$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft File: YoElNRN3xZBrhJugUmeYfheuLeQ.mft (raw, json) Hash identifier: 6ZTsfeI+2smCHuOzRWB9nnskh2FRX30bP82KEWKL/Jg= Subject key identifier: B5:50:56:0D:EC:6C:FB:2F:D4:A8:A0:41:AA:C2:C4:18:44:85:B6:C8 Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4 Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft Manifest number: 5A Signing time: Wed 07 Oct 2026 08:45:48 +0000 Manifest this update: Wed 07 Oct 2026 08:45:47 +0000 Manifest next update: Wed 14 Oct 2026 08:45:47 +0000 Files and hashes: 1: YoElNRN3xZBrhJugUmeYfheuLeQ.crl (hash: KSMd/MHEljvpek8VpqaHZIraG8btbLpzrRtb5nc3I3E=) 2: E426603AA29C11F1B8B5B60D3311F970.roa (hash: Nv3QmjlVhbAgsVcim0US8JDU8UTwNmJE6Th9Fn9Q2oo=) 3: 4AC8B7E8A29D11F1A26B6F213311F970.roa (hash: dxMdek+58sIZa90avTdWzvPwFD/txWFdftq82oLuB4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 08:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4 Validity Not Before: Oct 7 08:45:47 2026 GMT Not After : Oct 14 08:45:47 2026 GMT Subject: CN=6ac606bb-324a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:df:3f:fc:da:03:ea:60:c0:db:8d:6d:1a: 17:64:b1:66:40:db:7a:02:60:6b:99:20:9f:64:22: 2b:a2:d5:97:ea:fa:dc:91:97:64:69:d7:85:17:28: b0:98:8a:33:a7:7f:c1:97:bf:60:c0:ea:e2:f0:ef: 9a:75:d4:8f:04:b0:36:54:60:02:6a:f7:3a:2c:b4: d0:d6:7e:45:93:86:d6:f9:ad:db:18:d8:6a:86:bf: 77:22:32:71:1c:25:2b:33:84:81:e2:7f:25:e9:6d: b9:a6:57:d2:45:70:22:30:a4:cb:59:9a:a3:96:9f: d2:93:0c:62:7c:a6:47:2e:ac:4e:0a:e9:a4:bf:a5: ca:bf:3f:5e:e9:0d:db:d1:b6:32:29:59:2d:53:69: 8a:49:a7:b8:a5:45:2b:37:c7:e5:52:3c:8d:c3:22: 5b:14:09:05:96:f7:f2:c3:f1:7f:a7:d8:9a:3c:ef: f2:ea:06:14:93:6c:52:86:b7:06:5d:94:46:b9:8d: 89:61:1e:28:b7:87:de:d1:65:60:73:f9:a9:1d:41: e6:0e:54:4d:47:b7:ff:7e:16:22:ab:ee:7c:55:12: 9d:1d:75:ee:91:5b:29:ea:6b:ea:f8:7b:00:01:df: d5:9b:f5:23:a1:31:02:1d:a1:7d:be:7a:9c:c4:0a: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:56:0D:EC:6C:FB:2F:D4:A8:A0:41:AA:C2:C4:18:44:85:B6:C8 X509v3 Authority Key Identifier: keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c5:14:6e:94:77:52:1f:1d:09:18:3c:d6:38:0c:c3:6f:89: 3e:e8:34:f2:59:66:b6:b4:22:5e:a0:ff:29:93:af:2d:d2:38: fb:46:0a:50:e2:62:75:58:c8:51:e5:ea:d4:d2:bd:e6:97:a0: 5a:80:bb:1a:be:4a:ce:9e:d7:2d:d8:8b:b7:3c:3c:74:74:33: f2:f7:39:80:2b:3a:bd:c1:4f:ca:f7:fd:fb:0e:36:98:a5:e0: 45:09:a3:f4:df:b5:93:3d:31:60:f3:83:98:94:1c:eb:70:41: 44:a4:68:f7:8c:02:11:b4:92:cd:6f:1e:2b:4a:29:1a:c3:35: b6:fb:03:42:cf:ab:1f:d0:78:8b:01:11:b1:77:6c:c7:ff:47: be:a9:0a:bf:2b:32:48:d2:23:47:a4:3a:5b:86:6f:5f:0e:9b: 37:62:02:30:ef:f7:cf:78:2f:a1:76:b8:6a:07:d6:54:e4:3b: 28:7e:74:e5:d2:f7:fd:e1:5e:a3:d6:41:59:01:e0:90:c0:42: 77:85:08:99:88:7b:d1:3a:3b:a4:44:7c:04:d0:89:2c:ec:b0: e7:8c:10:44:ff:7c:a9:cd:91:5b:a5:b3:57:ae:e4:99:cb:58: d0:52:d0:1f:fb:f6:21:c7:f5:9b:a8:da:0e:7b:59:1d:9d:09: 49:1a:83:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTgwMTExMC8GA1UEBRMoNjI4MTI1MzUxMzc3QzU5MDZCODQ5QkEwNTI2Nzk4N0Ux N0FFMkRFNDAeFw0yNjEwMDcwODQ1NDdaFw0yNjEwMTQwODQ1NDdaMBgxFjAUBgNV BAMTDTZhYzYwNmJiLTMyNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI898//NoD6mDA241tGhdksWZA23oCYGuZIJ9kIiui1Zfq+tyRl2Rp14UXKLCY ijOnf8GXv2DA6uLw75p11I8EsDZUYAJq9zostNDWfkWThtb5rdsY2GqGv3ciMnEc JSszhIHifyXpbbmmV9JFcCIwpMtZmqOWn9KTDGJ8pkcurE4K6aS/pcq/P17pDdvR tjIpWS1TaYpJp7ilRSs3x+VSPI3DIlsUCQWW9/LD8X+n2Jo87/LqBhSTbFKGtwZd lEa5jYlhHii3h97RZWBz+akdQeYOVE1Ht/9+FiKr7nxVEp0dde6RWynqa+r4ewAB 39Wb9SOhMQIdoX2+epzECgGPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtVBWDexs +y/UqKBBqsLEGESFtsgwHwYDVR0jBBgwFoAUYoElNRN3xZBrhJugUmeYfheuLeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFODAxLzEwOEVCMDYyM0Uy NzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpCcmhKdWdVbWVZZmhldUxl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWW9FbE5STjN4WkJyaEp1Z1VtZVlmaGV1TGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF ODAxLzEwOEVCMDYyM0UyNzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpC cmhKdWdVbWVZZmhldUxlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXxRRulHdSHx0JGDzWOAzDb4k+6DTyWWa2tCJeoP8pk68t0jj7RgpQ4mJ1WMhR 5erU0r3ml6BagLsavkrOntct2Iu3PDx0dDPy9zmAKzq9wU/K9/37DjaYpeBFCaP0 37WTPTFg84OYlBzrcEFEpGj3jAIRtJLNbx4rSikawzW2+wNCz6sf0HiLARGxd2zH /0e+qQq/KzJI0iNHpDpbhm9fDps3YgIw7/fPeC+hdrhqB9ZU5DsofnTl0vf94V6j 1kFZAeCQwEJ3hQiZiHvROjukRHwE0Iks7LDnjBBE/3ypzZFbpbNXruSZy1jQUtAf +/Yhx/WbqNoOe1kdnQlJGoNI -----END CERTIFICATE-----Generated at Thu Oct 8 16:10:57 2026 by rpki-client