$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json) Hash identifier: 508UungnqBcQZEpkSy8wiE5KsEV15jVomuug50j+zgg= Subject key identifier: E0:FD:61:C8:8C:C8:7A:F0:E9:C5:76:58:B4:EE:F6:3E:F6:56:5A:86 Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft Manifest number: 0D1E Signing time: Fri 02 Oct 2026 18:33:14 +0000 Manifest this update: Fri 02 Oct 2026 18:33:14 +0000 Manifest next update: Fri 09 Oct 2026 18:33:14 +0000 Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: zwabgn91plwW5sTX8XO35D9Mff/6ZihdgpAT29O3jHE=) 2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: c63Et1Ir/YnB7K8uol85rXXmz9MoXTQl05iq46Egj80=) 3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: KI0wtfrpzzeldL0TKgebNaTut7M4MCF1WK3HZwTSHVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Validity Not Before: Oct 2 18:33:14 2026 GMT Not After : Oct 9 18:33:14 2026 GMT Subject: CN=6abff8ea-4c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:1c:5a:cc:d9:47:51:d1:f1:49:67:fd:f1: 37:12:75:bd:02:d1:94:c4:83:f3:be:e4:e6:50:93: d4:d2:81:66:03:5f:85:2b:55:79:24:c6:d2:09:38: 72:8f:15:ce:43:2d:35:50:32:e4:31:e3:ec:db:e1: 2a:e4:44:2f:c5:88:a9:10:11:89:db:80:42:76:2f: 7d:1d:19:3e:c6:c3:62:af:3f:55:78:a2:cc:3e:81: 90:f1:f5:ec:89:85:bf:a8:57:44:df:11:31:a3:68: e2:52:2d:50:e1:b8:00:7f:6e:f5:ba:60:9b:a6:49: 11:63:d1:26:61:c1:7d:3c:c1:1d:5d:84:51:d6:a0: 63:9d:81:a4:7f:af:50:49:52:17:69:2d:0f:e7:d4: d8:f0:61:5d:ea:81:d4:5c:2c:e3:9c:78:d0:d1:bb: 31:d9:1e:38:8c:0b:91:2f:cd:23:ee:b1:55:63:fa: f2:54:95:cc:48:9e:2a:4f:dc:e5:19:e6:bc:00:3d: b5:49:c9:05:95:33:9f:db:88:f4:d5:31:fd:83:d4: 9d:ef:cd:6f:bf:b0:5e:a2:13:36:bf:5b:82:99:1e: a9:36:64:58:2b:b7:ad:96:57:e6:71:d3:2b:24:75: cf:9d:63:e4:df:fb:8f:1f:8f:59:c9:2d:6a:86:36: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FD:61:C8:8C:C8:7A:F0:E9:C5:76:58:B4:EE:F6:3E:F6:56:5A:86 X509v3 Authority Key Identifier: keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:73:6e:4e:58:3f:60:75:1d:9b:78:4d:e3:fa:ae:07:59:c1: c1:9f:01:4a:b0:c4:b1:b6:9e:7d:04:30:74:a8:f9:3d:a9:a2: f1:0f:c0:90:60:1d:c3:0c:e9:f7:ac:40:1e:3f:99:c2:6d:2f: 89:ad:8b:ba:68:32:9c:84:dd:db:c8:04:19:9c:6d:e1:09:2f: 50:8f:bf:bb:87:c6:c2:8a:11:57:b8:64:e2:ba:77:a0:94:b2: c1:c0:5e:8f:52:89:bb:87:2c:22:c1:c8:80:38:6c:a1:47:71: 81:c5:66:31:f0:2a:7b:d6:24:fc:e1:e5:39:aa:71:be:74:2f: 04:7a:64:2f:ab:1e:a3:57:0e:6c:87:df:67:50:91:d6:9e:37: 25:f6:f6:92:83:fb:59:02:0a:0d:77:7f:04:ac:60:2e:f3:24: a5:78:47:f4:d7:be:d4:d8:5c:47:20:20:18:47:15:11:e1:e7: e2:b5:a4:82:60:f6:e5:ae:39:e7:34:2e:2f:54:72:a7:21:17: a0:6e:a7:c6:3a:a7:8f:be:16:83:95:57:2c:f7:e4:10:68:e7: f2:d1:d1:e6:d0:7d:63:29:17:3d:2b:1b:a2:df:e9:6f:83:dc: d0:b5:6a:88:f4:66:9c:3d:c8:75:c8:55:11:bf:7e:4c:ac:a0: 2d:e4:dc:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGMDMxMTAvBgNVBAUTKEM5OUQ2MDA3Q0Q0NzdEODlCMzU5QzMzQzkzQ0FBOUI1 QkIxMDYwMUEwHhcNMjYxMDAyMTgzMzE0WhcNMjYxMDA5MTgzMzE0WjAYMRYwFAYD VQQDEw02YWJmZjhlYS00YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosEcWszZR1HR8Uln/fE3EnW9AtGUxIPzvuTmUJPU0oFmA1+FK1V5JMbSCThy jxXOQy01UDLkMePs2+Eq5EQvxYipEBGJ24BCdi99HRk+xsNirz9VeKLMPoGQ8fXs iYW/qFdE3xExo2jiUi1Q4bgAf271umCbpkkRY9EmYcF9PMEdXYRR1qBjnYGkf69Q SVIXaS0P59TY8GFd6oHUXCzjnHjQ0bsx2R44jAuRL80j7rFVY/ryVJXMSJ4qT9zl Gea8AD21SckFlTOf24j01TH9g9Sd781vv7BeohM2v1uCmR6pNmRYK7etllfmcdMr JHXPnWPk3/uPH49ZyS1qhjbTFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOD9YciM yHrw6cV2WLTu9j72VlqGMB8GA1UdIwQYMBaAFMmdYAfNR32Js1nDPJPKqbW7EGAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0YwMy82NEY2QzI4RTBE RTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZbXpXY004azhxcHRic1FZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laMWdCODFIZllteldjTThrOHFwdGJzUVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0YwMy82NEY2QzI4RTBERTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZ bXpXY004azhxcHRic1FZQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdnNuTlg/YHUdm3hN4/quB1nBwZ8BSrDEsbaefQQwdKj5Pami8Q/AkGAdwwzp 96xAHj+Zwm0via2LumgynITd28gEGZxt4QkvUI+/u4fGwooRV7hk4rp3oJSywcBe j1KJu4csIsHIgDhsoUdxgcVmMfAqe9Yk/OHlOapxvnQvBHpkL6seo1cObIffZ1CR 1p43Jfb2koP7WQIKDXd/BKxgLvMkpXhH9Ne+1NhcRyAgGEcVEeHn4rWkgmD25a45 5zQuL1RypyEXoG6nxjqnj74Wg5VXLPfkEGjn8tHR5tB9YykXPSsbot/pb4Pc0LVq iPRmnD3IdchVEb9+TKygLeTc8g== -----END CERTIFICATE-----Generated at Sun Oct 4 19:08:30 2026 by rpki-client