$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: YOlsCYuEofjde0z6mutiCySrKvFcCS5e3KhvuNpx+t8= Subject key identifier: 69:7A:ED:4A:68:B4:89:C7:90:D4:87:7E:76:66:39:A8:02:1D:1C:9D Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0CD9 Signing time: Tue 18 Aug 2026 18:43:41 +0000 Manifest this update: Tue 18 Aug 2026 18:43:41 +0000 Manifest next update: Tue 25 Aug 2026 18:43:41 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: 30vtUzSb/HrLDmKSmqZtVMtZxvrRJcuTznfphDL6i0c=) 2: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=) 3: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Aug 18 18:43:41 2026 GMT Not After : Aug 25 18:43:41 2026 GMT Subject: CN=6a84a7dd-4173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:03:46:e4:f9:71:9a:65:d8:54:25:d7:a7: 4b:91:b1:80:11:af:69:83:74:00:f8:a5:bc:d7:65: 11:c9:c7:4b:83:af:af:bd:97:f7:1d:e3:90:31:af: 3e:93:ef:de:8d:fe:8f:64:c9:68:56:27:d1:f8:5f: c2:2c:25:1c:93:1e:6f:f5:20:ce:f8:49:12:cd:62: ee:97:18:ef:2f:02:4e:35:05:a5:cf:7a:f9:5e:f0: c4:8d:e9:cd:92:46:a5:f1:e9:b9:cd:18:45:b2:d6: 6d:fc:67:59:66:41:be:cb:0d:66:d5:f1:f0:c1:ba: 77:92:cd:ad:92:7e:23:75:34:fe:2d:5f:61:b1:92: 01:c1:cd:5e:d9:ea:45:83:65:cb:0f:93:a0:f8:d0: 4a:ec:7a:3c:8a:b5:a4:7a:25:21:20:a4:fe:ea:08: 0f:82:2c:1a:b7:e4:f0:5a:34:6d:1c:d1:85:d7:5f: 83:4b:58:8b:00:4d:55:c1:bf:f5:78:ff:c6:71:62: bd:d5:a1:7d:c7:3e:51:37:96:c1:f3:f2:51:06:eb: ba:bd:4b:ee:d6:47:d1:b1:36:0e:d2:f1:6b:8e:7d: f5:6a:6a:80:13:4e:04:8a:db:17:0d:6f:3a:a3:0c: b0:04:5a:20:62:b8:51:2a:e3:f6:67:bd:d3:8c:dd: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7A:ED:4A:68:B4:89:C7:90:D4:87:7E:76:66:39:A8:02:1D:1C:9D X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ea:8b:53:39:bb:f2:5f:22:2e:30:5d:1f:70:68:b5:33:94: e6:27:99:60:0c:f5:8d:1e:1b:c9:fa:68:3f:7b:ab:f5:ef:9c: 06:17:25:f2:78:12:00:d3:fb:5a:83:d0:12:60:af:fe:d9:ab: dc:66:7c:ff:bc:8c:42:c4:41:cd:c3:ac:9f:8b:dd:c9:c9:a7: f5:3e:b8:e4:8c:e8:fe:93:f4:f5:df:b8:9f:46:73:0d:2c:6d: 20:a9:2c:fb:0c:0f:b5:53:f2:62:bc:7b:d0:e4:a3:42:31:a4: e0:73:ab:b9:0d:71:fa:ec:78:86:45:b2:69:b5:5a:81:69:26: 5d:55:9e:d4:25:e3:b0:68:0c:c4:d5:6f:9b:ca:03:c8:9d:e7: 9b:43:b7:fb:85:25:67:ed:23:cd:ed:35:00:c5:4f:fd:36:a7: a3:da:78:a9:60:3b:51:31:40:1b:67:e6:17:64:6c:83:94:66: ad:0f:9b:c1:eb:7c:8c:01:83:bb:77:08:5f:d4:11:db:2d:c8: b4:ea:ad:bb:71:85:86:a3:97:c1:b2:1d:43:d7:42:db:a5:fb: 96:98:68:1c:0d:ac:bb:61:61:c2:78:fc:b1:6f:b0:57:a1:d6: ee:5c:1b:5e:eb:3a:d6:4d:a4:56:bd:e7:25:51:4d:d5:bc:92: 7d:37:9c:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjYwODE4MTg0MzQxWhcNMjYwODI1MTg0MzQxWjAYMRYwFAYD VQQDEw02YTg0YTdkZC00MTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0sDRuT5cZpl2FQl16dLkbGAEa9pg3QA+KW812URycdLg6+vvZf3HeOQMa8+ k+/ejf6PZMloVifR+F/CLCUckx5v9SDO+EkSzWLulxjvLwJONQWlz3r5XvDEjenN kkal8em5zRhFstZt/GdZZkG+yw1m1fHwwbp3ks2tkn4jdTT+LV9hsZIBwc1e2epF g2XLD5Og+NBK7Ho8irWkeiUhIKT+6ggPgiwat+TwWjRtHNGF11+DS1iLAE1Vwb/1 eP/GcWK91aF9xz5RN5bB8/JRBuu6vUvu1kfRsTYO0vFrjn31amqAE04EitsXDW86 owywBFogYrhRKuP2Z73TjN08FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGl67Upo tInHkNSHfnZmOagCHRydMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVuqLUzm78l8iLjBdH3BotTOU5ieZYAz1jR4byfpoP3ur9e+cBhcl8ngSANP7 WoPQEmCv/tmr3GZ8/7yMQsRBzcOsn4vdycmn9T645Izo/pP09d+4n0ZzDSxtIKks +wwPtVPyYrx70OSjQjGk4HOruQ1x+ux4hkWyabVagWkmXVWe1CXjsGgMxNVvm8oD yJ3nm0O3+4UlZ+0jze01AMVP/Tano9p4qWA7UTFAG2fmF2Rsg5RmrQ+bwet8jAGD u3cIX9QR2y3ItOqtu3GFhqOXwbIdQ9dC26X7lphoHA2su2Fhwnj8sW+wV6HW7lwb Xus61k2kVr3nJVFN1bySfTecRQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:29 2026 by rpki-client