$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: nT5bjmeRrpjOLe6TfUCO/8/AwQGC8gexEkdPL0S18aA= Subject key identifier: 51:8A:10:7F:97:AA:60:F6:72:C5:4E:CA:CC:C6:E6:02:5B:47:D4:5E Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 08D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 08C6 Signing time: Tue 18 Aug 2026 20:51:38 +0000 Manifest this update: Tue 18 Aug 2026 20:51:37 +0000 Manifest next update: Tue 25 Aug 2026 20:51:37 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: LhzQpEp5h4CiNfpgiyiq/FO9JisfWKS5NRoqJPeRRxY=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: dQd4m5byeKJORC74YKFJB4r+c7cujg4OEtxCIHvr0lM=) 3: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: /mxloS7ClCcaj5x0floJR4T78S/qjwGI70YG2UCZk8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Aug 18 20:51:37 2026 GMT Not After : Aug 25 20:51:37 2026 GMT Subject: CN=6a84c5da-bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:73:9d:f8:79:b5:2b:23:be:ae:96:dd:45: a4:55:18:b6:6c:da:11:ff:8d:eb:9b:1d:7b:d3:d8: 2e:ec:d4:47:8e:00:ea:39:94:92:c3:2e:ae:e8:ac: f6:ed:79:29:22:a0:91:49:24:ba:ff:31:49:6b:85: 61:49:db:99:23:0a:ce:23:3b:15:03:e2:78:b9:e5: f9:de:63:bf:99:59:7a:1d:00:90:74:28:14:eb:5d: 64:f0:44:00:4d:98:28:59:cc:71:5b:ef:1e:0d:f5: 11:7a:a0:74:67:c1:72:86:c1:a7:f7:2d:5a:c5:88: a2:76:b5:7c:90:da:19:35:e5:78:f7:2b:0e:1c:1d: c7:94:ff:4d:53:3d:ce:95:a2:06:eb:ba:45:94:99: 55:f7:73:02:03:75:71:9e:0c:ab:a9:8c:50:2f:a2: e6:57:d7:9c:4c:c8:2a:37:fe:58:33:6d:66:01:9c: 32:96:fd:1e:c3:f4:3e:e9:bf:5c:3b:67:ad:39:d4: ba:d4:cc:44:cd:c6:7a:ff:b6:92:b6:e9:3f:1c:70: 45:c3:60:41:35:b6:3a:f8:f6:0c:56:38:6e:e8:5d: 76:ed:93:60:4e:56:8f:fe:78:dd:d2:34:bf:29:dd: 24:ee:82:48:43:ca:8a:3e:68:62:0d:f6:7c:ae:30: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8A:10:7F:97:AA:60:F6:72:C5:4E:CA:CC:C6:E6:02:5B:47:D4:5E X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fd:e7:c2:7f:54:9a:08:ff:9f:e9:8a:46:69:05:61:fe:c2: 96:b2:ad:1f:8d:c7:36:67:0b:bb:e6:e1:6b:b9:13:71:27:74: 18:84:26:fb:43:77:cb:68:86:59:06:44:09:6a:19:6e:47:3d: 51:e9:5a:c6:ec:6c:60:76:0c:b1:8c:27:1c:8c:27:16:fe:25: a6:a0:37:4a:21:c6:dd:49:88:08:8a:1a:a4:57:69:d6:0d:dc: c8:a1:7f:d4:21:ed:93:17:fe:aa:a8:96:81:ae:97:62:9b:03: 7d:ee:59:d1:86:18:92:48:c6:78:d4:65:3d:ab:98:61:04:77: 4e:7e:4d:8d:dc:3e:74:7e:ba:be:14:5e:fd:60:9b:7b:ae:f7: 33:34:e6:77:b0:89:5a:9c:b9:f7:c8:66:04:b3:20:25:55:b0: 0c:64:e0:49:dc:00:ae:01:4e:fa:ee:cb:3d:1a:ce:f3:23:bc: 97:c5:46:6f:72:5a:91:b7:34:19:cc:62:9d:2f:7b:84:b7:54: 71:7c:fb:4c:ea:5b:8f:31:ab:1c:eb:40:11:58:8b:44:26:b3: 76:35:e9:f8:3a:4f:60:cc:ca:3c:84:dc:b3:a4:14:5a:d4:72: 8f:8d:04:ce:88:ee:5a:aa:98:29:2c:45:82:92:d3:e7:10:6a: a8:0a:81:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwODE4MjA1MTM3WhcNMjYwODI1MjA1MTM3WjAYMRYwFAYD VQQDEw02YTg0YzVkYS1iZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZVznfh5tSsjvq6W3UWkVRi2bNoR/43rmx1709gu7NRHjgDqOZSSwy6u6Kz2 7XkpIqCRSSS6/zFJa4VhSduZIwrOIzsVA+J4ueX53mO/mVl6HQCQdCgU611k8EQA TZgoWcxxW+8eDfUReqB0Z8FyhsGn9y1axYiidrV8kNoZNeV49ysOHB3HlP9NUz3O laIG67pFlJlV93MCA3VxngyrqYxQL6LmV9ecTMgqN/5YM21mAZwylv0ew/Q+6b9c O2etOdS61MxEzcZ6/7aStuk/HHBFw2BBNbY6+PYMVjhu6F127ZNgTlaP/njd0jS/ Kd0k7oJIQ8qKPmhiDfZ8rjAhEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFGKEH+X qmD2csVOyszG5gJbR9ReMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ/3nwn9Umgj/n+mKRmkFYf7ClrKtH43HNmcLu+bha7kTcSd0GIQm+0N3y2iG WQZECWoZbkc9UelaxuxsYHYMsYwnHIwnFv4lpqA3SiHG3UmICIoapFdp1g3cyKF/ 1CHtkxf+qqiWga6XYpsDfe5Z0YYYkkjGeNRlPauYYQR3Tn5Njdw+dH66vhRe/WCb e673MzTmd7CJWpy598hmBLMgJVWwDGTgSdwArgFO+u7LPRrO8yO8l8VGb3Jakbc0 GcxinS97hLdUcXz7TOpbjzGrHOtAEViLRCazdjXp+DpPYMzKPITcs6QUWtRyj40E zojuWqqYKSxFgpLT5xBqqAqBWQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:08 2026 by rpki-client