$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json) Hash identifier: /+rgnstSgWtTAh2N4LtsLUHZ6JD37rYsyirufT/WJ+o= Subject key identifier: 44:00:E2:F5:F9:39:97:0B:FD:65:FC:D3:AF:FB:84:EB:A1:D5:DE:97 Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 11E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft Manifest number: 11CB Signing time: Sun 04 Oct 2026 17:11:51 +0000 Manifest this update: Sun 04 Oct 2026 17:11:51 +0000 Manifest next update: Sun 11 Oct 2026 17:11:51 +0000 Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: 7sz7B2HZulP4x06IP6g1rcb+F3d3hZ9xkPdzjF9JydE=) 2: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: tkQkh0SeDKmYlFagbGUi9uFru4fwo8KYtzlYsDdAl6k=) 3: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: EtRVC+Tnay/XwjjnfrzZ4VWnKxvjsSi9zbht2seIWhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Validity Not Before: Oct 4 17:11:51 2026 GMT Not After : Oct 11 17:11:51 2026 GMT Subject: CN=6ac288d7-3337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:ca:d5:93:f6:b0:d6:bc:e2:85:6f:cf:61: 42:67:c4:14:c6:e9:d6:98:52:b3:b0:c1:38:34:e4: 73:b4:b2:4c:52:4a:85:a6:28:08:c5:25:91:84:f3: cb:6f:fd:5c:7d:73:e3:2e:a7:7c:30:9d:7c:a7:4e: d3:1f:cc:7b:6a:b3:d9:0f:90:ab:98:8c:28:b6:6c: e1:14:ff:d0:89:70:a5:31:2a:77:7f:c7:0d:68:7f: 63:53:d7:3f:f3:63:43:48:c3:f1:09:0f:85:c7:4f: 49:4a:fa:b3:0e:2f:28:f3:b2:bd:7b:14:ec:18:a9: e4:b0:78:96:d4:65:23:ec:d5:fa:a2:cc:46:7c:2f: 11:4f:77:7e:6e:a9:42:9a:e6:44:f3:46:d3:4b:df: 6d:6e:e6:38:ff:ae:75:fd:da:f6:b8:a2:31:47:df: e1:a2:0a:6d:b7:13:72:e0:19:ba:29:5e:04:f6:cd: db:1d:53:c3:f7:df:2a:6a:5f:11:57:06:aa:e7:2a: 30:7b:19:d4:e5:07:45:31:e6:6a:cc:1a:77:a9:08: a3:6d:0e:83:d6:49:c2:ca:84:b2:f4:5e:c7:3b:1c: b6:19:63:bd:2f:d5:fc:81:78:5d:68:2d:17:cf:08: c9:c9:b5:0a:96:9d:1c:d0:0a:f5:ea:fe:0d:c7:bf: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:00:E2:F5:F9:39:97:0B:FD:65:FC:D3:AF:FB:84:EB:A1:D5:DE:97 X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:12:78:da:ed:88:ad:bc:ac:c2:ff:e6:a1:a9:b2:5a:a8:7b: 41:39:e2:c1:b7:7d:54:3c:61:f2:b5:a6:b6:e7:f2:93:cc:7e: 51:e9:41:3c:03:0a:2e:22:f3:9c:a4:a8:0a:39:b7:16:5f:a7: 7c:b3:b5:44:b7:08:7e:58:91:45:ad:fa:fa:3b:a3:f7:fd:2f: b7:32:4d:de:95:45:9b:5a:ed:67:2d:5e:6b:7c:6a:4d:38:39: 26:f0:67:1f:44:36:bc:99:d0:f9:0a:2f:46:80:0d:0b:08:40: 2e:e7:a0:e2:2a:5d:ff:7b:31:ad:dd:bf:6d:b0:f3:2b:cb:c1: cf:48:e9:8d:b0:d6:e7:8a:b6:61:69:ab:fb:12:bb:b9:76:c5: c5:53:91:bd:8d:57:f9:ef:e3:00:1d:ac:87:ac:4f:cd:f1:bb: 2f:67:2a:bc:bb:85:0a:13:9c:c5:fd:a8:b2:81:56:e4:57:b8: 20:62:26:28:38:27:d4:6b:18:13:ad:c4:c2:7a:87:43:e5:de: c2:e7:98:01:53:f1:f1:6d:67:b6:ec:4e:64:e8:80:8f:20:bb: f1:ca:51:e3:e2:19:e2:38:af:c1:10:6c:5e:ce:43:cc:62:a7: e8:16:43:1b:05:6d:88:69:34:cb:36:84:cd:2b:fe:16:a9:a7: 51:f2:5c:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjYxMDA0MTcxMTUxWhcNMjYxMDExMTcxMTUxWjAYMRYwFAYD VQQDEw02YWMyODhkNy0zMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs/K1ZP2sNa84oVvz2FCZ8QUxunWmFKzsME4NORztLJMUkqFpigIxSWRhPPL b/1cfXPjLqd8MJ18p07TH8x7arPZD5CrmIwotmzhFP/QiXClMSp3f8cNaH9jU9c/ 82NDSMPxCQ+Fx09JSvqzDi8o87K9exTsGKnksHiW1GUj7NX6osxGfC8RT3d+bqlC muZE80bTS99tbuY4/651/dr2uKIxR9/hogpttxNy4Bm6KV4E9s3bHVPD998qal8R Vwaq5yowexnU5QdFMeZqzBp3qQijbQ6D1knCyoSy9F7HOxy2GWO9L9X8gXhdaC0X zwjJybUKlp0c0Ar16v4Nx7+RNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQA4vX5 OZcL/WX806/7hOuh1d6XMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQzMS82NUVGMjk2QTIzMTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVw VmxZQ01lZmdNWDVweThiQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRJ42u2Irbyswv/moamyWqh7QTniwbd9VDxh8rWmtufyk8x+UelBPAMKLiLz nKSoCjm3Fl+nfLO1RLcIfliRRa36+juj9/0vtzJN3pVFm1rtZy1ea3xqTTg5JvBn H0Q2vJnQ+QovRoANCwhALueg4ipd/3sxrd2/bbDzK8vBz0jpjbDW54q2YWmr+xK7 uXbFxVORvY1X+e/jAB2sh6xPzfG7L2cqvLuFChOcxf2osoFW5Fe4IGImKDgn1GsY E63EwnqHQ+XewueYAVPx8W1ntuxOZOiAjyC78cpR4+IZ4jivwRBsXs5DzGKn6BZD GwVtiGk0yzaEzSv+FqmnUfJcPw== -----END CERTIFICATE-----Generated at Sun Oct 4 21:29:45 2026 by rpki-client