$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: NaS6HHdQ5KWUSPIUFcF6smOB4nz/3Zh0xOi/wLM0sEM= Subject key identifier: 3C:B2:C9:96:43:29:8B:D2:07:D1:B4:BA:EA:71:5D:A6:09:6F:84:0E Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 0232 Signing time: Sat 05 Sep 2026 02:33:24 +0000 Manifest this update: Sat 05 Sep 2026 02:33:23 +0000 Manifest next update: Sat 12 Sep 2026 02:33:23 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: /ritE0CNke1G0eFexdgnkjlXuaolHQXKc48QkYaGPz0=) 2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) 3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 4: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Sep 5 02:33:23 2026 GMT Not After : Sep 12 02:33:23 2026 GMT Subject: CN=6a9b7f74-3a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:b1:e9:4e:e9:bd:45:5c:f9:29:92:90:9f: 68:3b:01:7e:3c:61:77:bb:5c:f4:d1:2c:ef:ee:a2: a7:66:71:04:72:73:58:bc:c9:59:94:12:c6:06:1e: 9d:49:8a:0d:eb:28:d3:14:79:c9:b0:70:c1:ef:bb: 4b:c8:6f:ed:23:9a:d4:f2:75:38:88:a3:d1:53:2a: d3:5d:bf:ce:3a:bb:52:9f:be:57:7b:24:46:46:1c: 8c:ec:5e:01:85:dd:0e:c1:cc:d0:95:a7:c8:d7:61: f4:4c:99:c4:57:3b:4d:ff:37:e0:29:74:d9:6c:32: c9:1a:40:8e:a2:e6:e6:25:b6:89:fd:3e:77:ce:e0: b2:0c:66:fe:41:a1:3d:6a:1c:67:50:e9:1e:96:a5: d9:ae:76:c8:74:5c:d9:02:da:92:51:1b:b3:3d:47: a7:39:ea:f7:73:2a:51:9d:48:44:1e:17:86:c9:67: 46:b2:25:c1:a7:86:8f:be:33:32:77:15:33:52:ed: 6f:ee:59:3d:cf:96:b5:fe:45:45:92:7e:fb:02:45: 2d:f4:0c:fc:5f:30:8c:d1:6d:d5:8a:6f:94:9f:11: fe:c6:90:91:73:29:6b:06:2e:bf:52:15:62:96:f1: 27:31:79:a0:fe:ec:38:ca:d1:a6:54:da:d0:dd:0b: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B2:C9:96:43:29:8B:D2:07:D1:B4:BA:EA:71:5D:A6:09:6F:84:0E X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fc:b8:46:d0:e4:9a:b8:6e:39:83:0e:31:c4:de:5d:9d:bb: 30:04:ea:1c:af:d4:1e:1c:7f:8c:77:12:cb:63:bf:34:e6:c5: 1d:61:73:0f:17:fd:47:dd:3a:cf:36:8f:9a:51:57:49:54:c3: 7e:df:ef:84:4a:4c:e9:c0:68:bb:90:49:d3:0e:e6:75:c5:37: 58:c8:31:3a:eb:20:67:85:80:3c:a0:20:13:cd:d1:3e:d5:9b: 43:2e:8a:f0:9e:28:68:12:d9:4d:2f:94:e9:ab:0f:bf:c3:cc: 7d:bf:b0:41:b6:25:5a:80:2c:24:97:66:2c:91:7e:f8:c3:5c: 54:60:3a:49:54:68:bc:f4:a4:ca:67:ef:eb:51:dc:47:0e:44: 4b:54:f8:a9:46:90:80:a7:e4:0d:37:14:df:d3:bb:2f:09:12: 5b:6e:e9:2c:96:48:f6:cb:a2:80:e6:5f:05:9b:83:32:64:6a: 96:db:2c:26:a9:5c:78:f8:e8:8e:c4:ba:9c:e8:8d:b3:77:79: 5d:0d:17:2b:ba:65:24:a1:9a:6f:a2:cd:22:85:66:a1:8d:a8: 54:b4:c9:42:4d:77:45:c4:5b:fc:17:8e:83:a8:79:87:55:c3: 7d:f2:60:45:fb:e3:58:d2:69:c1:24:87:47:6c:5e:5f:58:88: 62:66:72:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwOTA1MDIzMzIzWhcNMjYwOTEyMDIzMzIzWjAYMRYwFAYD VQQDEw02YTliN2Y3NC0zYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXKx6U7pvUVc+SmSkJ9oOwF+PGF3u1z00Szv7qKnZnEEcnNYvMlZlBLGBh6d SYoN6yjTFHnJsHDB77tLyG/tI5rU8nU4iKPRUyrTXb/OOrtSn75XeyRGRhyM7F4B hd0OwczQlafI12H0TJnEVztN/zfgKXTZbDLJGkCOoubmJbaJ/T53zuCyDGb+QaE9 ahxnUOkelqXZrnbIdFzZAtqSURuzPUenOer3cypRnUhEHheGyWdGsiXBp4aPvjMy dxUzUu1v7lk9z5a1/kVFkn77AkUt9Az8XzCM0W3Vim+UnxH+xpCRcylrBi6/UhVi lvEnMXmg/uw4ytGmVNrQ3QuTPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyyyZZD KYvSB9G0uupxXaYJb4QOMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtPy4RtDkmrhuOYMOMcTeXZ27MATqHK/UHhx/jHcSy2O/NObFHWFzDxf9R906 zzaPmlFXSVTDft/vhEpM6cBou5BJ0w7mdcU3WMgxOusgZ4WAPKAgE83RPtWbQy6K 8J4oaBLZTS+U6asPv8PMfb+wQbYlWoAsJJdmLJF++MNcVGA6SVRovPSkymfv61Hc Rw5ES1T4qUaQgKfkDTcU39O7LwkSW27pLJZI9suigOZfBZuDMmRqltssJqlcePjo jsS6nOiNs3d5XQ0XK7plJKGab6LNIoVmoY2oVLTJQk13RcRb/BeOg6h5h1XDffJg RfvjWNJpwSSHR2xeX1iIYmZyEA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:44:46 2026 by rpki-client