$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: lCwCq3T1uC/17otvgVY7tMYAZuDvj31bu0mYncRqN1M= Subject key identifier: 5E:7B:5F:AD:C8:FC:94:18:14:3E:3E:CE:9F:38:CB:C9:84:5D:7E:82 Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: DA Signing time: Thu 29 Oct 2026 07:24:11 +0000 Manifest this update: Thu 29 Oct 2026 07:24:11 +0000 Manifest next update: Thu 05 Nov 2026 07:24:11 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: R2hB0VyjjGk/RoZ7scdyVbCcDrwF0apCdaMo9T37Swg=) 2: 56ACADFE47C011F1B54DF0A9AE833773.roa (hash: vxjWyQ9R73CYTlS7zLuzmK55YQslMUO/l+FMKzf2+xM=) 3: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Oct 29 07:24:11 2026 GMT Not After : Nov 5 07:24:11 2026 GMT Subject: CN=6ae2f49b-6158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:ab:d6:a0:bd:fd:b3:42:f1:6d:ca:ef:05: 80:33:b1:66:01:8a:11:eb:18:ee:f9:67:be:c6:91: 4c:65:5a:20:72:93:8a:1a:58:5b:15:a9:d6:0d:5e: 80:7d:14:e7:9f:9a:74:6d:d5:3f:92:b6:b6:43:50: 8b:77:9c:56:56:5a:7a:0b:77:aa:0c:af:b3:b7:09: 1a:0a:68:ed:45:f7:b2:d5:dd:8b:9b:de:5f:68:de: 21:d4:73:04:4a:26:66:af:f1:ca:ac:d0:cd:ba:c8: c6:38:c3:9b:4c:94:2b:58:3b:de:fb:c6:8f:6c:48: 6e:59:81:ff:a8:ec:22:88:ec:f3:f1:98:38:5a:0a: e3:11:6a:5c:ea:41:23:bf:9e:6d:f8:4f:86:00:ca: 79:38:69:31:24:99:d0:5d:72:5a:ae:82:ff:88:2d: 17:bb:6a:14:0c:d0:67:ae:74:d2:80:52:db:df:05: 09:51:b3:8c:af:1e:0e:77:11:56:9b:c0:d4:a2:53: a9:ef:7e:31:2a:f1:fa:fb:55:d9:43:ab:79:1d:16: 86:6e:cf:f6:32:a7:1c:7f:73:86:a8:58:83:ae:55: 7c:b8:f3:8f:69:62:0c:1f:57:45:92:a7:b1:74:39: bf:3b:ea:20:fe:ee:02:6c:de:ea:23:32:ef:08:2b: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7B:5F:AD:C8:FC:94:18:14:3E:3E:CE:9F:38:CB:C9:84:5D:7E:82 X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:41:ac:76:cd:46:b4:61:a4:5c:5f:5c:fd:82:72:9d:d6: ef:44:76:3f:de:6c:a9:33:a6:f4:7f:f6:1d:92:4f:30:24:fb: 9f:86:42:48:f1:6c:28:78:bc:f3:c9:0d:a3:f6:27:db:36:2d: 64:e7:d8:ab:0a:76:69:fe:0f:f4:ab:34:62:ff:99:1b:6c:b3: b9:fc:cb:72:3e:e2:cc:90:ca:0f:01:22:c2:d9:21:ef:09:82: ce:0f:d6:be:a4:ab:ec:63:06:a0:de:a4:e6:a9:78:5c:70:4b: 8e:25:25:e9:71:2d:9e:2d:84:14:5d:16:ac:f5:6e:6c:f6:18: 33:f9:2d:f2:11:ed:77:3b:d0:0f:01:38:32:fe:b9:f0:2b:93: 74:9a:49:b0:cb:91:d2:e4:55:16:2c:c0:41:b1:86:4e:17:a6: ef:ec:a5:07:32:fd:1a:d9:1e:25:a0:34:87:f9:fd:0b:26:67: 70:83:0b:fd:5d:52:75:ec:2b:58:46:18:58:90:f4:4b:7b:9d: 00:e8:bd:86:22:b4:45:c8:7b:c8:23:92:53:01:fe:73:67:de: a0:29:12:c7:e7:95:e3:77:a2:53:48:b1:01:47:0d:f3:aa:e7: 5e:b4:80:fd:08:a2:95:74:06:2a:55:b9:be:3e:aa:d6:ad:d2: 18:65:f4:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDYxNTc3NUE0REUyM0U0NkE4QjU3QzhGN0I5QzlFMUU4 ODZFNUQ4RDUwHhcNMjYxMDI5MDcyNDExWhcNMjYxMTA1MDcyNDExWjAYMRYwFAYD VQQDEw02YWUyZjQ5Yi02MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygOr1qC9/bNC8W3K7wWAM7FmAYoR6xju+We+xpFMZVogcpOKGlhbFanWDV6A fRTnn5p0bdU/kra2Q1CLd5xWVlp6C3eqDK+ztwkaCmjtRfey1d2Lm95faN4h1HME SiZmr/HKrNDNusjGOMObTJQrWDve+8aPbEhuWYH/qOwiiOzz8Zg4WgrjEWpc6kEj v55t+E+GAMp5OGkxJJnQXXJaroL/iC0Xu2oUDNBnrnTSgFLb3wUJUbOMrx4OdxFW m8DUolOp734xKvH6+1XZQ6t5HRaGbs/2Mqccf3OGqFiDrlV8uPOPaWIMH1dFkqex dDm/O+og/u4CbN7qIzLvCCsCjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF57X63I /JQYFD4+zp84y8mEXX6CMB8GA1UdIwQYMBaAFGFXdaTeI+Rqi1fI97nJ4eiG5djV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS83NEMxOEY3MDkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9ZVmQxcE40ajVHcUxWOGozdWNuaDZJYmwy TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS83NEMxOEY3MDkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9ZVmQxcE40ajVH cUxWOGozdWNuaDZJYmwyTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkhtBrHbNRrRhpFxfXP2Ccp3W70R2P95sqTOm9H/2HZJPMCT7n4ZCSPFsKHi8 88kNo/Yn2zYtZOfYqwp2af4P9Ks0Yv+ZG2yzufzLcj7izJDKDwEiwtkh7wmCzg/W vqSr7GMGoN6k5ql4XHBLjiUl6XEtni2EFF0WrPVubPYYM/kt8hHtdzvQDwE4Mv65 8CuTdJpJsMuR0uRVFizAQbGGThem7+ylBzL9GtkeJaA0h/n9CyZncIML/V1Sdewr WEYYWJD0S3udAOi9hiK0Rch7yCOSUwH+c2feoCkSx+eV43eiU0ixAUcN86rnXrSA /QiilXQGKlW5vj6q1q3SGGX0Kw== -----END CERTIFICATE-----Generated at Fri Oct 30 05:04:34 2026 by rpki-client