$ rpki-client -vvf rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft File: ypAQR86iWPy4s5sDZNpIokZit00.mft (raw, json) Hash identifier: KnpssElEiJ78E1IBQYaww81xlPbKQCE9syZ6J4RKkVk= Subject key identifier: 3B:E5:C1:A4:74:32:87:81:AD:F9:BD:81:71:E6:6B:9D:F5:EA:17:98 Authority key identifier: CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D Certificate issuer: /CN=A91C987A/serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft Manifest number: 13 Signing time: Wed 19 Aug 2026 09:51:26 +0000 Manifest this update: Wed 19 Aug 2026 09:51:25 +0000 Manifest next update: Wed 26 Aug 2026 09:51:25 +0000 Files and hashes: 1: ypAQR86iWPy4s5sDZNpIokZit00.crl (hash: 1F8dXqbHtkFvgbit0B5sBQmHLkswLY7npuTd2cSjesU=) 2: BD79B614915611F18490ADCA6911F970.roa (hash: QYVNcxQHFREpP33/6Uxpf9LJcni4eo476dd+VvhSGPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C987A, serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Validity Not Before: Aug 19 09:51:25 2026 GMT Not After : Aug 26 09:51:25 2026 GMT Subject: CN=6a857c9e-19d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:b6:0c:c5:fd:e2:a6:16:47:c0:11:4f:e4: 8b:f3:b2:df:72:54:e1:e7:77:16:28:dd:58:81:71: e2:c3:6b:f5:41:c5:8e:10:89:be:c8:2b:bc:71:26: 8f:e3:7e:b9:f8:fe:1f:e8:60:7b:ce:6c:dc:b9:96: 49:c2:ca:97:4a:31:d8:57:b1:8f:a6:d6:33:5d:58: fb:15:02:2e:29:2f:fa:96:ce:88:af:b5:2c:d4:a0: 23:0c:de:7a:25:f5:0e:d1:f6:ee:6c:ce:74:60:8f: fa:49:8b:81:98:3c:91:b6:86:73:2b:7c:85:b0:4d: a8:b0:a7:d1:b1:a4:4c:35:c6:67:2c:13:5e:8b:63: b2:90:47:4f:c0:2e:bb:95:b8:d8:f6:b0:91:1a:14: 70:1b:3a:16:24:6f:de:cd:77:a5:55:42:a1:f6:a6: fe:e2:4a:2c:d6:ce:bb:61:ab:96:2c:6a:42:e5:2f: 64:6b:04:45:ce:16:15:3e:4c:67:69:7c:52:02:be: 9b:59:8a:5f:e1:e6:be:94:a0:d7:39:1a:f1:b8:c1: e1:bd:d8:1c:3b:22:3a:b4:63:28:cc:8e:3f:cc:4b: b2:80:43:2c:11:58:40:ac:96:bd:05:b1:c1:be:5b: 7e:0e:c9:ac:b2:84:0e:02:40:f3:65:a8:c8:32:6b: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:C1:A4:74:32:87:81:AD:F9:BD:81:71:E6:6B:9D:F5:EA:17:98 X509v3 Authority Key Identifier: keyid:CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ab:b7:39:23:f9:fa:91:d5:87:c1:2b:ce:7c:fd:6f:16:d5: a0:7a:bc:f0:64:54:30:ac:ed:75:9e:dd:77:95:33:ac:19:6d: 1b:e8:3f:30:65:0c:3d:4d:8b:b1:ab:55:ee:ad:aa:d8:a3:70: c3:d1:e5:cb:fe:00:a2:2a:ea:59:eb:3d:03:bd:50:c4:6b:b9: f9:d4:6d:26:a4:00:c0:a3:9e:63:f8:24:ce:43:6c:1a:94:1c: e2:e8:27:1c:62:55:45:76:62:4a:66:31:e6:13:07:c0:b8:1f: c4:52:bc:ef:dc:28:fc:12:cd:d5:90:04:0d:b2:e8:0b:e9:c3: 74:18:19:6e:e6:0f:eb:03:5e:50:38:ef:87:2c:45:f7:00:bf: 38:b1:6e:1f:43:ea:5f:f4:14:26:bb:63:a0:2b:ac:38:9f:58: 10:e8:94:cd:73:11:d7:98:4d:9d:2f:ff:b5:74:e4:d8:c1:7e: 53:39:8d:b1:26:1a:68:de:62:9d:17:54:7b:44:2c:50:b5:df: 1e:a1:bd:8d:63:ed:c6:ba:fb:fa:21:40:ee:bd:01:de:56:8f: 72:d5:12:4c:ce:4e:9f:c5:1e:e5:dc:78:3f:1c:bf:c4:89:4c: 1c:92:ec:83:e3:9a:fe:79:fb:43:8d:72:04:ca:f6:98:53:7c: 50:92:30:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTg3QTExMC8GA1UEBRMoQ0E5MDEwNDdDRUEyNThGQ0I4QjM5QjAzNjREQTQ4QTI0 NjYyQjc0RDAeFw0yNjA4MTkwOTUxMjVaFw0yNjA4MjYwOTUxMjVaMBgxFjAUBgNV BAMTDTZhODU3YzllLTE5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSmbYMxf3iphZHwBFP5Ivzst9yVOHndxYo3ViBceLDa/VBxY4Qib7IK7xxJo/j frn4/h/oYHvObNy5lknCypdKMdhXsY+m1jNdWPsVAi4pL/qWzoivtSzUoCMM3nol 9Q7R9u5sznRgj/pJi4GYPJG2hnMrfIWwTaiwp9GxpEw1xmcsE16LY7KQR0/ALruV uNj2sJEaFHAbOhYkb97Nd6VVQqH2pv7iSizWzrthq5YsakLlL2RrBEXOFhU+TGdp fFICvptZil/h5r6UoNc5GvG4weG92Bw7Ijq0YyjMjj/MS7KAQywRWECslr0FscG+ W34OyayyhA4CQPNlqMgya41BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO+XBpHQy h4Gt+b2BceZrnfXqF5gwHwYDVR0jBBgwFoAUypAQR86iWPy4s5sDZNpIokZit00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5ODdBLzIwOEM2QTc2OEIw ODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5NHM1c0RaTnBJb2taaXQw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXBBUVI4NmlXUHk0czVzRFpOcElva1ppdDAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 ODdBLzIwOEM2QTc2OEIwODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5 NHM1c0RaTnBJb2taaXQwMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFq7c5I/n6kdWHwSvOfP1vFtWgerzwZFQwrO11nt13lTOsGW0b6D8wZQw9TYux q1XurarYo3DD0eXL/gCiKupZ6z0DvVDEa7n51G0mpADAo55j+CTOQ2walBzi6Ccc YlVFdmJKZjHmEwfAuB/EUrzv3Cj8Es3VkAQNsugL6cN0GBlu5g/rA15QOO+HLEX3 AL84sW4fQ+pf9BQmu2OgK6w4n1gQ6JTNcxHXmE2dL/+1dOTYwX5TOY2xJhpo3mKd F1R7RCxQtd8eob2NY+3Guvv6IUDuvQHeVo9y1RJMzk6fxR7l3Hg/HL/EiUwckuyD 45r+eftDjXIEyvaYU3xQkjA9 -----END CERTIFICATE-----Generated at Wed Aug 19 15:59:40 2026 by rpki-client