$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: LWMf9p698wH49+4dB4i9Uf2MBBVwTKCIhBRjypg85iQ= Subject key identifier: 44:41:DF:89:C1:04:5A:0E:17:97:82:6A:DE:7B:71:88:7B:F6:07:AD Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 021D Signing time: Sun 11 Oct 2026 03:31:15 +0000 Manifest this update: Sun 11 Oct 2026 03:31:15 +0000 Manifest next update: Sun 18 Oct 2026 03:31:15 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: lISOEctFox2p1QnzQByHx/ico39Pl0Vg30AhTmoos+Y=) 2: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: EnDDWuZHL62S0BPn5UnWaSBwzsCmr35SdWgaj/fTSDE=) 3: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: nhipcqCRahKjZ7pabpVlQXPUYNPrNjWPoR5hykm0s/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Oct 11 03:31:15 2026 GMT Not After : Oct 18 03:31:15 2026 GMT Subject: CN=6acb0303-2c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ef:79:e8:1f:2d:d1:e5:4c:da:02:d8:2b:b7: 77:28:09:4a:d6:04:e3:6f:ef:d5:83:6c:61:49:d4: c3:92:62:6c:e6:7a:00:c3:03:0c:0f:0a:5d:2b:97: fa:3d:ac:de:9d:94:fb:7d:db:4e:94:61:d4:64:86: 51:b2:6e:41:3a:82:6b:66:48:da:76:3c:15:43:19: 48:ca:8d:4a:d1:48:3c:8d:e0:aa:04:0d:1d:f1:66: ff:5c:90:7e:8e:f5:55:51:cf:9e:43:27:ef:58:85: 23:02:11:58:2d:8f:14:53:a6:2c:cd:37:0f:fa:1b: 4f:1c:8d:84:3e:03:08:28:3e:20:34:54:3f:b0:29: 25:e6:46:f4:1f:08:53:54:a4:d8:8d:cd:ba:6c:29: 1e:67:b2:76:e8:8e:1c:75:f8:b7:4a:11:0e:41:1a: 44:f4:24:25:89:0d:e3:98:cd:01:df:c6:03:cd:58: 28:ee:91:e5:dd:b1:6c:67:ee:01:7d:31:c6:ef:ba: dc:9e:ee:c4:52:56:9d:ca:87:83:c5:a7:e3:b7:c5: 69:a8:25:75:8e:94:8d:dc:ac:f4:c2:a7:98:8e:1a: e5:91:2b:7e:dc:98:0f:0d:c0:11:08:26:eb:71:9e: 83:21:6f:6f:87:8f:6b:bb:4a:1f:34:05:e6:97:4b: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:DF:89:C1:04:5A:0E:17:97:82:6A:DE:7B:71:88:7B:F6:07:AD X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:cb:6b:81:e5:26:0b:91:7c:08:cc:4f:d5:10:a7:eb:63:97: 82:7a:11:99:94:19:08:71:50:fe:c3:75:9a:cb:71:47:78:21: 7a:8b:53:51:53:6f:b5:f5:a0:be:d6:d7:f1:96:df:33:50:6d: 7b:f3:8c:e8:88:f1:d0:de:5e:1b:4c:3d:8f:2d:b3:2e:1f:68: 05:e4:1c:40:19:01:ef:a7:14:d1:ce:1d:f1:48:3e:e5:1e:ca: 64:31:11:fa:7f:27:fd:73:f9:8d:f8:d4:51:62:1e:45:39:c6: 31:48:11:cc:cd:23:fb:0c:17:a7:ec:59:b8:cc:6d:a9:3e:45: 4e:85:20:11:82:85:a1:ae:37:c0:e3:da:5a:12:0b:e5:65:a0: 91:dc:86:34:e7:4d:54:cf:a2:99:59:21:d6:6f:6c:42:16:c3: b6:6b:a2:af:a0:a2:22:8d:32:1f:af:b0:2d:75:4b:7e:45:0c: 4f:9c:c8:8c:f9:93:59:9e:de:6d:53:85:46:f2:c5:3f:ce:0e: af:95:a0:8d:8b:5b:7e:f4:a0:71:84:33:4d:5a:d1:6f:08:4a: d1:53:f0:98:31:fd:25:fa:fd:70:18:f6:08:73:c6:a4:16:fe: 81:fb:d8:91:ca:14:6d:55:5e:74:75:1e:ee:8f:9a:71:1f:c8: 76:7e:96:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjYxMDExMDMzMTE1WhcNMjYxMDE4MDMzMTE1WjAYMRYwFAYD VQQDEw02YWNiMDMwMy0yYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh+956B8t0eVM2gLYK7d3KAlK1gTjb+/Vg2xhSdTDkmJs5noAwwMMDwpdK5f6 PazenZT7fdtOlGHUZIZRsm5BOoJrZkjadjwVQxlIyo1K0Ug8jeCqBA0d8Wb/XJB+ jvVVUc+eQyfvWIUjAhFYLY8UU6YszTcP+htPHI2EPgMIKD4gNFQ/sCkl5kb0HwhT VKTYjc26bCkeZ7J26I4cdfi3ShEOQRpE9CQliQ3jmM0B38YDzVgo7pHl3bFsZ+4B fTHG77rcnu7EUladyoeDxafjt8VpqCV1jpSN3Kz0wqeYjhrlkSt+3JgPDcARCCbr cZ6DIW9vh49ru0ofNAXml0sY1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERB34nB BFoOF5eCat57cYh79getMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMstrgeUmC5F8CMxP1RCn62OXgnoRmZQZCHFQ/sN1mstxR3gheotTUVNvtfWg vtbX8ZbfM1Bte/OM6Ijx0N5eG0w9jy2zLh9oBeQcQBkB76cU0c4d8Ug+5R7KZDER +n8n/XP5jfjUUWIeRTnGMUgRzM0j+wwXp+xZuMxtqT5FToUgEYKFoa43wOPaWhIL 5WWgkdyGNOdNVM+imVkh1m9sQhbDtmuir6CiIo0yH6+wLXVLfkUMT5zIjPmTWZ7e bVOFRvLFP84Or5WgjYtbfvSgcYQzTVrRbwhK0VPwmDH9Jfr9cBj2CHPGpBb+gfvY kcoUbVVedHUe7o+acR/Idn6WHA== -----END CERTIFICATE-----Generated at Sun Oct 11 21:17:08 2026 by rpki-client