$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft File: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft (raw, json) Hash identifier: SuP/KuYjOMcl4LxSDj3F0C3+jU89MflNs6gJGc6XcAE= Subject key identifier: CE:E9:20:38:A4:5A:5E:5B:C6:86:FE:E0:00:27:10:B5:44:06:C3:87 Authority key identifier: 63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 Certificate issuer: /CN=A916F57A/serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft Manifest number: 23 Signing time: Sat 17 Oct 2026 09:35:34 +0000 Manifest this update: Sat 17 Oct 2026 09:35:33 +0000 Manifest next update: Sat 24 Oct 2026 09:35:33 +0000 Files and hashes: 1: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl (hash: dlbtDHzF5J1y4Ci4SeAyOrl0qmKBBCI9FP9coEXUZAs=) 2: B2A83A1296C911F1ABBBAC335411F970.roa (hash: m9UsV7UjjMZ2WOx/GR0cXTiQls2vgjpyqNyxc4Qnugk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F57A, serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Validity Not Before: Oct 17 09:35:33 2026 GMT Not After : Oct 24 09:35:33 2026 GMT Subject: CN=6ad34165-32ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:d9:77:df:38:65:a1:d2:d8:2f:7e:72:8b: 0d:e7:c1:9e:3d:55:7f:b8:c7:d8:76:c2:2c:a3:6d: e5:3e:df:5b:3e:94:f6:1d:35:52:32:e1:b0:92:5a: c7:94:2f:d3:eb:89:ec:34:6a:cf:d8:b6:75:8f:b5: 31:c8:bc:a1:71:43:76:81:27:1b:ba:bf:55:84:55: 14:dc:40:41:ad:9f:6f:86:46:c6:d1:58:98:be:99: 96:72:0b:a0:a6:7a:81:8f:bb:57:23:6d:87:79:93: 9a:5f:a6:81:b0:18:50:2f:ef:5c:e1:4c:eb:40:45: 93:2a:70:87:b4:a7:19:5d:a7:1d:e8:ac:7f:2b:ea: 50:e8:74:8e:3b:7d:27:61:7d:e4:da:d4:55:14:df: b0:78:d9:a5:47:10:ff:1c:b4:15:14:dd:1e:43:03: 29:f6:c3:01:1d:28:49:1f:63:67:08:11:fd:93:97: a4:81:f9:4b:e5:6d:3b:80:a1:a7:bf:74:3d:fa:5c: dc:7b:5f:ba:11:57:d8:7b:e4:da:9f:b6:cd:d1:d6: 41:24:89:c3:c1:49:dd:03:a8:90:bc:60:b6:e5:3d: 0d:ff:cb:e9:90:85:02:b5:84:10:79:94:50:86:b3: db:eb:62:ed:31:f4:54:fa:c8:41:b4:5f:b6:2a:4b: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E9:20:38:A4:5A:5E:5B:C6:86:FE:E0:00:27:10:B5:44:06:C3:87 X509v3 Authority Key Identifier: keyid:63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c5:d7:b5:f3:02:18:4a:92:78:3c:60:06:fe:8a:8a:8b:6f: c9:66:55:5f:2d:b8:df:33:0e:84:9a:50:53:f8:02:54:ff:94: 91:41:f0:a8:40:34:b7:4b:20:c5:92:93:79:7e:d9:7d:1d:21: 61:d8:12:96:e6:36:e8:79:7d:b4:20:2a:57:04:01:f8:b0:ab: 99:8d:20:06:a6:2b:a1:2e:4b:df:a6:02:63:93:08:f2:f7:ed: 28:4e:12:0e:35:54:88:b4:4c:35:63:79:49:bf:25:52:51:02: 87:3f:ea:ea:ea:76:8b:54:ae:f0:5a:46:03:62:71:18:5b:38: 49:57:00:61:0f:a1:ad:95:f2:d8:aa:13:58:58:5a:a6:f3:a8: d7:a9:46:f8:23:44:6b:ca:2e:24:67:97:6d:35:b3:fa:ff:20: 21:73:2a:82:6e:6c:11:8e:69:30:e3:79:3e:25:9b:76:7b:57: bc:c6:ee:20:7e:50:e5:69:48:37:d0:3b:93:2b:14:ec:43:45: d1:69:41:2a:3d:5e:8e:89:66:cb:ad:c2:32:26:00:8c:39:37: 11:37:ac:97:b9:08:f5:08:59:a0:a0:97:e9:14:17:c5:2b:16: a9:6c:0d:dd:f4:ed:29:e3:ea:8e:2c:d6:7d:99:58:7c:03:bb: b9:a3:d9:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjU3QTExMC8GA1UEBRMoNjNDNzFGRUIxMzkxRjYzMzQwQzhDRjBGRDExMUNGRUYy MkJBQzg5NzAeFw0yNjEwMTcwOTM1MzNaFw0yNjEwMjQwOTM1MzNaMBgxFjAUBgNV BAMTDTZhZDM0MTY1LTMyYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw2dl33zhlodLYL35yiw3nwZ49VX+4x9h2wiyjbeU+31s+lPYdNVIy4bCSWseU L9Priew0as/YtnWPtTHIvKFxQ3aBJxu6v1WEVRTcQEGtn2+GRsbRWJi+mZZyC6Cm eoGPu1cjbYd5k5pfpoGwGFAv71zhTOtARZMqcIe0pxldpx3orH8r6lDodI47fSdh feTa1FUU37B42aVHEP8ctBUU3R5DAyn2wwEdKEkfY2cIEf2Tl6SB+UvlbTuAoae/ dD36XNx7X7oRV9h75Nqfts3R1kEkicPBSd0DqJC8YLblPQ3/y+mQhQK1hBB5lFCG s9vrYu0x9FT6yEG0X7YqS3lHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzukgOKRa XlvGhv7gACcQtUQGw4cwHwYDVR0jBBgwFoAUY8cf6xOR9jNAyM8P0RHP7yK6yJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGNTdBLzk5QUYyMTE2OTZD ODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpOQXlNOFAwUkhQN3lLNnlK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWThjZjZ4T1I5ak5BeU04UDBSSFA3eUs2eUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG NTdBLzk5QUYyMTE2OTZDODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpO QXlNOFAwUkhQN3lLNnlKYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFxde18wIYSpJ4PGAG/oqKi2/JZlVfLbjfMw6EmlBT+AJU/5SRQfCoQDS3SyDF kpN5ftl9HSFh2BKW5jboeX20ICpXBAH4sKuZjSAGpiuhLkvfpgJjkwjy9+0oThIO NVSItEw1Y3lJvyVSUQKHP+rq6naLVK7wWkYDYnEYWzhJVwBhD6GtlfLYqhNYWFqm 86jXqUb4I0Rryi4kZ5dtNbP6/yAhcyqCbmwRjmkw43k+JZt2e1e8xu4gflDlaUg3 0DuTKxTsQ0XRaUEqPV6OiWbLrcIyJgCMOTcRN6yXuQj1CFmgoJfpFBfFKxapbA3d 9O0p4+qOLNZ9mVh8A7u5o9kL -----END CERTIFICATE-----Generated at Sun Oct 18 03:21:13 2026 by rpki-client