$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: qs0/jEjJnjRTFCcAAPYKYH92LR1BQQO1w8wea7xSB6A= Subject key identifier: DD:4B:36:65:C9:F3:3D:F3:7A:11:D2:9E:BC:89:38:DC:B3:88:62:FF Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 01C9 Signing time: Tue 27 Oct 2026 04:02:51 +0000 Manifest this update: Tue 27 Oct 2026 04:02:50 +0000 Manifest next update: Tue 03 Nov 2026 04:02:50 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: A8hgbweP/IaXJi8DROoSJYDm1z4qlrNKpyNE90YMeyY=) 2: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: vzVQBVMmwkmKLF9gw2qbd+GWfUXHzR09NVFTQu0OTDQ=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: J8JvI737IcwyzOv4zv6SR8Qx/PymvBvHR1EoEe3p9Ms=) 4: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: Qiz09qw18Q7itjGB4hEAftD52hr4YhZFhmDLsy4591Q=) 5: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=) 6: 680D797023E611EF8165F17BC4F9AE02.roa (hash: dAU1goqR7eXbVxXE2s6EOPd+tQKFat1qMstDa6Ugbus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Oct 27 04:02:50 2026 GMT Not After : Nov 3 04:02:50 2026 GMT Subject: CN=6ae0226b-f2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:74:ff:63:a4:be:98:5e:9a:9f:4a:d3:37:8b: 4b:f2:bd:db:0f:dc:f4:11:0f:be:74:65:e9:85:a8: 8f:8f:c4:64:c7:f6:cc:8b:f5:c7:57:f8:2c:f4:ef: b1:eb:e9:31:e3:75:bd:aa:7e:16:6d:97:37:06:f2: f9:44:c0:14:1f:8d:ee:45:98:d7:a8:30:b1:69:ae: f6:91:81:01:5a:e3:72:24:9b:e4:c6:49:a6:8b:05: b7:9c:29:03:2e:cb:a5:8a:96:9d:cd:49:d5:cb:08: 6f:99:2f:41:33:5a:33:cc:17:66:f3:61:d0:4a:1b: d0:22:b9:20:d8:98:2e:7e:93:88:64:e7:13:d2:c6: b7:0f:85:b4:23:b7:f6:4b:c3:bc:31:24:03:24:8c: a3:8c:94:cb:99:cc:3f:14:9d:de:f0:21:67:d3:4c: 93:d1:66:51:e1:82:1e:0e:0e:ad:a4:3d:1b:11:7d: f4:13:b5:ae:10:9b:d7:51:84:75:0c:bb:26:b8:f5: e9:de:b1:e3:a6:11:d6:11:ec:52:16:2a:ab:20:fb: f5:af:85:e0:87:d2:5b:dd:cc:02:58:6a:7f:ff:c8: b6:73:bd:44:d6:46:2c:aa:20:98:d5:ad:c4:2a:c3: 35:19:05:bc:f0:b1:5e:29:6d:d8:82:31:59:92:8a: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4B:36:65:C9:F3:3D:F3:7A:11:D2:9E:BC:89:38:DC:B3:88:62:FF X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c6:4d:c0:16:fc:75:a8:0f:e4:85:13:74:58:df:b6:fb:fd: bb:2f:0c:c7:1c:d1:7c:ba:76:78:41:92:e3:78:cd:20:e6:d8: 04:47:dc:22:fa:f7:71:52:2a:74:d6:f8:d4:9e:20:8f:7c:a9: 16:2f:b1:22:d9:80:b7:a0:92:7b:88:64:46:81:10:16:12:53: 7b:82:dd:90:5d:e5:8c:99:62:aa:a3:38:d3:45:4e:c7:4a:32: 9a:64:29:92:09:d6:7c:fe:38:05:b7:8e:78:e8:97:1e:6e:1e: 51:0b:57:3b:2c:53:d0:ab:0e:6f:56:a8:fc:e0:14:0b:e9:24: 08:35:2c:9c:d7:9f:d9:c7:0f:8f:51:eb:89:d7:b7:d3:1c:1e: e6:84:38:1a:0e:d2:4f:fd:a4:25:0d:82:74:24:85:05:40:a0: 56:c4:07:6a:38:0f:a7:26:15:d9:f0:c7:54:de:e4:9c:5d:a0: f1:b6:ba:64:85:18:6c:f4:5b:94:64:01:e6:1f:28:d7:c7:7e: ba:8c:69:65:89:2c:c5:4d:65:48:03:cb:fb:76:66:87:86:9f: f4:f4:4d:24:39:fd:37:0e:a3:e3:9b:b1:f1:82:3d:c6:e6:63: bb:7f:d8:7a:86:39:50:18:dd:1a:a8:16:87:6c:ec:fc:82:04: e4:b3:a3:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjYxMDI3MDQwMjUwWhcNMjYxMTAzMDQwMjUwWjAYMRYwFAYD VQQDEw02YWUwMjI2Yi1mMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63T/Y6S+mF6an0rTN4tL8r3bD9z0EQ++dGXphaiPj8Rkx/bMi/XHV/gs9O+x 6+kx43W9qn4WbZc3BvL5RMAUH43uRZjXqDCxaa72kYEBWuNyJJvkxkmmiwW3nCkD LsulipadzUnVywhvmS9BM1ozzBdm82HQShvQIrkg2JgufpOIZOcT0sa3D4W0I7f2 S8O8MSQDJIyjjJTLmcw/FJ3e8CFn00yT0WZR4YIeDg6tpD0bEX30E7WuEJvXUYR1 DLsmuPXp3rHjphHWEexSFiqrIPv1r4Xgh9Jb3cwCWGp//8i2c71E1kYsqiCY1a3E KsM1GQW88LFeKW3YgjFZkoqtswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1LNmXJ 8z3zehHSnryJONyziGL/MB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesZNwBb8dagP5IUTdFjftvv9uy8MxxzRfLp2eEGS43jNIObYBEfcIvr3cVIq dNb41J4gj3ypFi+xItmAt6CSe4hkRoEQFhJTe4LdkF3ljJliqqM400VOx0oymmQp kgnWfP44BbeOeOiXHm4eUQtXOyxT0KsOb1ao/OAUC+kkCDUsnNef2ccPj1Hride3 0xwe5oQ4Gg7ST/2kJQ2CdCSFBUCgVsQHajgPpyYV2fDHVN7knF2g8ba6ZIUYbPRb lGQB5h8o18d+uoxpZYksxU1lSAPL+3Zmh4af9PRNJDn9Nw6j45ux8YI9xuZju3/Y eoY5UBjdGqgWh2zs/IIE5LOjIA== -----END CERTIFICATE-----Generated at Tue Oct 27 23:09:55 2026 by rpki-client