$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: 7/bqBZ/j6NJQA0OuNsaEcOgqKwEvskaAQ6IrLfF7edg= Subject key identifier: 8B:8C:41:B5:C4:67:5F:5B:43:D0:DC:F9:30:E6:E0:1E:59:AF:90:48 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0D20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0D11 Signing time: Fri 16 Oct 2026 18:32:08 +0000 Manifest this update: Fri 16 Oct 2026 18:32:07 +0000 Manifest next update: Fri 23 Oct 2026 18:32:07 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: Hmu4SnpDp/C4nUwXYlmWhNVG4eIEwyThQTmiTV3U7ao=) 2: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=) 3: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 18:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Oct 16 18:32:07 2026 GMT Not After : Oct 23 18:32:07 2026 GMT Subject: CN=6ad26da8-314b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:1f:6a:13:65:82:3f:53:e1:a1:8e:c2:2e: d1:2b:88:72:09:5f:74:3c:af:5d:0b:5e:15:1b:80: a0:01:aa:fb:83:53:b2:99:77:b4:e0:0f:e1:5f:17: 0a:90:f3:77:27:9c:7c:8d:7d:18:8d:e7:6f:b6:11: b4:06:1d:b5:b7:43:9c:b1:37:97:2f:74:3a:8d:89: f4:0e:9e:80:ca:1a:54:6e:5b:0f:ac:c4:4a:c3:87: 15:45:fd:89:76:3c:8a:88:ac:06:b8:32:b9:d4:35: 5e:d5:b9:03:79:22:61:80:52:11:21:53:e6:40:d7: 0b:a7:82:9e:89:c6:8c:13:88:3f:17:b9:9c:f2:b4: c3:e3:57:83:cc:02:c8:3d:0a:03:ef:14:7f:9a:70: cd:dc:77:73:78:f5:43:fc:0d:44:3b:36:7e:da:da: 10:c5:fd:ab:bd:48:12:3a:5d:c7:69:00:28:16:71: 6f:77:e4:e5:13:8c:d1:34:76:14:04:e0:98:af:46: d8:39:74:6c:24:d8:8b:32:1b:4b:98:b0:bb:81:43: bb:aa:76:88:f0:4a:e2:c7:cd:6b:e2:33:95:06:70: 93:6f:f9:2f:80:dd:c4:50:3e:a5:bf:5b:c0:96:5a: 2b:90:c9:8e:fe:73:3f:a2:75:d0:49:9a:45:ef:b6: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:41:B5:C4:67:5F:5B:43:D0:DC:F9:30:E6:E0:1E:59:AF:90:48 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:0d:ad:0e:b4:c9:6b:4e:c1:71:d5:53:d2:37:c1:a3:5c:5f: 2a:c8:08:23:c1:ce:72:76:b6:36:e0:32:0a:e3:bc:37:3e:cb: da:bb:9c:6f:b9:b1:82:a7:13:4c:c7:f5:0f:fa:8e:93:88:d1: 6c:fa:4f:4b:f7:10:b2:0e:87:38:71:d1:91:63:6c:c4:7f:7c: 89:37:82:19:02:fb:d7:04:51:0b:4f:78:28:bc:d1:28:42:01: ec:49:aa:d2:44:0d:6e:ad:33:a9:7d:de:ca:d4:36:6e:42:1e: af:57:67:70:0f:b8:6f:1a:93:af:bf:ae:60:cf:a0:5e:db:3d: 78:ad:fb:5d:17:aa:fe:6b:82:a0:f3:6b:ea:ad:97:b9:82:a6: b2:be:a0:79:3d:e8:7e:e0:eb:26:0b:94:4c:85:9b:27:9d:70: 5d:55:44:58:90:33:3c:4f:7a:db:8a:a3:a7:f9:a1:af:53:56: a6:ec:84:3f:51:0a:46:0d:fe:20:d6:3c:19:87:0a:1a:b3:ad: ab:6b:d8:da:9e:56:9f:25:f7:7a:b7:b3:5c:54:17:d8:2a:27: ff:09:b5:55:2e:19:ab:08:db:12:d4:35:69:73:7a:e3:ef:cf: 70:b8:f0:ed:9b:dd:d1:6e:73:34:49:33:92:cb:92:a0:b6:73: da:66:d9:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjYxMDE2MTgzMjA3WhcNMjYxMDIzMTgzMjA3WjAYMRYwFAYD VQQDEw02YWQyNmRhOC0zMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjVYfahNlgj9T4aGOwi7RK4hyCV90PK9dC14VG4CgAar7g1OymXe04A/hXxcK kPN3J5x8jX0YjedvthG0Bh21t0OcsTeXL3Q6jYn0Dp6AyhpUblsPrMRKw4cVRf2J djyKiKwGuDK51DVe1bkDeSJhgFIRIVPmQNcLp4KeicaME4g/F7mc8rTD41eDzALI PQoD7xR/mnDN3HdzePVD/A1EOzZ+2toQxf2rvUgSOl3HaQAoFnFvd+TlE4zRNHYU BOCYr0bYOXRsJNiLMhtLmLC7gUO7qnaI8Erix81r4jOVBnCTb/kvgN3EUD6lv1vA llorkMmO/nM/onXQSZpF77b6HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuMQbXE Z19bQ9Dc+TDm4B5Zr5BIMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdA2tDrTJa07BcdVT0jfBo1xfKsgII8HOcna2NuAyCuO8Nz7L2rucb7mxgqcT TMf1D/qOk4jRbPpPS/cQsg6HOHHRkWNsxH98iTeCGQL71wRRC094KLzRKEIB7Emq 0kQNbq0zqX3eytQ2bkIer1dncA+4bxqTr7+uYM+gXts9eK37XReq/muCoPNr6q2X uYKmsr6geT3ofuDrJguUTIWbJ51wXVVEWJAzPE9624qjp/mhr1NWpuyEP1EKRg3+ INY8GYcKGrOtq2vY2p5WnyX3erezXFQX2Con/wm1VS4ZqwjbEtQ1aXN64+/PcLjw 7Zvd0W5zNEkzksuSoLZz2mbZIg== -----END CERTIFICATE-----Generated at Sat Oct 17 12:04:55 2026 by rpki-client