$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: 8OzJDPdcrQMfKWZKHVKwUT3GOqozNfTMnDR4TS79IH0= Subject key identifier: 02:5F:7E:6C:C9:75:A7:3E:6D:3A:C4:0C:26:0C:24:FD:9E:0B:A7:BB Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 023C Signing time: Fri 21 Aug 2026 02:38:08 +0000 Manifest this update: Fri 21 Aug 2026 02:38:07 +0000 Manifest next update: Fri 28 Aug 2026 02:38:07 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: lT2IMi85uT8qbW0Nhm71KH1K6T6zRxzOFwWAPbYlAo4=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=) 3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=) 4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Aug 21 02:38:07 2026 GMT Not After : Aug 28 02:38:07 2026 GMT Subject: CN=6a87ba10-4dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:05:ce:1b:25:70:8b:e9:0a:b6:8b:21:5d: 95:1e:8f:d6:ee:59:12:63:6b:ba:e5:06:80:67:99: 09:45:bd:d4:ec:67:91:88:18:ae:0a:7c:07:f5:1e: 7d:84:a5:c6:a4:16:91:59:a2:cb:55:00:e4:18:6e: 81:fb:1a:b3:74:10:e4:74:c0:99:62:25:6f:c7:37: 48:49:a5:3a:c4:2a:43:49:9f:72:66:31:39:eb:b4: e1:2b:2c:71:d7:3a:77:23:75:cc:4e:71:d7:d1:cf: 3e:e1:2e:e7:11:92:e3:4c:48:88:cc:b3:65:a3:a7: 7e:b0:7f:1a:34:29:a8:a9:e9:14:3c:e3:bb:79:4a: 18:49:fa:c1:74:30:29:a2:3a:e3:e1:72:92:65:9f: 87:1a:2f:f6:fc:1f:73:7b:fc:d8:a0:ff:22:47:93: df:6a:34:74:fd:65:07:09:fe:ad:67:ae:3d:3b:66: 81:2e:51:90:f8:2e:ac:5d:f6:a7:8e:5f:94:ab:3a: ce:06:25:15:42:4b:ee:34:17:76:41:fb:87:e1:c1: 02:49:a9:23:f8:77:df:1f:1d:65:ed:58:8e:14:13: 60:76:b3:9e:a9:62:9c:82:10:55:60:a3:b8:69:2f: 5f:26:68:14:f4:75:a1:7d:47:fc:02:e9:48:b2:bc: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:7E:6C:C9:75:A7:3E:6D:3A:C4:0C:26:0C:24:FD:9E:0B:A7:BB X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a8:b5:67:1b:1a:82:3f:6b:8f:9a:54:b7:43:ce:26:06:e6: 2e:73:24:aa:7a:c6:59:17:45:df:27:e1:5b:f7:cc:bb:57:b2: 1d:27:28:12:3f:d3:8a:a3:96:14:c1:15:1f:49:4b:31:03:ff: 34:19:36:5f:5f:36:33:01:38:4f:99:00:54:cd:c5:a2:eb:8a: 0a:90:ef:0c:ed:cc:e2:9b:ca:a1:b6:fa:d2:5d:eb:c0:c4:e8: 20:92:69:0f:72:f3:a7:af:bf:7a:2c:90:83:ce:80:88:a4:4c: bc:9e:71:ca:8e:bb:7c:d0:9c:45:6e:be:aa:85:52:2c:3a:8a: 02:b2:5e:9a:d8:0e:16:68:e2:c3:df:1d:88:80:5d:23:7b:b9: e9:e9:7a:89:69:0f:bb:bb:37:ca:07:c0:08:5e:73:c3:e0:7e: b7:78:20:39:bf:21:1a:64:09:16:12:ca:f4:3f:6a:33:ac:0e: 3c:68:5b:14:96:58:34:53:85:00:0f:22:24:fb:f8:4d:8b:a9: a0:93:41:99:f4:34:3d:0b:bc:29:67:4c:d3:3c:55:1a:8d:5c: f7:6f:d8:ad:f0:71:c3:22:f6:75:5d:7b:d1:5e:2c:38:80:8f: 9d:85:12:f5:b1:57:24:ab:ff:37:ef:47:79:23:4f:23:2a:e8: d4:ad:98:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjYwODIxMDIzODA3WhcNMjYwODI4MDIzODA3WjAYMRYwFAYD VQQDEw02YTg3YmExMC00ZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05kFzhslcIvpCraLIV2VHo/W7lkSY2u65QaAZ5kJRb3U7GeRiBiuCnwH9R59 hKXGpBaRWaLLVQDkGG6B+xqzdBDkdMCZYiVvxzdISaU6xCpDSZ9yZjE567ThKyxx 1zp3I3XMTnHX0c8+4S7nEZLjTEiIzLNlo6d+sH8aNCmoqekUPOO7eUoYSfrBdDAp ojrj4XKSZZ+HGi/2/B9ze/zYoP8iR5PfajR0/WUHCf6tZ649O2aBLlGQ+C6sXfan jl+UqzrOBiUVQkvuNBd2QfuH4cECSakj+HffHx1l7ViOFBNgdrOeqWKcghBVYKO4 aS9fJmgU9HWhfUf8AulIsrw9EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJffmzJ dac+bTrEDCYMJP2eC6e7MB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXai1Zxsagj9rj5pUt0POJgbmLnMkqnrGWRdF3yfhW/fMu1eyHScoEj/TiqOW FMEVH0lLMQP/NBk2X182MwE4T5kAVM3FouuKCpDvDO3M4pvKobb60l3rwMToIJJp D3Lzp6+/eiyQg86AiKRMvJ5xyo67fNCcRW6+qoVSLDqKArJemtgOFmjiw98diIBd I3u56el6iWkPu7s3ygfACF5zw+B+t3ggOb8hGmQJFhLK9D9qM6wOPGhbFJZYNFOF AA8iJPv4TYupoJNBmfQ0PQu8KWdM0zxVGo1c92/YrfBxwyL2dV170V4sOICPnYUS 9bFXJKv/N+9HeSNPIyro1K2YRA== -----END CERTIFICATE-----Generated at Sat Aug 22 20:21:25 2026 by rpki-client