$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft File: Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json) Hash identifier: 7FwFlN17B1cB99RNt/1tL9AJ/pJJMsiUl+7eIqGO8b4= Subject key identifier: 1D:3B:BC:BC:3D:19:2E:8D:E0:54:1F:33:76:46:EC:7F:9E:54:77:4F Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E Certificate issuer: /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft Manifest number: 7A Signing time: Tue 27 Oct 2026 08:04:24 +0000 Manifest this update: Tue 27 Oct 2026 08:04:23 +0000 Manifest next update: Tue 03 Nov 2026 08:04:23 +0000 Files and hashes: 1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: i1IMLAJ75mt6ofbt4GTYa5ecyc9Oee28XM/rmDbXBqQ=) 2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E Validity Not Before: Oct 27 08:04:23 2026 GMT Not After : Nov 3 08:04:23 2026 GMT Subject: CN=6ae05b08-2c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4b:e9:01:a1:6f:8a:3a:3c:a1:ed:91:4a:e6: 88:f0:c7:ee:91:3a:10:7e:fc:3d:c2:3a:d4:1f:ba: 8c:c8:b2:ee:28:23:27:31:53:d7:c8:37:9a:f6:2a: 65:09:35:3e:25:b6:0e:65:06:46:4e:d9:47:38:7e: c2:e1:67:b5:15:6e:ff:06:dc:d1:9e:e7:f6:7a:25: ac:2c:40:16:bd:82:87:01:2d:10:e5:ac:af:70:c7: 95:f7:6e:18:e3:91:a8:ec:69:7a:df:8d:a0:7e:1d: ec:e8:48:9f:4d:be:0b:90:26:b6:d1:a4:91:b6:e0: 5c:21:e3:da:17:de:53:69:aa:d2:9f:db:84:8f:cf: 48:1e:2c:ca:4c:70:ec:d0:e7:e2:9a:53:9e:04:aa: 99:9e:86:51:0c:54:61:2a:90:88:bc:9e:50:6a:3d: 63:48:8b:79:36:e6:bc:2e:56:d1:52:49:98:a6:e4: 0b:55:e8:a3:ad:68:65:d7:5e:b1:ab:5e:47:2e:14: 28:0a:ca:99:f6:0e:80:33:bd:4b:9c:07:e5:90:ea: 55:1e:48:c8:bc:aa:4c:e9:8f:2d:fd:bc:28:b5:44: 55:92:cf:54:1e:a9:e3:c9:c8:93:cd:27:7a:96:f6: c4:e2:33:7a:e3:4e:59:eb:45:99:78:83:16:88:a9: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:BC:BC:3D:19:2E:8D:E0:54:1F:33:76:46:EC:7F:9E:54:77:4F X509v3 Authority Key Identifier: keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ae:37:d0:af:b9:3a:94:b5:43:3a:16:47:15:44:28:e3:94: a5:f0:0f:10:f7:3c:41:80:43:61:79:86:ef:4f:72:27:67:c3: 07:4c:06:13:a8:06:ec:a9:78:a4:1a:c0:bb:e0:6d:04:c0:b0: 46:db:a0:e9:6c:51:d7:6c:4c:b0:ab:d3:e1:73:2f:9f:1d:7a: c8:92:34:5e:07:91:67:30:ed:39:3c:b8:97:bf:98:59:26:ba: 0d:29:67:59:dc:3d:0c:de:09:a4:aa:b1:84:44:d9:98:b1:eb: 59:a3:49:fe:b1:d2:92:fc:5a:24:7a:4d:ef:04:d2:68:77:56: 0f:f4:85:fb:99:9a:aa:9f:97:4d:5b:0c:d9:e4:9f:d8:e6:00: 30:53:31:7d:fc:17:da:a4:cf:57:15:fc:d8:ac:ba:60:b3:b5: 17:4d:7f:1e:57:ce:45:b7:ab:e6:50:14:56:b3:41:5f:57:ed: 4f:5e:85:8d:e3:7e:d8:7a:3f:8a:8d:7e:c8:de:71:1b:d9:89: 25:b7:72:bd:02:64:14:91:9f:34:93:5e:17:f1:9f:fb:42:48: 00:6c:92:88:fd:d7:85:2c:78:e2:c3:61:91:c6:78:25:1a:75: dc:5c:ed:e4:06:6f:7a:a0:7f:f5:05:21:e0:7e:91:d3:35:0a: 68:d6:6c:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEQ5NzExMC8GA1UEBRMoNjM0OUNGNzE3QjM0MDk2MzM1RDFGQzM5N0JDNTA0MDY0 OEE3OEYwRTAeFw0yNjEwMjcwODA0MjNaFw0yNjExMDMwODA0MjNaMBgxFjAUBgNV BAMTDTZhZTA1YjA4LTJjMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxS+kBoW+KOjyh7ZFK5ojwx+6ROhB+/D3COtQfuozIsu4oIycxU9fIN5r2KmUJ NT4ltg5lBkZO2Uc4fsLhZ7UVbv8G3NGe5/Z6JawsQBa9gocBLRDlrK9wx5X3bhjj kajsaXrfjaB+HezoSJ9NvguQJrbRpJG24Fwh49oX3lNpqtKf24SPz0geLMpMcOzQ 5+KaU54EqpmehlEMVGEqkIi8nlBqPWNIi3k25rwuVtFSSZim5AtV6KOtaGXXXrGr XkcuFCgKypn2DoAzvUucB+WQ6lUeSMi8qkzpjy39vCi1RFWSz1QeqePJyJPNJ3qW 9sTiM3rjTlnrRZl4gxaIqcbZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHTu8vD0Z Lo3gVB8zdkbsf55Ud08wHwYDVR0jBBgwFoAUY0nPcXs0CWM10fw5e8UEBkinjw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwRDk3LzEwQTk5QTBBMTc4 MzExRjFCN0FBQzBGRjI3M0Q4QzY3L1kwblBjWHMwQ1dNMTBmdzVlOFVFQmtpbmp3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTBuUGNYczBDV00xMGZ3NWU4VUVCa2luanc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw RDk3LzEwQTk5QTBBMTc4MzExRjFCN0FBQzBGRjI3M0Q4QzY3L1kwblBjWHMwQ1dN MTBmdzVlOFVFQmtpbmp3NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzrjfQr7k6lLVDOhZHFUQo45Sl8A8Q9zxBgENheYbvT3InZ8MHTAYTqAbsqXik GsC74G0EwLBG26DpbFHXbEywq9Phcy+fHXrIkjReB5FnMO05PLiXv5hZJroNKWdZ 3D0M3gmkqrGERNmYsetZo0n+sdKS/Fokek3vBNJod1YP9IX7mZqqn5dNWwzZ5J/Y 5gAwUzF9/BfapM9XFfzYrLpgs7UXTX8eV85Ft6vmUBRWs0FfV+1PXoWN437Yej+K jX7I3nEb2Yklt3K9AmQUkZ80k14X8Z/7QkgAbJKI/deFLHjiw2GRxnglGnXcXO3k Bm96oH/1BSHgfpHTNQpo1myA -----END CERTIFICATE-----Generated at Tue Oct 27 20:42:50 2026 by rpki-client