$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: dNHE2M83KqA8Ebu1hTbZvuQGzloO0ESaWEKInQFk1Bg= Subject key identifier: 9F:D5:86:0D:B9:9A:DA:3B:0A:34:80:1F:2D:57:BD:DF:FB:30:65:32 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 05CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 05B5 Signing time: Mon 26 Oct 2026 23:04:00 +0000 Manifest this update: Mon 26 Oct 2026 23:03:59 +0000 Manifest next update: Mon 02 Nov 2026 23:03:59 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: aavOf0p2Uw+EaXThJUdpq0MYBrJCfkAQu5JiemwkNlA=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1486 (0x5ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Oct 26 23:03:59 2026 GMT Not After : Nov 2 23:03:59 2026 GMT Subject: CN=6adfdc60-2321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:33:73:f9:78:01:a8:33:91:d7:75:9f:1e: 49:00:88:c7:03:3b:7a:7d:75:99:1e:8f:d1:3d:cf: 3e:92:d0:f0:31:09:ac:2e:1e:46:67:e6:e1:24:d6: 19:0e:11:06:74:49:4e:68:b4:ef:23:51:03:bb:53: 91:de:a8:fb:c5:aa:d0:8f:8b:9a:6f:96:3f:e2:af: 2d:e3:ab:71:7d:16:c1:25:7d:9c:93:ec:26:de:49: 42:39:87:0f:d2:aa:d0:34:68:5b:84:bf:52:c2:d3: d5:48:26:ae:f6:20:87:3f:42:9b:15:e0:2b:44:8f: 7d:a6:96:92:15:bc:2b:59:07:4a:03:67:8f:89:3c: d2:68:37:07:b8:52:f8:35:1e:59:a5:43:63:a4:6c: 0b:81:c0:57:04:84:29:a9:30:dd:9e:78:6d:aa:44: 61:00:bd:9b:ad:73:5e:83:64:08:cc:b9:29:b7:78: ca:de:58:95:4d:23:0d:78:f8:e6:32:41:35:18:0c: cb:21:3c:54:06:48:fb:8d:54:82:0e:67:06:fd:1c: 37:01:21:80:51:98:df:7c:b2:6b:b7:db:c4:8c:83: b6:5a:9e:dc:aa:d6:f6:16:b3:ed:81:96:26:3f:59: cb:f0:08:06:b7:a9:cc:3f:7f:aa:3a:4a:5e:cb:11: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D5:86:0D:B9:9A:DA:3B:0A:34:80:1F:2D:57:BD:DF:FB:30:65:32 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7b:8f:05:5f:2e:51:55:ca:0b:87:0e:6d:e9:1d:23:4c:2b: a7:06:e9:64:9f:59:3d:3e:11:4b:71:d5:be:39:13:af:f7:ae: 0f:88:cc:3d:4e:24:2b:cc:f6:b6:4a:99:31:2c:27:d4:0d:99: 76:03:1d:6d:35:5a:6d:5b:4a:80:dd:0a:17:85:47:e8:32:72: fe:61:24:0d:25:b1:34:72:9c:1a:8a:33:da:bf:5a:94:d5:1b: e6:fd:f9:68:b0:33:ff:8f:ab:b8:45:17:0e:22:91:2e:61:da: fa:6d:65:3d:2f:43:42:58:cc:05:42:30:3d:ee:5e:7b:7e:32: 3b:22:77:59:b0:bd:4f:84:f4:37:ef:de:a3:14:3a:f2:f6:1b: 5c:1a:38:fc:e8:66:68:8d:f5:42:07:30:93:40:22:07:a3:ed: 9b:6b:4e:f8:8e:16:c8:8d:5b:14:a6:d3:31:85:af:9f:70:58: 75:41:bd:7e:74:1b:ed:ce:74:58:90:5e:06:32:c6:07:2e:9f: c6:fd:82:1f:40:5f:7c:df:a4:01:2f:c4:04:3a:8f:4c:2f:ab: 98:39:f2:75:ce:bb:18:f5:e6:c1:c2:e5:db:69:26:7c:68:c9: 2d:7b:12:1d:c1:c8:05:6e:ab:0f:03:eb:83:0a:a9:f6:33:c1: ae:33:8c:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjYxMDI2MjMwMzU5WhcNMjYxMTAyMjMwMzU5WjAYMRYwFAYD VQQDEw02YWRmZGM2MC0yMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojMzc/l4Aagzkdd1nx5JAIjHAzt6fXWZHo/RPc8+ktDwMQmsLh5GZ+bhJNYZ DhEGdElOaLTvI1EDu1OR3qj7xarQj4uab5Y/4q8t46txfRbBJX2ck+wm3klCOYcP 0qrQNGhbhL9SwtPVSCau9iCHP0KbFeArRI99ppaSFbwrWQdKA2ePiTzSaDcHuFL4 NR5ZpUNjpGwLgcBXBIQpqTDdnnhtqkRhAL2brXNeg2QIzLkpt3jK3liVTSMNePjm MkE1GAzLITxUBkj7jVSCDmcG/Rw3ASGAUZjffLJrt9vEjIO2Wp7cqtb2FrPtgZYm P1nL8AgGt6nMP3+qOkpeyxEDqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/Vhg25 mto7CjSAHy1Xvd/7MGUyMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfnuPBV8uUVXKC4cObekdI0wrpwbpZJ9ZPT4RS3HVvjkTr/euD4jMPU4kK8z2 tkqZMSwn1A2ZdgMdbTVabVtKgN0KF4VH6DJy/mEkDSWxNHKcGooz2r9alNUb5v35 aLAz/4+ruEUXDiKRLmHa+m1lPS9DQljMBUIwPe5ee34yOyJ3WbC9T4T0N+/eoxQ6 8vYbXBo4/OhmaI31Qgcwk0AiB6Ptm2tO+I4WyI1bFKbTMYWvn3BYdUG9fnQb7c50 WJBeBjLGBy6fxv2CH0BffN+kAS/EBDqPTC+rmDnydc67GPXmwcLl22kmfGjJLXsS HcHIBW6rDwPrgwqp9jPBrjOMoA== -----END CERTIFICATE-----Generated at Tue Oct 27 15:41:31 2026 by rpki-client