$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: ktqJjUJdSdclOm9tdqq3X6/mtOvxBzt1Hr2CbaIKwWs= Subject key identifier: C8:E0:55:09:9D:64:21:38:AF:9E:1E:E1:DB:47:C1:7B:8D:F2:71:DD Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 192C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 191A Signing time: Fri 02 Oct 2026 16:34:05 +0000 Manifest this update: Fri 02 Oct 2026 16:34:04 +0000 Manifest next update: Fri 09 Oct 2026 16:34:04 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: yEcNtxA7jezyU9xT17mDlX3R4mmjbRZLMPji/ajIcrA=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: LN8SJ3+25Y2Ck45ZaDbAqfPgkdrya3Oui9uvtFNOgyY=) 3: I9wFIjGrZciWc2WOp5wKgrJylDA.asa (hash: nUgaJRZjMnMLsC7I/sGR3RE4fNrUrjGIhi+GeGgS4R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6444 (0x192c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Oct 2 16:34:04 2026 GMT Not After : Oct 9 16:34:04 2026 GMT Subject: CN=6abfdcfd-ee01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:30:ea:7e:06:dc:cb:32:46:0a:7c:00:9c:b7: 9a:8c:5e:71:d5:ce:de:0d:52:95:3e:30:60:d0:55: 1d:a8:6b:b3:b9:46:6b:9e:7e:5d:cd:09:60:3c:91: 83:54:e3:42:9b:5a:e8:44:58:b8:9d:f9:7e:5e:4d: a0:d2:81:b2:61:78:ee:8f:60:52:02:ab:07:f3:09: 69:12:13:e5:60:58:48:ce:14:d7:4c:ce:f5:cf:47: 11:3e:65:37:15:99:00:fa:96:2b:5a:30:e0:bf:64: 2f:ae:03:57:3b:15:89:3a:5a:84:8a:90:d3:cb:50: d2:5b:49:78:15:6e:23:73:c2:6b:bd:40:f6:62:bc: c2:3f:bb:fc:9f:cc:b6:f1:a2:ae:63:3b:e2:4c:fb: 9a:32:06:1a:07:ee:d7:71:fc:57:26:64:2b:3d:67: a0:4b:bc:2e:ce:63:33:73:3d:ce:22:6b:39:e8:dc: 83:5c:e1:12:01:bc:83:74:21:b9:b5:ab:ad:e0:85: 8a:58:a2:f3:72:90:e7:fd:b9:9d:91:de:90:e9:2f: 01:49:9f:59:74:c3:20:67:a5:7e:83:54:88:63:d9: 92:de:44:dd:33:cd:81:8a:00:39:54:2e:78:aa:0c: fe:0a:09:f1:7e:c9:1a:5e:c8:53:34:39:15:a0:75: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E0:55:09:9D:64:21:38:AF:9E:1E:E1:DB:47:C1:7B:8D:F2:71:DD X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f4:da:bf:d3:51:3a:6a:30:74:9e:4d:9d:ce:46:37:fe:e2: 96:3b:74:0e:72:00:bc:8d:4a:c8:2b:89:9b:9f:3b:1b:f3:ba: 7b:b9:0e:6d:83:f8:fc:8a:75:0f:29:9a:8c:ae:46:5f:5b:01: f2:3e:44:79:54:eb:4c:72:25:6e:2d:3b:87:ad:2d:5e:36:86: 43:f2:b4:23:3c:19:25:63:a6:6d:59:bc:fd:24:b2:39:8f:d0: ca:d7:7f:bf:8d:f9:29:a1:3c:38:db:93:82:e8:7b:40:1c:b8: 9b:87:75:4a:f9:44:50:8b:bc:70:4e:01:95:a4:c6:c5:8c:26: 53:6d:5f:7c:5e:43:87:66:90:67:c6:29:cd:33:ed:e8:31:c6: 81:6c:08:25:6e:7b:f5:d4:b5:55:99:bf:57:f2:79:5d:e4:e6: d4:72:b8:b8:78:db:79:70:e4:ab:4e:a2:4c:26:5e:8f:6f:0b: c9:a4:4b:0b:7e:c3:1f:95:a1:40:7c:dd:96:4a:0a:a9:fd:f9: f3:ab:93:7c:76:2f:c7:f6:78:f8:96:24:51:43:e9:98:9b:70: e0:0f:ac:fd:5c:a2:5d:9a:90:15:d9:e2:8b:e7:8f:8a:b1:04: 44:dd:95:9f:e1:cb:26:de:64:f9:d0:35:47:ec:7e:5d:df:b9: 52:78:ee:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYxMDAyMTYzNDA0WhcNMjYxMDA5MTYzNDA0WjAYMRYwFAYD VQQDEw02YWJmZGNmZC1lZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhzDqfgbcyzJGCnwAnLeajF5x1c7eDVKVPjBg0FUdqGuzuUZrnn5dzQlgPJGD VONCm1roRFi4nfl+Xk2g0oGyYXjuj2BSAqsH8wlpEhPlYFhIzhTXTM71z0cRPmU3 FZkA+pYrWjDgv2QvrgNXOxWJOlqEipDTy1DSW0l4FW4jc8JrvUD2YrzCP7v8n8y2 8aKuYzviTPuaMgYaB+7XcfxXJmQrPWegS7wuzmMzcz3OIms56NyDXOESAbyDdCG5 taut4IWKWKLzcpDn/bmdkd6Q6S8BSZ9ZdMMgZ6V+g1SIY9mS3kTdM82BigA5VC54 qgz+CgnxfskaXshTNDkVoHW0hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjgVQmd ZCE4r54e4dtHwXuN8nHdMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/Tav9NROmowdJ5Nnc5GN/7iljt0DnIAvI1KyCuJm587G/O6e7kObYP4/Ip1 DymajK5GX1sB8j5EeVTrTHIlbi07h60tXjaGQ/K0IzwZJWOmbVm8/SSyOY/Qytd/ v435KaE8ONuTguh7QBy4m4d1SvlEUIu8cE4BlaTGxYwmU21ffF5Dh2aQZ8YpzTPt 6DHGgWwIJW579dS1VZm/V/J5XeTm1HK4uHjbeXDkq06iTCZej28LyaRLC37DH5Wh QHzdlkoKqf3586uTfHYvx/Z4+JYkUUPpmJtw4A+s/VyiXZqQFdnii+ePirEERN2V n+HLJt5k+dA1R+x+Xd+5UnjuxA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:03:53 2026 by rpki-client