:11:3d:84:07:c1:f1:75:b6:c2:07:f0:fb: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B9:CB:FA:D2:01:36:86:55:C5:41:01:16:21:EB:49:44:3C:09:7F X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8c:d1:88:b3:85:57:1b:fe:0d:09:1b:b3:c5:58:7a:8b:dd: 74:67:95:a4:0b:85:3a:15:19:f9:e5:e7:b3:72:b6:a1:75:6d: 9f:32:94:0b:cf:92:42:81:4b:fd:35:5c:29:b0:e5:0b:d3:c7: a8:ff:14:6b:6e:a9:7a:80:35:9d:ae:c3:6d:dd:dc:7d:4c:ce: d4:d8:b8:c6:57:3f:dc:f7:c4:96:a1:47:bd:a8:ff:a8:b8:0e: 79:75:9e:e1:cc:57:a8:1a:1a:4b:fb:98:c5:c0:1e:14:f9:17: 58:fe:52:8e:8e:c7:1f:8d:4f:e8:4c:30:e6:ec:03:8f:74:d0: 02:a7:74:68:20:9a:d0:03:87:f3:b6:0c:34:31:6f:04:7c:3f: a0:30:d5:d0:11:ab:8d:bf:9b:c0:85:f8:36:37:41:dc:62:58: ac:d8:42:7d:b8:14:d4:e9:78:60:9a:24:44:04:e7:b6:34:e3: e4:45:e5:9e:50:88:57:8d:e4:9c:f3:4d:1a:a8:1f:a2:3c:24: 93:44:d5:6a:86:3e:6b:20:73:04:3f:5e:c0:f2:1e:04:c0:59: 0d:1c:b4:03:8d:6b:54:38:d4:1a:81:6f:f7:ed:57:4a:ee:40: ba:c5:31:22:b7:d6:c1:c8:18:2f:a6:7b:54:88:37:a9:80:72: 49:65:6a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjYwODI3MDE1NjEwWhcNMjYwOTAzMDE1NjEwWjAYMRYwFAYD VQQDEw02YThmOTkzYi1kNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJWFZorfrFM3xj+XQSR1BwAvIwZIWKcsrzinPAWz4YEYosKfbbdbh9Y5muc6 7zluLvBOk7wOnmXeqVjNlO0Dy86TIJWVs82y3RgY55UHWx+RxPTVWOkn9ZX+5eMw y0wKXG2FhwXCIuYCIWzDx3ovZ244gVYQYoGn1vXBAC1kgqVfdMFKQ+s/3Jv6PMRQ qUj2tjJNUbBfN1pJ9R0u4IEKvoXUM0FCJi7BDg5HuL4/4dkryAEirohfFq8BOmEd w+NtKtZTrpJZ94BgOdM7fE91ccp8sQVEN7M7TclWjnCMLYHTXSpTRSYXF5pPr2Vj kDdkt+kRPYQHwfF1tsIH8PsHcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+5y/rS ATaGVcVBARYh60lEPAl/MB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4zRiLOFVxv+DQkbs8VYeovddGeVpAuFOhUZ+eXns3K2oXVtnzKUC8+SQoFL /TVcKbDlC9PHqP8Ua26peoA1na7Dbd3cfUzO1Ni4xlc/3PfElqFHvaj/qLgOeXWe 4cxXqBoaS/uYxcAeFPkXWP5Sjo7HH41P6Eww5uwDj3TQAqd0aCCa0AOH87YMNDFv BHw/oDDV0BGrjb+bwIX4NjdB3GJYrNhCfbgU1Ol4YJokRATntjTj5EXlnlCIV43k nPNNGqgfojwkk0TVaoY+ayBzBD9ewPIeBMBZDRy0A41rVDjUGoFv9+1XSu5AusUx IrfWwcgYL6Z7VIg3qYBySWVq+Q== -----END CERTIFICATE-----Generated at Thu Aug 27 11:30:23 2026 by rpki-client