$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: 3Oh83aWiduvT65IPWJi+XWh1ZnmsYfC+cFs1NCf+480= Subject key identifier: 3D:81:BB:F4:DD:24:63:3B:92:00:0E:03:F9:1A:3D:8D:92:ED:13:C0 Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0AE8 Signing time: Sun 26 Jul 2026 19:50:21 +0000 Manifest this update: Sun 26 Jul 2026 19:50:20 +0000 Manifest next update: Sun 02 Aug 2026 19:50:20 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: iV9fyVpDTWf1xmSWtIE5f1C6H/zJmgqwaHOS/KGvpS4=) 2: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: 1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=) 3: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: B7PIpT06o5yz5X0ICfGhNE1RjQ8ofk6sdiEjNK1EArU=) 4: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: 9jHgiW6B1sqLvSJnd17xl6prg5mUxXRdfL0P2w6JRHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Jul 26 19:50:20 2026 GMT Not After : Aug 2 19:50:20 2026 GMT Subject: CN=6a6664fc-f8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:88:b2:f3:12:e3:bf:32:df:fe:50:cf:b8: 73:e3:22:ac:fa:55:08:26:ec:1b:03:a4:56:38:c6: 0d:4f:87:81:88:a8:b6:78:b6:54:8c:32:9b:ee:d6: 92:7e:8c:76:4f:3f:02:90:74:2a:41:0f:80:3e:38: cb:57:95:e0:b2:d2:83:08:46:fc:42:a5:64:b6:e1: f7:d1:d4:d8:48:48:d3:5e:e3:49:8c:c9:1f:81:0d: c1:ed:84:84:6e:d8:a3:f2:11:d7:ad:0d:a3:dc:be: 9c:88:24:a1:79:2c:60:74:28:c2:cd:e3:8a:02:32: 97:fe:94:1f:76:75:af:57:ef:ba:f5:ee:3d:4d:41: 54:68:da:a5:d8:95:f6:7d:ac:1b:3d:4a:f8:ff:6e: 6c:4e:88:98:09:f9:59:6d:65:93:e4:42:5c:30:c2: 7f:5e:24:0d:8f:05:44:7c:be:01:af:24:2b:30:aa: c9:1d:a2:e5:c2:e7:eb:7a:d2:8e:5c:a9:c3:3c:85: fc:cc:ba:a3:30:77:e8:9a:da:4d:f8:be:6c:28:ec: c9:e3:73:c7:22:cd:62:c5:e6:b8:62:07:27:5e:75: 72:85:ca:84:1c:70:ac:7b:4b:c2:d7:71:86:90:8a: 56:59:7a:c5:c4:64:1a:15:0b:9b:66:fe:60:30:48: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:BB:F4:DD:24:63:3B:92:00:0E:03:F9:1A:3D:8D:92:ED:13:C0 X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:01:b8:2a:cf:a9:b7:67:c2:15:f7:33:e4:1d:09:7d:f2:0e: be:c6:7e:d3:c4:35:57:5d:b4:d0:65:b4:3c:c3:60:ba:40:2c: 98:e8:69:5a:76:f8:c3:34:78:b5:a6:40:06:06:45:1b:15:52: a8:75:c7:98:10:26:ed:a7:37:55:43:61:4d:ea:f7:11:39:d5: 9a:4a:d1:71:7c:67:01:12:03:dc:75:a6:33:42:84:3d:d5:8f: 9a:aa:71:96:d3:e6:db:7d:a8:ad:2e:a6:5a:1a:98:a0:fa:e5: 00:bf:9c:4e:91:77:66:9c:3f:37:5b:cc:c5:e6:f5:9c:1b:86: 21:38:5b:ae:d0:04:a7:f9:be:3b:dc:3d:6a:b8:e9:05:6d:20: ce:3b:68:a3:db:f2:4b:3e:ef:3f:a4:6d:dc:cd:f8:e9:fa:65: ea:1f:e6:2b:f8:76:8a:53:5a:da:22:fa:7f:78:39:8a:32:d4: 8e:cd:14:f0:5e:78:cd:cd:bc:53:8a:22:db:07:3c:d1:54:b5: 12:3d:43:1a:08:e2:fd:64:88:fe:0a:8c:6f:f5:64:a1:4f:56: f4:9b:77:11:7c:7b:b7:41:b0:3b:50:ba:97:d0:a6:b6:62:30: 01:3c:70:b7:86:02:01:22:91:ec:52:75:8c:a3:ea:83:0a:90: cd:d9:96:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYwNzI2MTk1MDIwWhcNMjYwODAyMTk1MDIwWjAYMRYwFAYD VQQDEw02YTY2NjRmYy1mOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI+IsvMS478y3/5Qz7hz4yKs+lUIJuwbA6RWOMYNT4eBiKi2eLZUjDKb7taS fox2Tz8CkHQqQQ+APjjLV5XgstKDCEb8QqVktuH30dTYSEjTXuNJjMkfgQ3B7YSE btij8hHXrQ2j3L6ciCSheSxgdCjCzeOKAjKX/pQfdnWvV++69e49TUFUaNql2JX2 fawbPUr4/25sToiYCflZbWWT5EJcMMJ/XiQNjwVEfL4BryQrMKrJHaLlwufretKO XKnDPIX8zLqjMHfomtpN+L5sKOzJ43PHIs1ixea4YgcnXnVyhcqEHHCse0vC13GG kIpWWXrFxGQaFQubZv5gMEiewQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2Bu/Td JGM7kgAOA/kaPY2S7RPAMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATwG4Ks+pt2fCFfcz5B0JffIOvsZ+08Q1V1200GW0PMNgukAsmOhpWnb4wzR4 taZABgZFGxVSqHXHmBAm7ac3VUNhTer3ETnVmkrRcXxnARID3HWmM0KEPdWPmqpx ltPm232orS6mWhqYoPrlAL+cTpF3Zpw/N1vMxeb1nBuGIThbrtAEp/m+O9w9arjp BW0gzjtoo9vySz7vP6Rt3M346fpl6h/mK/h2ilNa2iL6f3g5ijLUjs0U8F54zc28 U4oi2wc80VS1Ej1DGgji/WSI/gqMb/VkoU9W9Jt3EXx7t0GwO1C6l9CmtmIwATxw t4YCASKR7FJ1jKPqgwqQzdmWSA== -----END CERTIFICATE-----Generated at Sun Jul 26 23:27:12 2026 by rpki-client