$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json) Hash identifier: FNGxuFasljix+oQgGMp600pqOt+/P0/q9JIT8ba1iWQ= Subject key identifier: CA:6E:63:FF:29:E7:D7:47:F9:B9:54:5C:2A:46:DB:4C:82:EF:F3:06 Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Certificate serial: 0995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft Manifest number: 097B Signing time: Tue 06 Oct 2026 20:11:48 +0000 Manifest this update: Tue 06 Oct 2026 20:11:48 +0000 Manifest next update: Tue 13 Oct 2026 20:11:48 +0000 Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: lOOWVXmSG9sqgeFw9K7KcpSTM0/7ZpRzj0p4ymG3OcY=) 2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=) 3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=) 4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Validity Not Before: Oct 6 20:11:48 2026 GMT Not After : Oct 13 20:11:48 2026 GMT Subject: CN=6ac55604-c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:56:21:ae:ac:0f:0a:ca:59:7c:7f:6e:2c: 42:26:64:d7:9f:9d:1d:0e:6c:f9:fc:62:41:3b:73: 17:7d:e5:5e:e3:b6:38:db:bc:02:70:ec:7a:5e:23: 3e:ef:e3:62:ae:b9:e1:c8:2c:3b:ba:d4:9e:79:da: 56:ea:38:cb:22:c8:eb:3f:3f:34:aa:82:9a:fa:b6: a3:a9:46:cf:fb:74:9b:b1:9e:c2:45:05:1a:0f:55: 90:f6:29:90:c6:0e:54:70:5e:55:e1:c0:78:30:d5: 36:5a:b4:a1:89:38:78:f8:dc:9a:7a:9d:58:0f:ee: 22:a5:cf:60:46:4d:0e:28:01:ae:96:49:01:27:9d: 40:e0:28:f2:2d:21:d1:d4:1c:8a:fb:df:20:bf:ee: a6:4a:c2:db:a2:77:9c:f3:8d:18:2d:cb:bb:18:5b: fd:eb:29:36:e1:8d:5b:a3:ea:79:8c:3f:3d:d6:75: 70:d5:f4:0e:cc:b2:45:2b:3f:d3:82:2a:11:07:43: 82:30:19:ca:5a:d5:3c:0e:0a:f8:ff:f5:08:28:b7: 10:8a:a4:56:e9:8e:35:0d:2e:37:a9:9f:19:e5:25: 5d:95:f0:88:9c:23:9e:e1:3a:78:b0:61:5b:66:35: 82:63:98:33:28:06:40:11:00:8a:57:1f:75:1f:8a: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:63:FF:29:E7:D7:47:F9:B9:54:5C:2A:46:DB:4C:82:EF:F3:06 X509v3 Authority Key Identifier: keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2d:58:bf:ce:81:0f:96:b6:6a:41:65:fc:6b:0a:2a:01:59: a1:89:2e:3b:a1:c8:14:28:66:e7:94:09:14:44:49:75:fa:ac: c0:b3:bb:dc:a7:ed:85:ab:d1:e4:65:d7:e3:22:a4:69:3b:8b: 24:ff:a5:78:a4:7f:a9:60:74:de:4d:7a:0d:e3:89:4c:a1:ca: c1:47:da:9f:c8:73:40:72:50:f9:11:bc:26:0a:29:4e:ea:9e: b5:1a:10:63:cb:f4:1e:12:3d:2d:ec:35:5c:2d:b5:d3:91:60: c7:03:5b:dd:84:dc:6f:ca:1e:48:79:45:12:19:5b:da:91:49: 67:ce:8b:73:d0:7a:80:63:e8:08:13:6f:1e:16:aa:e7:46:47: 88:e2:cb:c8:b2:49:04:a0:fe:a6:b3:80:83:6d:d4:e0:73:01: 58:8c:cb:29:6f:45:8a:f9:e1:13:b6:f1:82:70:74:56:a5:aa: f8:79:ac:e2:89:80:3b:e6:36:3f:b7:df:04:19:79:e2:07:b4: bd:38:7e:bd:0b:92:2e:82:8b:8e:9c:6f:84:78:da:c6:5b:b5: 84:0a:12:a6:03:3d:8f:dd:58:36:34:6e:0e:51:28:75:b3:3b: 05:6a:5a:71:51:c1:29:8f:db:a3:06:46:3b:47:9f:d2:28:9f: d1:25:e3:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB RDExMDFBN0MwHhcNMjYxMDA2MjAxMTQ4WhcNMjYxMDEzMjAxMTQ4WjAYMRYwFAYD VQQDEw02YWM1NTYwNC1jOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp15WIa6sDwrKWXx/bixCJmTXn50dDmz5/GJBO3MXfeVe47Y427wCcOx6XiM+ 7+NirrnhyCw7utSeedpW6jjLIsjrPz80qoKa+rajqUbP+3SbsZ7CRQUaD1WQ9imQ xg5UcF5V4cB4MNU2WrShiTh4+Nyaep1YD+4ipc9gRk0OKAGulkkBJ51A4CjyLSHR 1ByK+98gv+6mSsLbonec840YLcu7GFv96yk24Y1bo+p5jD891nVw1fQOzLJFKz/T gioRB0OCMBnKWtU8Dgr4//UIKLcQiqRW6Y41DS43qZ8Z5SVdlfCInCOe4Tp4sGFb ZjWCY5gzKAZAEQCKVx91H4rIlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpuY/8p 59dH+blUXCpG20yC7/MGMB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUVEMC82RUVCMTE1MEMyQjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1Zq eDhRNTJ3ZWJaTGF0RVFHbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVS1Yv86BD5a2akFl/GsKKgFZoYkuO6HIFChm55QJFERJdfqswLO73KfthavR 5GXX4yKkaTuLJP+leKR/qWB03k16DeOJTKHKwUfan8hzQHJQ+RG8JgopTuqetRoQ Y8v0HhI9Lew1XC2105FgxwNb3YTcb8oeSHlFEhlb2pFJZ86Lc9B6gGPoCBNvHhaq 50ZHiOLLyLJJBKD+prOAg23U4HMBWIzLKW9FivnhE7bxgnB0VqWq+Hms4omAO+Y2 P7ffBBl54ge0vTh+vQuSLoKLjpxvhHjaxlu1hAoSpgM9j91YNjRuDlEodbM7BWpa cVHBKY/bowZGO0ef0iif0SXj6Q== -----END CERTIFICATE-----Generated at Wed Oct 7 06:08:48 2026 by rpki-client