$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: fGKA5EY6gYo6SWP+sMMg/QapMy0KEqDK+wYzSO81Aa0= Subject key identifier: 4C:D2:C0:86:46:A1:E0:91:94:8A:19:DF:25:36:41:18:38:19:10:63 Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0AFF Signing time: Tue 08 Sep 2026 19:26:19 +0000 Manifest this update: Tue 08 Sep 2026 19:26:18 +0000 Manifest next update: Tue 15 Sep 2026 19:26:18 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: HQQoqTTjc2rv7uLfBh+d6fgMceu12JKrB/kX8btE1yM=) 2: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: 9jHgiW6B1sqLvSJnd17xl6prg5mUxXRdfL0P2w6JRHY=) 3: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: B7PIpT06o5yz5X0ICfGhNE1RjQ8ofk6sdiEjNK1EArU=) 4: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: 1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 19:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Sep 8 19:26:18 2026 GMT Not After : Sep 15 19:26:18 2026 GMT Subject: CN=6aa0615b-fcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:35:e9:e9:4e:44:e6:69:ac:92:f2:2b:2a: bb:3b:14:ce:87:89:b0:73:08:c0:41:65:14:99:a8: e9:2c:08:30:c9:24:1e:ad:a9:2d:29:bb:2d:1a:18: e4:21:5d:08:20:64:dd:da:67:ed:5b:88:de:ed:3a: bf:f0:92:3b:52:2e:47:58:47:36:03:98:cf:cf:4b: 05:62:5c:ba:b9:df:e5:06:48:96:12:95:84:29:ff: 14:55:1c:3d:3c:4e:da:6c:b1:39:22:68:30:bd:7a: 60:cc:4b:cb:6a:5f:39:56:39:41:39:0b:2b:a2:83: 5b:bd:57:d0:6a:ad:36:26:8c:86:65:3d:03:5c:ac: 8f:11:53:82:37:96:b7:52:74:22:15:3b:ea:34:a7: 81:29:ed:c0:12:4e:cd:12:39:fa:08:bf:4d:8d:b7: 3a:89:01:2b:71:56:d5:c2:19:b0:ab:fe:9b:a2:1f: a4:8a:79:8c:4c:0d:f4:65:56:3f:7f:10:ca:d3:40: ae:76:9e:15:72:df:18:86:2f:92:cf:d0:52:09:3a: 19:eb:ab:a3:5d:47:22:f1:f6:26:b6:2e:b1:b9:ae: 88:77:0c:83:6c:a1:9a:3d:c7:e5:d6:2f:07:a1:c5: 07:5b:df:e2:c5:bd:ce:27:1b:c8:7f:23:32:3d:aa: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D2:C0:86:46:A1:E0:91:94:8A:19:DF:25:36:41:18:38:19:10:63 X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6c:a8:b1:58:6f:6c:50:15:b6:35:80:31:ad:85:26:ee:cf: 13:14:66:c0:40:22:72:5d:39:98:20:af:06:18:57:2c:9c:2e: 7f:f0:91:4f:1e:37:e1:98:dd:2a:8b:69:cb:98:1d:1f:c3:12: 93:b6:77:99:ab:98:ba:e4:df:fe:46:76:ce:e4:b7:6c:be:2c: 54:9e:d2:16:d7:53:67:99:c1:82:12:4c:bc:85:04:f3:53:d6: c6:1c:f6:fd:cd:38:87:a6:1f:3f:1d:0e:28:50:10:79:62:0c: 07:d5:95:f8:63:97:b6:58:52:91:12:c5:a2:c9:8b:b5:6a:13: c2:3b:b2:dd:88:b2:e7:a7:bf:36:b0:81:15:2f:9e:e3:48:27: 26:58:d0:f7:d6:29:66:dd:73:50:37:7d:c1:84:b2:5e:52:39: 11:4a:b2:bb:9a:0a:37:34:95:1b:0c:87:99:f6:72:34:40:16: e7:49:44:15:3d:b1:da:ef:cd:76:8f:76:10:44:5a:3f:25:4e: c3:59:cf:a4:b2:03:a1:c0:28:40:bb:a9:07:ab:33:a1:d4:4b: 2b:f8:ad:4b:6c:7b:31:d7:8f:bf:d5:e1:b9:32:61:22:b3:fe: 31:6b:86:94:02:3a:1c:63:cb:74:97:a1:60:57:e0:2b:88:ce: 60:1c:51:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYwOTA4MTkyNjE4WhcNMjYwOTE1MTkyNjE4WjAYMRYwFAYD VQQDEw02YWEwNjE1Yi1mY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcU16elOROZprJLyKyq7OxTOh4mwcwjAQWUUmajpLAgwySQeraktKbstGhjk IV0IIGTd2mftW4je7Tq/8JI7Ui5HWEc2A5jPz0sFYly6ud/lBkiWEpWEKf8UVRw9 PE7abLE5ImgwvXpgzEvLal85VjlBOQsrooNbvVfQaq02JoyGZT0DXKyPEVOCN5a3 UnQiFTvqNKeBKe3AEk7NEjn6CL9Njbc6iQErcVbVwhmwq/6boh+kinmMTA30ZVY/ fxDK00Cudp4Vct8Yhi+Sz9BSCToZ66ujXUci8fYmti6xua6IdwyDbKGaPcfl1i8H ocUHW9/ixb3OJxvIfyMyParUcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzSwIZG oeCRlIoZ3yU2QRg4GRBjMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoWyosVhvbFAVtjWAMa2FJu7PExRmwEAicl05mCCvBhhXLJwuf/CRTx434Zjd Kotpy5gdH8MSk7Z3mauYuuTf/kZ2zuS3bL4sVJ7SFtdTZ5nBghJMvIUE81PWxhz2 /c04h6YfPx0OKFAQeWIMB9WV+GOXtlhSkRLFosmLtWoTwjuy3Yiy56e/NrCBFS+e 40gnJljQ99YpZt1zUDd9wYSyXlI5EUqyu5oKNzSVGwyHmfZyNEAW50lEFT2x2u/N do92EERaPyVOw1nPpLIDocAoQLupB6szodRLK/itS2x7MdePv9XhuTJhIrP+MWuG lAI6HGPLdJehYFfgK4jOYBxRUA== -----END CERTIFICATE-----Generated at Thu Sep 10 05:18:55 2026 by rpki-client