$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: ZMYMYb85WWnj+HVQxjXz6RQgASbw6W2JQ4wBsN/3e24= Subject key identifier: C8:EB:0D:44:F7:88:CC:96:10:FE:56:F5:00:71:CE:C4:C8:D1:89:77 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0BF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0BD5 Signing time: Wed 28 Oct 2026 19:14:35 +0000 Manifest this update: Wed 28 Oct 2026 19:14:35 +0000 Manifest next update: Wed 04 Nov 2026 19:14:35 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: fnnHCwH2Z5x7ycvrk4L6I4b0f4hwtN0XKzo3lAAdFIA=) 2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) 3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) 4: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Oct 28 19:14:35 2026 GMT Not After : Nov 4 19:14:35 2026 GMT Subject: CN=6ae2499b-36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:91:d4:c1:13:27:02:1f:23:90:49:65:19: 50:fd:9d:21:fd:4b:c3:08:4c:07:1d:9a:1d:50:cb: 14:82:90:1e:c8:22:76:d6:66:1c:c0:56:71:52:43: 35:70:2e:8e:08:6b:23:20:ce:e8:68:2f:95:b5:b7: 5d:b7:7b:75:bc:16:cd:ef:40:20:15:c8:65:91:75: 40:2f:8d:f1:67:9d:b3:3e:f3:5e:57:b1:f9:38:98: 27:67:e1:2c:02:d0:05:5c:2a:83:36:8e:b5:ee:8d: 4c:c5:d2:32:ad:58:45:ee:75:37:89:60:3a:b2:c4: ce:82:2c:9c:c5:34:77:3b:2b:d8:98:30:73:ec:20: 54:28:24:cc:08:08:6c:49:58:2b:62:18:b4:0c:1d: ff:0a:39:4b:43:91:77:2f:f2:5a:dd:ba:af:53:17: d6:78:b1:ee:7a:7e:e8:d6:7c:93:40:43:55:7a:ed: e2:98:9d:a1:2b:cb:0c:d0:d6:f6:ca:ad:66:ad:d2: f4:9d:79:c8:06:20:32:2c:b5:e3:bb:cb:cb:39:fd: 5f:bc:94:d2:58:fd:c3:05:c3:92:36:69:14:c0:17: 65:7c:7a:a7:f7:0f:c5:a5:b0:1d:28:31:ed:22:6f: e9:99:92:fd:85:a7:6f:8b:2e:a6:fb:e6:3e:b7:ff: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EB:0D:44:F7:88:CC:96:10:FE:56:F5:00:71:CE:C4:C8:D1:89:77 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:48:28:bf:50:3f:30:4f:89:ca:bd:35:85:fc:7a:ab:44:6a: 91:8f:d9:40:05:ce:7a:03:5d:0e:e4:0f:b4:a4:2a:39:c5:72: 23:97:a3:85:2d:30:70:0f:0b:34:93:46:f3:a5:82:8f:d7:f0: 7f:e2:b2:6c:55:e1:a1:59:25:03:43:ff:c8:88:b4:ee:33:a1: 01:96:ee:da:f8:13:64:41:c2:f5:d5:9f:9d:88:6e:5f:8c:c4: a7:97:65:82:e7:51:6c:2d:69:7b:1b:1b:ef:08:93:61:f2:eb: 0e:e7:a4:c6:cf:55:01:8c:8d:a4:db:46:50:70:4b:c3:7d:d6: 08:77:e5:fa:bd:ee:73:90:de:a6:39:e8:cd:f6:be:41:6d:5e: 7c:54:0c:0f:ec:a6:69:6e:a3:3a:da:16:2f:9d:ca:aa:8d:3d: d5:5c:c2:ab:d0:e1:3b:ed:91:fc:74:5b:28:b3:d3:16:11:95: a6:69:00:f9:2c:61:9a:01:19:55:b0:5b:7d:e0:d0:e3:36:c0: a8:f8:30:8d:df:af:81:9d:9f:c4:17:98:6a:1b:65:24:55:e2: 5a:c7:24:61:f3:c0:9c:75:16:1e:71:f0:b4:db:1e:85:24:cb: 21:09:50:8c:f4:f1:8d:a7:ea:5b:e9:a2:12:c3:07:ff:5e:c3: e6:a2:74:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYxMDI4MTkxNDM1WhcNMjYxMTA0MTkxNDM1WjAYMRYwFAYD VQQDEw02YWUyNDk5Yi0zNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWyR1METJwIfI5BJZRlQ/Z0h/UvDCEwHHZodUMsUgpAeyCJ21mYcwFZxUkM1 cC6OCGsjIM7oaC+Vtbddt3t1vBbN70AgFchlkXVAL43xZ52zPvNeV7H5OJgnZ+Es AtAFXCqDNo617o1MxdIyrVhF7nU3iWA6ssTOgiycxTR3OyvYmDBz7CBUKCTMCAhs SVgrYhi0DB3/CjlLQ5F3L/Ja3bqvUxfWeLHuen7o1nyTQENVeu3imJ2hK8sM0Nb2 yq1mrdL0nXnIBiAyLLXju8vLOf1fvJTSWP3DBcOSNmkUwBdlfHqn9w/FpbAdKDHt Im/pmZL9hadviy6m++Y+t/8/0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjrDUT3 iMyWEP5W9QBxzsTI0Yl3MB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdkgov1A/ME+Jyr01hfx6q0RqkY/ZQAXOegNdDuQPtKQqOcVyI5ejhS0wcA8L NJNG86WCj9fwf+KybFXhoVklA0P/yIi07jOhAZbu2vgTZEHC9dWfnYhuX4zEp5dl gudRbC1pexsb7wiTYfLrDuekxs9VAYyNpNtGUHBLw33WCHfl+r3uc5Depjnozfa+ QW1efFQMD+ymaW6jOtoWL53Kqo091VzCq9DhO+2R/HRbKLPTFhGVpmkA+SxhmgEZ VbBbfeDQ4zbAqPgwjd+vgZ2fxBeYahtlJFXiWsckYfPAnHUWHnHwtNsehSTLIQlQ jPTxjafqW+miEsMH/17D5qJ0Zg== -----END CERTIFICATE-----Generated at Wed Oct 28 20:58:04 2026 by rpki-client