$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json) Hash identifier: XjZQ/BWEFdp5E292N81GxzMwyiZTtvGbBx5GlqeAYYA= Subject key identifier: 38:70:A2:CE:9D:EC:22:CB:DB:44:EA:4D:39:55:C9:AC:B5:A5:76:50 Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft Manifest number: 0866 Signing time: Mon 20 Jul 2026 21:21:23 +0000 Manifest this update: Mon 20 Jul 2026 21:21:22 +0000 Manifest next update: Mon 27 Jul 2026 21:21:22 +0000 Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: 8O/8cVRwA1AvkcjUwcX+rWvORnLGeQevEEwh+32nR6Y=) 2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: ariwM0UNsN9RHsI11tEsRZAkUo+gH7DpYJGLIoLRlPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Validity Not Before: Jul 20 21:21:22 2026 GMT Not After : Jul 27 21:21:22 2026 GMT Subject: CN=6a5e9152-f7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:f5:2c:79:37:2b:4f:3b:fc:ec:2d:61:4d: e8:c9:8a:f5:43:52:5d:6b:cc:65:79:1a:de:9d:07: 40:8b:66:46:a5:f9:d1:ee:2c:bd:23:83:e9:ba:28: 30:a1:cf:99:11:1f:30:2f:f0:e3:de:08:37:43:2b: f7:0f:51:66:e7:ca:d1:4d:e3:6c:5f:29:3f:32:b0: 55:ea:a0:a2:08:92:4d:2f:f1:76:46:30:96:c2:f7: 0d:b2:5f:64:3a:aa:f0:a5:30:9e:50:76:6c:23:da: 00:87:eb:24:0d:8b:28:c8:e3:39:7a:90:bb:f8:49: 1b:a6:33:2d:f7:13:fa:63:92:55:12:b4:09:6a:7f: 17:0d:28:1e:39:70:48:ce:41:3a:62:1f:eb:75:fe: 97:8e:3c:ff:d9:55:48:6e:d2:99:67:73:f5:8d:3b: 89:4d:85:55:dd:91:c2:d1:32:3b:28:5d:d0:19:01: 9d:75:61:11:8f:b8:b9:a0:41:b7:4a:d1:3a:cd:83: 2d:83:e7:9f:b4:b3:5a:6a:8c:57:9f:a0:db:28:27: 11:ac:b4:b2:61:5d:23:21:16:01:8f:12:40:e6:fa: 67:38:e5:84:1e:e1:96:1b:d9:38:f3:d3:a6:c9:c3: 8f:f5:30:be:55:fe:77:c8:9f:98:61:36:35:36:e1: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:70:A2:CE:9D:EC:22:CB:DB:44:EA:4D:39:55:C9:AC:B5:A5:76:50 X509v3 Authority Key Identifier: keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0c:f7:2c:c5:24:82:f3:e3:b8:1c:8f:e8:5f:94:93:9c:d9: 55:5b:48:e5:cd:e4:6a:fc:11:b8:66:8f:d3:9d:7a:8d:b3:52: 32:3f:d6:3f:b4:cc:dd:62:e2:5c:85:71:e4:9c:54:48:8b:ce: 55:74:cc:15:3d:7b:39:dc:de:0e:62:1b:b8:82:28:99:18:35: 65:1c:11:0d:98:2d:97:cf:dc:bc:fc:64:a7:76:f0:b7:b5:70: 97:0a:b0:a0:fb:49:24:2a:af:f4:89:4c:0c:b6:46:58:c4:58: de:30:77:0f:76:d6:57:8b:c4:0e:30:66:c9:9e:b9:24:09:3c: 90:4b:f2:f9:b2:2f:a8:fa:e2:b8:5c:58:bb:e0:8c:6d:01:d4: b5:df:9d:3d:4b:62:07:74:18:81:80:d2:10:53:cb:cd:c2:34: 53:e6:37:43:93:63:b0:37:59:24:39:df:bc:6b:87:9b:51:b9: b5:a4:02:b2:1a:a0:90:ac:5e:7b:f3:f2:1f:40:39:83:dd:dc: 1b:ba:94:67:60:d0:ac:99:3a:c9:4f:20:ce:11:b4:70:39:38: 8b:a4:e3:3c:60:b5:1c:69:18:0c:83:0a:74:ec:1f:f0:7b:f9: 23:c0:b9:ac:cb:e8:1f:64:a3:25:26:58:21:fb:93:b6:d3:83: b1:0e:ca:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0MkUxMTAvBgNVBAUTKENBODVFMTMzQzFFMjM5NjE0QzlDNTc3ODAxMThCREIz MDk1MjhFNzYwHhcNMjYwNzIwMjEyMTIyWhcNMjYwNzI3MjEyMTIyWjAYMRYwFAYD VQQDEw02YTVlOTE1Mi1mN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwav1LHk3K087/OwtYU3oyYr1Q1Jda8xleRrenQdAi2ZGpfnR7iy9I4Ppuigw oc+ZER8wL/Dj3gg3Qyv3D1Fm58rRTeNsXyk/MrBV6qCiCJJNL/F2RjCWwvcNsl9k OqrwpTCeUHZsI9oAh+skDYsoyOM5epC7+EkbpjMt9xP6Y5JVErQJan8XDSgeOXBI zkE6Yh/rdf6Xjjz/2VVIbtKZZ3P1jTuJTYVV3ZHC0TI7KF3QGQGddWERj7i5oEG3 StE6zYMtg+eftLNaaoxXn6DbKCcRrLSyYV0jIRYBjxJA5vpnOOWEHuGWG9k489Om ycOP9TC+Vf53yJ+YYTY1NuFGQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhwos6d 7CLL20TqTTlVyay1pXZQMB8GA1UdIwQYMBaAFMqF4TPB4jlhTJxXeAEYvbMJUo52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQyRS9ENkE3RkY0ODBE MTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9XRk1uRmQ0QVJpOXN3bFNq blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvWGhNOEhpT1dGTW5GZDRBUmk5c3dsU2puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQyRS9ENkE3RkY0ODBEMTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9X Rk1uRmQ0QVJpOXN3bFNqblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPQz3LMUkgvPjuByP6F+Uk5zZVVtI5c3kavwRuGaP0516jbNSMj/WP7TM3WLi XIVx5JxUSIvOVXTMFT17OdzeDmIbuIIomRg1ZRwRDZgtl8/cvPxkp3bwt7Vwlwqw oPtJJCqv9IlMDLZGWMRY3jB3D3bWV4vEDjBmyZ65JAk8kEvy+bIvqPriuFxYu+CM bQHUtd+dPUtiB3QYgYDSEFPLzcI0U+Y3Q5NjsDdZJDnfvGuHm1G5taQCshqgkKxe e/PyH0A5g93cG7qUZ2DQrJk6yU8gzhG0cDk4i6TjPGC1HGkYDIMKdOwf8Hv5I8C5 rMvoH2SjJSZYIfuTttODsQ7KhQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:33:19 2026 by rpki-client