$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json) Hash identifier: 7HKkjNm+Pwwd3PUfvK/KaSNHa0smKZzqCcet6fBq840= Subject key identifier: EE:8D:63:9E:21:43:3B:3E:3A:3C:51:47:9E:9F:B1:32:7A:BC:0B:4A Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Certificate serial: 107C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft Manifest number: 1065 Signing time: Tue 06 Oct 2026 17:28:21 +0000 Manifest this update: Tue 06 Oct 2026 17:28:20 +0000 Manifest next update: Tue 13 Oct 2026 17:28:20 +0000 Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: lQvlICmES7rWzihQomp/T4Pt7xsikYZxEWvaKbWdN58=) 2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: 8Pao0AT8dxW6T4CwAgWpHWpXxG/CEjpNqpmyQLKWTcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4220 (0x107c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Validity Not Before: Oct 6 17:28:20 2026 GMT Not After : Oct 13 17:28:20 2026 GMT Subject: CN=6ac52fb5-a92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:1c:3b:f3:45:af:6e:ea:f4:cd:61:2a:81: 15:fa:f6:39:e6:c1:9f:f9:bc:74:d4:1e:bc:a0:38: 98:72:17:2d:f0:ae:50:40:21:05:bb:9b:fc:d3:89: ac:ee:6e:9f:9f:c7:c6:c5:a6:cc:01:4b:e0:ea:d7: c6:ea:d8:3f:ed:e1:7f:f4:63:d6:99:ed:f9:0c:c1: 32:46:f1:66:28:c8:21:14:e8:be:a1:7b:2a:06:8a: e6:cb:48:57:ed:1d:ce:4e:89:e4:4d:0a:a8:0c:19: 99:a0:bf:87:5b:a8:b8:52:de:a5:97:82:99:e7:81: b3:94:df:43:0a:4c:f9:3c:99:b7:d9:47:96:d7:a8: ff:bd:fd:c4:fa:f3:d9:c9:4b:10:cf:1a:9f:98:44: 77:be:f8:0e:b9:d6:5e:d7:7c:45:5a:5c:0f:82:1a: a9:08:8e:bf:36:d7:a9:dd:50:df:68:23:08:09:69: e5:95:a9:ed:cb:41:9e:be:11:55:d3:a3:24:97:03: bc:ac:b5:ec:d2:6c:ff:61:9d:f7:9d:32:6b:f5:76: 75:99:db:7e:4d:f3:3c:a2:dd:d9:0d:16:18:89:cc: 1d:ed:49:7a:31:ac:59:3f:28:25:28:d2:47:29:3d: de:42:fb:72:4e:b0:88:3c:0d:83:8d:b6:fe:dc:11: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:63:9E:21:43:3B:3E:3A:3C:51:47:9E:9F:B1:32:7A:BC:0B:4A X509v3 Authority Key Identifier: keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d2:58:ff:04:db:e6:49:b7:67:9d:dc:5e:56:2c:da:94:38: ec:bf:6c:55:b9:74:ee:8a:e5:c2:58:b0:5c:92:01:64:46:33: 3c:51:40:ca:4b:1b:78:7e:e2:74:c8:3e:d6:63:18:e2:02:86: 79:38:4e:06:61:0e:c6:e2:e9:56:e3:41:82:c4:67:d5:68:64: 7b:58:d6:6e:9b:68:cc:f0:77:1a:7e:f2:42:2c:21:20:14:43: 77:da:90:f1:18:c9:b5:4d:cf:84:7b:19:29:f9:2b:83:d2:9f: 90:55:d9:26:d7:a4:07:f7:26:28:d5:b0:94:08:0d:54:8f:67: 29:fc:0f:2a:fb:26:ad:6f:3a:1e:36:8b:72:fe:e1:4d:74:8a: f2:b8:b4:f7:5e:bc:59:82:da:40:4e:1c:c1:e5:62:18:de:f6: c6:89:d4:3f:4c:d7:a8:22:0f:60:06:e6:b9:ed:74:91:11:3b: 41:22:9a:4b:09:f7:3b:37:a5:2f:5e:27:4f:b7:7e:c2:fb:92: 25:38:69:65:01:24:4c:f3:81:26:43:48:4a:98:df:dd:f2:15: 4f:a5:b5:72:f7:6b:c0:3d:70:5d:03:5d:19:0f:ba:c3:41:4d: 1a:ed:cc:37:59:16:97:e8:aa:c9:59:41:93:e1:e6:8e:b9:01: f5:70:e8:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG QThCREFCODIwHhcNMjYxMDA2MTcyODIwWhcNMjYxMDEzMTcyODIwWjAYMRYwFAYD VQQDEw02YWM1MmZiNS1hOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEgcO/NFr27q9M1hKoEV+vY55sGf+bx01B68oDiYchct8K5QQCEFu5v804ms 7m6fn8fGxabMAUvg6tfG6tg/7eF/9GPWme35DMEyRvFmKMghFOi+oXsqBormy0hX 7R3OTonkTQqoDBmZoL+HW6i4Ut6ll4KZ54GzlN9DCkz5PJm32UeW16j/vf3E+vPZ yUsQzxqfmER3vvgOudZe13xFWlwPghqpCI6/Ntep3VDfaCMICWnllanty0GevhFV 06MklwO8rLXs0mz/YZ33nTJr9XZ1mdt+TfM8ot3ZDRYYicwd7Ul6MaxZPyglKNJH KT3eQvtyTrCIPA2Djbb+3BF1nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6NY54h Qzs+OjxRR56fsTJ6vAtKMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL OVp0T0dXYThFTnY2aTlxNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAotJY/wTb5km3Z53cXlYs2pQ47L9sVbl07orlwliwXJIBZEYzPFFAyksbeH7i dMg+1mMY4gKGeThOBmEOxuLpVuNBgsRn1Whke1jWbptozPB3Gn7yQiwhIBRDd9qQ 8RjJtU3PhHsZKfkrg9KfkFXZJtekB/cmKNWwlAgNVI9nKfwPKvsmrW86HjaLcv7h TXSK8ri09168WYLaQE4cweViGN72xonUP0zXqCIPYAbmue10kRE7QSKaSwn3Ozel L14nT7d+wvuSJThpZQEkTPOBJkNISpjf3fIVT6W1cvdrwD1wXQNdGQ+6w0FNGu3M N1kWl+iqyVlBk+HmjrkB9XDo6g== -----END CERTIFICATE-----Generated at Tue Oct 6 23:12:59 2026 by rpki-client