$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft File: y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json) Hash identifier: WlhmZfl91n61vUNPFbKUQLA0VYdLUOlM8A3prOx8IfY= Subject key identifier: 72:91:AA:59:EF:2A:C3:66:06:15:60:93:13:5C:B1:DC:43:DD:77:04 Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Certificate serial: 1014 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft Manifest number: 1003 Signing time: Tue 18 Aug 2026 17:40:13 +0000 Manifest this update: Tue 18 Aug 2026 17:40:12 +0000 Manifest next update: Tue 25 Aug 2026 17:40:12 +0000 Files and hashes: 1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: StU3T/2T50+DucuPwAbLHGhimF66Wx+lc8McKOVeRsg=) 2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: RJ14Wr4LV/wXhdMBKMrnSZc5mLGEgm5MX8wuJCoDPHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5C25, serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Validity Not Before: Aug 18 17:40:12 2026 GMT Not After : Aug 25 17:40:12 2026 GMT Subject: CN=6a8498fd-8e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:52:ce:90:13:e7:dc:77:be:e3:7d:b8:e9: 24:b8:71:06:87:d3:52:19:4f:de:a1:69:8b:7c:d0: 1b:fd:31:16:48:70:c1:16:18:38:3c:94:c5:73:1e: ef:eb:71:77:d6:b5:10:0e:de:a0:ec:a6:6d:eb:ac: 4e:a1:d5:47:7b:65:c9:9c:7e:55:00:6f:27:f9:54: 0b:b4:3a:92:91:71:f7:48:4e:61:3d:7c:f2:76:13: f2:63:3b:7f:5f:eb:7f:65:1a:41:05:f6:2b:70:d8: 0d:dc:34:ce:ee:75:69:f9:34:48:a3:ac:c6:54:cb: b1:69:d3:35:ee:97:d4:89:9a:21:6f:36:b9:f8:1a: 00:57:cd:4e:4f:74:f0:ac:4f:00:10:85:1f:58:6d: 48:8d:45:ee:46:e2:25:a8:13:79:08:18:d3:53:72: b2:5c:34:9e:93:ca:ad:4b:e4:fb:15:74:23:9c:58: 9f:01:ba:8e:c9:a6:3d:6e:33:7e:4c:ff:8a:bf:5c: 1e:e0:03:02:20:45:e0:a5:d8:83:f0:45:5b:f3:26: 93:d5:34:6b:ee:0a:07:31:07:09:80:20:7c:84:8a: fe:40:8f:28:e2:39:d1:f6:61:6a:99:3c:91:93:1c: a7:ed:5f:e9:2c:3d:77:7d:c3:df:df:1a:af:b7:a6: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:91:AA:59:EF:2A:C3:66:06:15:60:93:13:5C:B1:DC:43:DD:77:04 X509v3 Authority Key Identifier: keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bb:0d:64:32:27:3f:d6:54:7f:3c:8c:bd:7f:53:73:14:f5: 2e:19:f6:53:c8:0b:0a:3c:e1:f8:39:db:68:d3:80:7f:f6:88: e0:7f:61:d4:ae:73:f4:3d:57:1b:62:70:6c:bb:9b:77:bd:9c: b9:95:ca:41:e3:57:2b:e2:06:44:9e:01:f4:af:3c:80:6b:1b: 02:f6:73:39:7c:25:a8:3e:62:ec:14:69:a8:60:ba:ca:f9:ea: 8c:64:68:d3:5c:b7:2c:35:e6:d2:d1:67:00:e2:a7:23:80:3d: 42:49:c1:ad:35:01:fb:97:85:7e:be:b2:25:dc:d1:0f:96:31: 69:b1:a0:18:98:ba:18:d2:f6:74:00:c7:e1:71:e1:4f:11:8b: f3:06:fb:0e:53:c5:79:74:ae:ff:f5:24:a4:c5:46:7c:22:60: 26:0d:b8:50:06:5e:6c:d8:47:c7:5c:7c:c9:e9:04:82:57:0b: ff:bd:ed:12:23:15:43:70:e0:85:77:6f:84:ce:77:5a:27:62: 28:00:f2:f8:ae:20:4b:84:a4:7d:ca:0d:26:08:c3:dd:e4:a3: cd:ef:37:1b:2c:6d:c7:0b:cd:8f:bd:00:c4:91:b9:2c:a8:e5: 3e:7d:86:00:e9:f7:f9:30:42:f5:d8:9c:ce:bb:d4:ca:32:2b: b2:e7:9b:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVDMjUxMTAvBgNVBAUTKENCRjJBOURBODhBQzA4RjhENTEwNkRFQ0JENzJENkZB MDlDODE4RTkwHhcNMjYwODE4MTc0MDEyWhcNMjYwODI1MTc0MDEyWjAYMRYwFAYD VQQDEw02YTg0OThmZC04ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqklSzpAT59x3vuN9uOkkuHEGh9NSGU/eoWmLfNAb/TEWSHDBFhg4PJTFcx7v 63F31rUQDt6g7KZt66xOodVHe2XJnH5VAG8n+VQLtDqSkXH3SE5hPXzydhPyYzt/ X+t/ZRpBBfYrcNgN3DTO7nVp+TRIo6zGVMuxadM17pfUiZohbza5+BoAV81OT3Tw rE8AEIUfWG1IjUXuRuIlqBN5CBjTU3KyXDSek8qtS+T7FXQjnFifAbqOyaY9bjN+ TP+Kv1we4AMCIEXgpdiD8EVb8yaT1TRr7goHMQcJgCB8hIr+QI8o4jnR9mFqmTyR kxyn7V/pLD13fcPf3xqvt6aZQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKRqlnv KsNmBhVgkxNcsdxD3XcEMB8GA1UdIwQYMBaAFMvyqdqIrAj41RBt7L1y1voJyBjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUMyNS82ODdBMTBBNjc2 NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQalZFRzNzdlhMVy1nbklH T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lfS3Ayb2lzQ1BqVkVHM3N2WExXLWduSUdPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUMyNS82ODdBMTBBNjc2NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQ alZFRzNzdlhMVy1nbklHT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbsNZDInP9ZUfzyMvX9TcxT1Lhn2U8gLCjzh+DnbaNOAf/aI4H9h1K5z9D1X G2JwbLubd72cuZXKQeNXK+IGRJ4B9K88gGsbAvZzOXwlqD5i7BRpqGC6yvnqjGRo 01y3LDXm0tFnAOKnI4A9QknBrTUB+5eFfr6yJdzRD5YxabGgGJi6GNL2dADH4XHh TxGL8wb7DlPFeXSu//UkpMVGfCJgJg24UAZebNhHx1x8yekEglcL/73tEiMVQ3Dg hXdvhM53WidiKADy+K4gS4SkfcoNJgjD3eSjze83GyxtxwvNj70AxJG5LKjlPn2G AOn3+TBC9diczrvUyjIrsuebrQ== -----END CERTIFICATE-----Generated at Wed Aug 19 17:59:11 2026 by rpki-client