$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft File: 0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json) Hash identifier: COxOL7na53ovq5nb2/Gncc6av1FXstXbscvEwdJMV+c= Subject key identifier: 7F:A0:D4:70:9C:B1:69:92:9D:C4:77:54:EE:68:94:D0:49:9E:C0:15 Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft Manifest number: 01A8 Signing time: Thu 03 Sep 2026 04:32:51 +0000 Manifest this update: Thu 03 Sep 2026 04:32:50 +0000 Manifest next update: Thu 10 Sep 2026 04:32:50 +0000 Files and hashes: 1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: yMzyNXYi01wsMMoTqM7sFM7iMm73Ko0AlHQraoSMHrA=) 2: C07DC8947E9311F185EA92095FA30FBC.roa (hash: qRg84y5kVRE7bRiBaS6MkjPVv43I0mEppMl+KIu+SBo=) 3: D525D9EE7E9311F19E24FC4D5FA30FBC.roa (hash: /+XJwpoYaaPxuUpocTQ1TOPsH5/A3dpDpHYUXNcoxEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 04:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Validity Not Before: Sep 3 04:32:50 2026 GMT Not After : Sep 10 04:32:50 2026 GMT Subject: CN=6a98f873-5344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:bc:71:d1:c1:10:2f:b3:40:6a:94:da:db: 79:61:c6:47:1f:cf:ec:4b:30:1f:10:17:1f:b8:6e: 8a:0f:ac:b4:7a:a8:a4:1b:77:38:7a:1e:2e:0e:ec: a1:d9:ee:fa:56:7f:31:22:71:4a:52:70:85:64:00: 8b:01:ec:81:e0:7a:48:c9:f6:01:69:b1:d9:9e:bd: 3a:df:c9:95:eb:b0:4d:13:f2:64:83:cd:6c:00:33: 82:ae:cb:19:89:38:85:98:7c:b6:dc:10:91:c6:04: ef:57:b6:ea:16:a1:e0:84:fb:ad:8a:89:56:89:ee: 91:ac:6f:20:39:cb:6c:84:a7:33:2f:92:db:a2:ee: ba:f9:93:2c:dc:2a:81:4f:67:11:47:4f:a3:3d:f5: d1:af:f6:83:8a:a5:5f:17:4f:5a:15:43:47:2c:7a: 21:37:73:63:37:fe:de:6c:67:e6:e9:80:4d:6f:a5: 65:79:02:96:b9:c2:18:b8:2d:c8:e9:9b:cd:ba:5a: c0:fb:79:9d:5a:4c:02:0e:53:03:be:18:e4:23:56: 45:d9:6b:d9:fd:b4:7e:1e:e6:6e:d1:33:d1:dc:33: b6:d7:24:64:e7:6e:63:0c:84:72:71:39:29:8b:c5: b9:ab:b1:df:2c:9b:dd:9d:42:9d:de:95:24:ac:c8: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:D4:70:9C:B1:69:92:9D:C4:77:54:EE:68:94:D0:49:9E:C0:15 X509v3 Authority Key Identifier: keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:29:27:c4:ce:91:6e:77:0f:e3:96:fe:25:8d:cb:73:f3:c6: 6c:c8:86:0f:69:99:13:3b:fc:44:f1:a9:fa:8e:d5:4a:f9:61: 59:83:5c:fd:43:2c:69:bb:97:1e:e0:c4:a5:76:a3:09:48:f0: f9:e7:71:ca:84:61:2f:10:2f:40:d8:1b:b1:4b:b7:e1:30:d6: 96:ba:24:05:10:35:be:d5:11:08:ad:27:b0:d2:44:86:81:10: 88:c1:4d:8c:bf:fa:ab:48:9c:10:f7:6f:5b:6e:25:8a:fc:81: c0:bc:d0:b8:b7:7b:9e:78:2b:07:af:b7:a8:71:04:f5:4b:3c: 79:dc:e4:9c:65:10:8f:6e:ce:fb:a9:5b:ee:0d:6c:14:bf:39: f6:41:d5:e4:31:fd:e7:4f:d0:d8:25:0d:54:dd:d5:ca:bb:23: 0d:0d:4c:d6:60:76:5b:5a:e0:3c:78:c9:cf:a8:22:8d:b2:00: 6d:8d:5a:ee:c6:60:71:96:76:a9:0e:da:77:47:65:c8:60:1f: fd:a3:a5:46:d4:15:55:d4:c9:90:85:06:b2:99:64:de:6d:d9: 4f:08:00:7c:ef:3a:58:ea:c6:4f:7e:3a:ac:b6:80:cb:30:40: 9e:6b:44:f1:9a:fe:30:d9:91:9f:62:b5:e2:6a:68:b3:26:e1: c3:43:b7:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4 NjlEMTc4OTcwHhcNMjYwOTAzMDQzMjUwWhcNMjYwOTEwMDQzMjUwWjAYMRYwFAYD VQQDEw02YTk4Zjg3My01MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaK8cdHBEC+zQGqU2tt5YcZHH8/sSzAfEBcfuG6KD6y0eqikG3c4eh4uDuyh 2e76Vn8xInFKUnCFZACLAeyB4HpIyfYBabHZnr0638mV67BNE/Jkg81sADOCrssZ iTiFmHy23BCRxgTvV7bqFqHghPutiolWie6RrG8gOctshKczL5Lbou66+ZMs3CqB T2cRR0+jPfXRr/aDiqVfF09aFUNHLHohN3NjN/7ebGfm6YBNb6VleQKWucIYuC3I 6ZvNulrA+3mdWkwCDlMDvhjkI1ZF2WvZ/bR+HuZu0TPR3DO21yRk525jDIRycTkp i8W5q7HfLJvdnUKd3pUkrMgFqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+g1HCc sWmSncR3VO5olNBJnsAVMB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0 OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS81MDRDRkZFMjQ0OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1 Z1h3Z0stYTNLQjZHblJlSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXCknxM6RbncP45b+JY3Lc/PGbMiGD2mZEzv8RPGp+o7VSvlhWYNc/UMsabuX HuDEpXajCUjw+edxyoRhLxAvQNgbsUu34TDWlrokBRA1vtURCK0nsNJEhoEQiMFN jL/6q0icEPdvW24livyBwLzQuLd7nngrB6+3qHEE9Us8edzknGUQj27O+6lb7g1s FL859kHV5DH950/Q2CUNVN3VyrsjDQ1M1mB2W1rgPHjJz6gijbIAbY1a7sZgcZZ2 qQ7ad0dlyGAf/aOlRtQVVdTJkIUGsplk3m3ZTwgAfO86WOrGT346rLaAyzBAnmtE 8Zr+MNmRn2K14mposybhw0O3Mg== -----END CERTIFICATE-----Generated at Sat Sep 5 01:09:44 2026 by rpki-client