$ rpki-client -vvvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: vpGQVi1okG32Cm3wpi0Z+2fUEOCZibnwKiE7pwLBe6k= Subject key identifier: 96:01:1C:AC:4F:A1:66:E2:4D:E4:AD:FD:EB:AE:3C:39:1D:D5:6B:39 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 0231 Signing time: Thu 05 Nov 2026 03:27:09 +0000 Manifest this update: Thu 05 Nov 2026 03:27:09 +0000 Manifest next update: Thu 12 Nov 2026 03:27:09 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: Z0lyNuN44zyp6NU9izvJIv1rIH8//rGtrvFQT9eQupU=) 2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=) 3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: PGgD/Bnz2WyZgRruvBfPNZNU3tBkg7F/up4YO2r/1lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Nov 5 03:27:09 2026 GMT Not After : Nov 12 03:27:09 2026 GMT Subject: CN=6aebf78d-41da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:b8:0c:84:f3:96:83:68:7c:61:3d:74:0c: 70:f7:a0:c5:96:95:cf:d2:a5:43:ac:be:45:88:9b: 3d:df:dc:ca:9f:0d:dd:86:6e:35:1e:92:a4:6d:b5: 19:64:75:32:46:fa:2c:72:2d:92:7d:e6:b0:11:63: 1f:60:5e:eb:9f:4b:6f:71:cf:3e:d4:12:57:f0:3a: 85:e8:8b:1a:5f:0a:d7:15:5a:6b:7b:73:fc:c0:50: b7:0e:d9:56:18:fc:02:a2:6c:83:08:22:43:8b:78: 62:9a:c7:86:38:23:29:d3:55:95:90:3e:2a:94:fb: 9f:ea:d6:79:de:15:3a:6d:4a:76:e9:f5:5e:79:31: 68:06:df:7a:e1:25:51:56:fb:eb:ae:e1:ea:b9:d7: da:1f:a9:61:01:b8:7a:8f:06:12:f6:83:64:6d:e9: 38:35:84:b1:e8:37:14:2e:26:d3:78:a8:6b:7f:41: 8f:fa:ba:57:66:df:c1:26:a4:be:dc:cd:c5:fe:95: c8:6f:bc:78:45:5f:de:ed:00:99:93:84:09:cd:3f: 90:9c:61:3e:bd:de:e7:6a:41:bb:cf:16:3b:d9:b3: 68:32:26:4b:6e:71:68:7c:98:8e:ce:11:3e:4f:34: ab:2b:53:da:34:99:09:68:83:2c:fd:b2:22:8b:a8: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:1C:AC:4F:A1:66:E2:4D:E4:AD:FD:EB:AE:3C:39:1D:D5:6B:39 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a6:81:47:d3:b3:26:59:b8:bf:bc:11:9f:c3:d7:f0:a9:5c: 72:b0:f1:60:ef:81:61:de:39:7e:68:94:40:c2:38:7a:a0:56: 92:b1:15:8f:d9:ca:c1:43:76:36:c5:3f:2a:e9:dd:d2:51:7c: 57:61:de:43:a6:02:4d:79:f6:d5:20:0c:31:93:db:21:bb:82: e1:29:f5:91:d4:5b:6f:ef:6c:2e:ad:9e:8c:08:85:fa:64:c6: 29:5e:d5:11:b9:2a:e6:15:3d:86:80:67:af:20:2e:bd:43:a0: cf:92:98:52:d5:b1:74:0c:d3:3f:cb:fc:d2:be:1f:3a:7b:7c: be:20:99:04:78:83:d3:d5:49:35:2e:83:a8:e6:1d:f5:1b:f2: d6:d8:91:2c:61:23:5d:4c:56:be:4e:fa:2a:e8:09:04:b8:6c: ec:81:db:c6:bc:46:b8:8f:d4:c9:88:08:d4:fc:3f:62:d4:0b: c2:39:1d:be:1b:a5:dc:84:bb:52:9d:21:7c:64:b1:bd:db:82: 76:7e:33:c1:af:d2:c6:5e:68:52:03:b7:7f:66:84:5d:4a:f6: 72:ff:d3:98:bf:98:19:f7:31:cb:46:6d:e2:7a:19:5d:11:9b: 53:4d:30:90:01:ba:7e:a3:6f:ee:5d:1c:1b:57:a3:dc:b6:6c: f8:6d:ff:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjYxMTA1MDMyNzA5WhcNMjYxMTEyMDMyNzA5WjAYMRYwFAYD VQQDEw02YWViZjc4ZC00MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB24DITzloNofGE9dAxw96DFlpXP0qVDrL5FiJs939zKnw3dhm41HpKkbbUZ ZHUyRvosci2SfeawEWMfYF7rn0tvcc8+1BJX8DqF6IsaXwrXFVpre3P8wFC3DtlW GPwComyDCCJDi3himseGOCMp01WVkD4qlPuf6tZ53hU6bUp26fVeeTFoBt964SVR VvvrruHqudfaH6lhAbh6jwYS9oNkbek4NYSx6DcULibTeKhrf0GP+rpXZt/BJqS+ 3M3F/pXIb7x4RV/e7QCZk4QJzT+QnGE+vd7nakG7zxY72bNoMiZLbnFofJiOzhE+ TzSrK1PaNJkJaIMs/bIii6gRXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYBHKxP oWbiTeSt/euuPDkd1Ws5MB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKaBR9OzJlm4v7wRn8PX8KlccrDxYO+BYd45fmiUQMI4eqBWkrEVj9nKwUN2 NsU/Kund0lF8V2HeQ6YCTXn21SAMMZPbIbuC4Sn1kdRbb+9sLq2ejAiF+mTGKV7V Ebkq5hU9hoBnryAuvUOgz5KYUtWxdAzTP8v80r4fOnt8viCZBHiD09VJNS6DqOYd 9Rvy1tiRLGEjXUxWvk76KugJBLhs7IHbxrxGuI/UyYgI1Pw/YtQLwjkdvhul3IS7 Up0hfGSxvduCdn4zwa/Sxl5oUgO3f2aEXUr2cv/TmL+YGfcxy0Zt4noZXRGbU00w kAG6fqNv7l0cG1ej3LZs+G3/yA== -----END CERTIFICATE-----Generated at Thu Nov 5 12:12:52 2026 by rpki-client