$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json) Hash identifier: rIcnPmMT6TK587rV4jTIVE8BsoYGEZpKiXY+Wgo6CWY= Subject key identifier: 35:E2:21:AC:42:44:AA:8C:46:A8:20:D9:49:12:DF:7C:F8:13:C9:DB Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft Manifest number: 014F Signing time: Sat 17 Oct 2026 06:06:55 +0000 Manifest this update: Sat 17 Oct 2026 06:06:55 +0000 Manifest next update: Sat 24 Oct 2026 06:06:55 +0000 Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: fCRNnBDxwCpTvKXByBL/1CR4amJw77+Cj9TErGSoIOI=) 2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 06:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Validity Not Before: Oct 17 06:06:55 2026 GMT Not After : Oct 24 06:06:55 2026 GMT Subject: CN=6ad3107f-3738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:fc:c6:83:86:57:e6:a2:d7:3c:1b:39:cc: f8:11:e4:ba:5a:97:4f:b7:f1:1e:2e:0f:3a:c6:c3: 1b:88:06:16:fb:b1:2a:70:59:97:2a:41:83:1a:aa: 26:fd:89:e5:da:dc:0e:c9:c0:b8:76:36:4d:b1:39: b4:dc:99:75:28:90:17:25:02:24:b0:00:56:c7:32: 8d:0b:0b:6f:19:13:ea:b3:0f:b5:a3:49:3c:a7:e9: 20:69:a7:11:55:19:e8:54:59:15:a3:8b:85:88:11: d3:74:12:81:73:34:1d:ff:94:e1:90:f0:ea:d8:b4: fc:73:90:92:64:1d:fc:b3:62:c0:6b:7f:92:04:fd: e6:c5:10:4c:82:2c:5c:c7:aa:7c:f9:58:9f:b8:25: be:4e:42:7c:5c:29:ca:49:57:66:29:52:53:f8:79: 46:cb:cd:b2:3f:39:22:dc:13:70:bb:f3:93:00:eb: a2:5c:91:ce:24:bf:1d:7f:2e:4a:6b:be:1d:0a:b7: 33:ca:26:7c:60:53:eb:f2:4f:8f:d5:cf:cc:88:57: b2:41:09:c3:8f:e2:d1:bd:0e:be:30:a8:89:da:0e: e2:a0:5f:07:6b:6e:02:76:b1:09:ea:84:24:d5:5f: 18:26:1e:1f:28:e3:12:24:e7:6e:c5:c3:4b:ad:b9: 75:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E2:21:AC:42:44:AA:8C:46:A8:20:D9:49:12:DF:7C:F8:13:C9:DB X509v3 Authority Key Identifier: keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5c:cb:69:9a:e9:d8:bf:b7:e2:77:7c:1d:6c:05:1b:0a:03: 4d:37:35:9d:99:15:95:93:16:8f:f4:e2:2d:e6:61:b5:e9:9b: 4d:8e:5d:1d:52:80:bc:c3:80:de:cf:e2:9b:f1:35:00:05:a0: c4:b7:5c:ee:a4:32:ef:a3:95:2f:24:d0:93:9c:e6:75:55:1b: 63:c7:e8:82:4d:a8:9f:80:46:c6:af:fb:a0:df:ed:f6:be:96: 0c:c1:8b:23:ab:be:f5:c6:a5:3d:37:85:4d:1e:50:a2:e3:0e: fe:bd:6c:bb:e4:4e:cd:e6:69:e5:be:a5:41:63:b7:51:27:2b: 2a:77:02:a2:e4:00:f3:5c:5e:4c:ef:0a:70:67:4e:ab:89:90: 9c:fa:5e:43:42:4e:5a:a1:d0:42:61:ca:69:79:6a:36:c9:03: 90:09:f5:6c:e4:17:df:d2:cd:d1:80:96:e3:54:ad:4f:14:52: 36:9f:4a:d0:04:41:e1:a8:8d:2c:cd:f5:88:b6:47:36:8b:85: d9:e4:50:83:cd:08:03:80:38:56:cf:ca:d3:e0:67:8f:ff:50: ef:79:aa:07:f1:7d:5d:66:69:d6:f8:76:c5:c0:f1:9b:91:0d: d8:f1:82:05:c6:21:65:88:02:e7:2e:7f:27:b4:54:ca:af:2b: 5e:14:f8:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx RDg4Q0YwQTYwHhcNMjYxMDE3MDYwNjU1WhcNMjYxMDI0MDYwNjU1WjAYMRYwFAYD VQQDEw02YWQzMTA3Zi0zNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh/8xoOGV+ai1zwbOcz4EeS6WpdPt/EeLg86xsMbiAYW+7EqcFmXKkGDGqom /Ynl2twOycC4djZNsTm03Jl1KJAXJQIksABWxzKNCwtvGRPqsw+1o0k8p+kgaacR VRnoVFkVo4uFiBHTdBKBczQd/5ThkPDq2LT8c5CSZB38s2LAa3+SBP3mxRBMgixc x6p8+VifuCW+TkJ8XCnKSVdmKVJT+HlGy82yPzki3BNwu/OTAOuiXJHOJL8dfy5K a74dCrczyiZ8YFPr8k+P1c/MiFeyQQnDj+LRvQ6+MKiJ2g7ioF8Ha24CdrEJ6oQk 1V8YJh4fKOMSJOduxcNLrbl14wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXiIaxC RKqMRqgg2UkS33z4E8nbMB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu R3k1ckYzUUpGQ1VkaU04S1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArlzLaZrp2L+34nd8HWwFGwoDTTc1nZkVlZMWj/TiLeZhtembTY5dHVKAvMOA 3s/im/E1AAWgxLdc7qQy76OVLyTQk5zmdVUbY8fogk2on4BGxq/7oN/t9r6WDMGL I6u+9calPTeFTR5QouMO/r1su+ROzeZp5b6lQWO3UScrKncCouQA81xeTO8KcGdO q4mQnPpeQ0JOWqHQQmHKaXlqNskDkAn1bOQX39LN0YCW41StTxRSNp9K0ARB4aiN LM31iLZHNouF2eRQg80IA4A4Vs/K0+Bnj/9Q73mqB/F9XWZp1vh2xcDxm5EN2PGC BcYhZYgC5y5/J7RUyq8rXhT46Q== -----END CERTIFICATE-----Generated at Sun Oct 18 10:57:43 2026 by rpki-client