$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: f8InrnPe+mTUO9nyyErNJsu/b2DTzdCBJuKFhUwJq9s= Subject key identifier: 88:A9:E2:3E:D3:A2:DE:09:FA:43:10:33:DE:FF:5B:F7:3F:44:82:76 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 01C3 Signing time: Mon 17 Aug 2026 04:32:35 +0000 Manifest this update: Mon 17 Aug 2026 04:32:34 +0000 Manifest next update: Mon 24 Aug 2026 04:32:34 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: WpMcyQveZC5BP0DQ1Ai+4ZCxmp3bqqBMmgWcmYooazg=) 2: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=) 3: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=) 4: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 04:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Aug 17 04:32:34 2026 GMT Not After : Aug 24 04:32:34 2026 GMT Subject: CN=6a828ee3-8ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:bf:20:2e:3a:59:8e:3a:69:4b:17:32:48: a6:f8:fa:26:a7:9d:88:0b:94:ab:9f:9e:d5:94:87: 8b:1a:a3:64:e2:7d:c9:0c:b2:10:c4:70:3d:fe:47: 9a:2c:8f:96:c2:1b:fb:e8:6b:b2:63:e9:3a:ec:d5: 34:2c:85:a4:22:7d:37:02:a1:f3:84:a5:4f:ab:ec: ab:b5:d7:35:39:3f:76:c3:9c:1f:93:d3:73:86:0d: 0d:2d:52:a6:ac:5f:3f:15:f3:d1:15:33:d3:3e:22: 69:ee:fb:d1:e3:b6:78:25:96:57:b3:6a:11:7d:e8: c1:4a:ba:35:26:b4:e0:49:5f:80:6e:fb:0f:8f:db: d0:74:c9:d5:d5:9c:89:34:21:b3:ab:f5:92:19:30: 86:4b:58:f9:03:d8:78:e8:66:9d:c8:4c:e5:1a:4d: bd:4e:36:24:e7:50:af:3d:f6:2e:76:03:95:a5:d4: d4:b4:1b:6e:07:72:59:36:46:de:d8:8b:f7:2b:31: 7e:c2:27:b5:42:28:b6:14:54:24:1e:fc:a6:d3:1d: 25:92:33:26:0f:09:53:8a:f9:13:e7:14:1a:00:fe: 4f:12:cf:75:d4:31:4a:f3:23:30:e4:41:1c:c8:72: 2d:a0:f9:c3:40:ff:cb:dc:62:06:64:53:19:2a:d9: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:E2:3E:D3:A2:DE:09:FA:43:10:33:DE:FF:5B:F7:3F:44:82:76 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:b0:b8:eb:2e:8f:d7:88:84:bd:56:e1:19:c3:38:2d:a9: 86:e4:ca:9b:b8:80:c4:2a:55:52:d4:2c:b2:02:13:17:a0:ea: bb:5c:68:8a:af:c7:69:91:34:4d:f8:b5:52:c5:a5:71:00:4b: 8c:e5:c6:90:f4:53:f0:f4:fa:9d:cc:d0:6b:b3:11:c2:1a:21: a4:9a:0c:fc:d5:4b:3a:d8:bc:1d:35:fe:d5:98:29:31:8e:5c: 57:42:49:8d:8b:7c:02:7f:d1:fe:47:e3:1b:bb:f5:be:12:e2: 09:71:6e:5e:5a:ae:9e:5a:be:66:8e:9e:48:fc:ef:28:53:ec: 28:46:cb:13:a8:7e:d8:a7:50:11:9d:42:13:66:70:60:c0:e3: 6c:83:59:41:af:d1:0a:49:36:32:78:d2:c1:aa:21:03:d1:82: 50:07:b4:1f:06:80:ce:a4:5f:e1:2f:ee:9e:49:d5:a2:d8:6a: 79:a5:df:68:c4:a3:94:67:d3:f6:ab:ae:21:5e:82:aa:a0:7d: 46:f5:6c:e3:a2:69:e9:c4:78:1c:6e:8b:16:a2:9b:14:a9:d6: fa:3f:15:77:9a:21:97:4a:85:de:f5:25:be:30:7d:a6:f4:4d: d6:86:27:3e:36:2e:b7:6a:2c:4c:d7:5b:e4:78:56:a9:cf:e0: 37:a5:d1:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYwODE3MDQzMjM0WhcNMjYwODI0MDQzMjM0WjAYMRYwFAYD VQQDEw02YTgyOGVlMy04ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlz6/IC46WY46aUsXMkim+Pomp52IC5Srn57VlIeLGqNk4n3JDLIQxHA9/kea LI+Wwhv76GuyY+k67NU0LIWkIn03AqHzhKVPq+yrtdc1OT92w5wfk9Nzhg0NLVKm rF8/FfPRFTPTPiJp7vvR47Z4JZZXs2oRfejBSro1JrTgSV+AbvsPj9vQdMnV1ZyJ NCGzq/WSGTCGS1j5A9h46GadyEzlGk29TjYk51CvPfYudgOVpdTUtBtuB3JZNkbe 2Iv3KzF+wie1Qii2FFQkHvym0x0lkjMmDwlTivkT5xQaAP5PEs911DFK8yMw5EEc yHItoPnDQP/L3GIGZFMZKtmvGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIip4j7T ot4J+kMQM97/W/c/RIJ2MB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9ewuOsuj9eIhL1W4RnDOC2phuTKm7iAxCpVUtQssgITF6Dqu1xoiq/HaZE0 Tfi1UsWlcQBLjOXGkPRT8PT6nczQa7MRwhohpJoM/NVLOti8HTX+1ZgpMY5cV0JJ jYt8An/R/kfjG7v1vhLiCXFuXlqunlq+Zo6eSPzvKFPsKEbLE6h+2KdQEZ1CE2Zw YMDjbINZQa/RCkk2MnjSwaohA9GCUAe0HwaAzqRf4S/unknVothqeaXfaMSjlGfT 9quuIV6CqqB9RvVs46Jp6cR4HG6LFqKbFKnW+j8Vd5ohl0qF3vUlvjB9pvRN1oYn PjYut2osTNdb5HhWqc/gN6XRAA== -----END CERTIFICATE-----Generated at Tue Aug 18 01:07:46 2026 by rpki-client