$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: j+r0FBLmeB54QZt+HDI2plIpDG1MJEvNAYGNQRspMUw= Subject key identifier: 82:9B:8F:59:20:64:00:8D:8D:00:26:90:3E:3F:09:3A:6E:C8:0E:C6 Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: 0104 Signing time: Mon 19 Oct 2026 07:11:46 +0000 Manifest this update: Mon 19 Oct 2026 07:11:45 +0000 Manifest next update: Mon 26 Oct 2026 07:11:45 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: kKg0YHXFJNbKfaT9Zb2AXnVLKKGq8y7pOWguOr/9Uuo=) 2: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=) 3: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=) 4: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=) 5: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Oct 19 07:11:45 2026 GMT Not After : Oct 26 07:11:45 2026 GMT Subject: CN=6ad5c2b2-5d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:96:24:29:6a:ed:66:00:fb:56:a5:5a:06: 0a:c9:55:11:5e:09:e0:9b:39:93:f4:e6:4d:e9:84: d3:de:f8:6f:c5:d7:4f:8c:10:cd:7b:35:d6:0d:41: 80:69:45:66:f1:56:49:9b:c0:dd:e6:1f:93:40:6e: 4c:86:c0:f1:d7:ae:64:b8:28:42:47:8a:2e:34:fd: fe:96:2a:3a:fa:9a:5d:9c:57:20:16:9c:44:18:21: 1c:c3:f3:fc:d3:55:c3:c3:ae:3e:67:2f:93:8b:fd: 18:d2:7e:58:40:88:97:ae:14:2d:1a:fe:a4:36:0f: 2f:82:71:09:79:68:66:6b:31:59:9c:29:c9:d4:38: aa:a3:1a:8f:ec:c2:00:fe:25:47:51:44:a4:c7:d3: 23:82:76:69:6e:98:38:46:77:96:b5:7e:aa:73:f7: 04:1a:1b:fd:ad:07:af:39:bc:14:7d:47:dc:21:b4: c0:d4:7f:29:2c:3c:51:da:4b:4a:0e:c9:93:76:0a: 36:63:be:c3:32:60:9c:d5:ca:f9:6b:42:04:4f:df: d3:5d:30:be:c4:c0:27:da:11:b6:25:11:62:0e:67: f2:a8:57:4c:55:bf:91:6b:6a:4e:dd:f4:e9:33:d0: 10:35:7a:17:bb:3f:10:5c:33:71:03:b7:79:1f:97: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:8F:59:20:64:00:8D:8D:00:26:90:3E:3F:09:3A:6E:C8:0E:C6 X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:11:4f:80:86:30:22:85:6d:aa:f2:7a:6c:20:11:eb:a6:d3: fd:15:db:2e:78:6f:df:78:9c:90:ad:16:7e:7a:91:71:19:bf: f0:2f:0e:4a:6a:21:f2:f6:6e:0b:ae:45:d0:b1:15:10:1e:30: cc:bf:02:5f:3b:e5:e5:fa:0e:19:15:b3:4f:79:0e:5f:e1:96: 38:46:52:cd:9b:df:a5:d8:73:05:c2:d2:19:ae:4e:49:ca:ab: 2d:da:7e:fd:fb:93:a7:b6:95:cf:00:18:36:b0:ce:4e:ce:99: 4e:20:11:40:f9:d6:4d:b5:b9:c9:c3:1e:d6:5b:b5:e7:08:d8: 72:38:e7:f0:37:2a:ee:11:d6:7b:f0:af:74:b2:24:26:33:f2: 80:e1:84:35:85:b3:28:ce:09:48:ec:05:00:06:19:65:b5:7d: 74:2d:56:a9:84:75:80:9a:8e:36:63:6f:32:ec:79:8d:43:94: e9:71:f9:e4:97:c0:83:28:d4:b2:b1:42:3e:ce:1b:f5:67:c5: 1e:8e:0e:df:19:8b:94:e8:8d:5f:25:c4:45:21:15:e9:22:2d: f8:b0:af:bc:aa:99:e0:ee:6e:d2:40:16:d9:f7:07:07:30:b7: 95:36:44:db:d7:df:43:8a:10:e5:c7:e4:43:67:89:3d:20:ec: 6e:18:09:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw RUM0NkUxRkIwHhcNMjYxMDE5MDcxMTQ1WhcNMjYxMDI2MDcxMTQ1WjAYMRYwFAYD VQQDEw02YWQ1YzJiMi01ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTuWJClq7WYA+1alWgYKyVURXgngmzmT9OZN6YTT3vhvxddPjBDNezXWDUGA aUVm8VZJm8Dd5h+TQG5MhsDx165kuChCR4ouNP3+lio6+ppdnFcgFpxEGCEcw/P8 01XDw64+Zy+Ti/0Y0n5YQIiXrhQtGv6kNg8vgnEJeWhmazFZnCnJ1DiqoxqP7MIA /iVHUUSkx9MjgnZpbpg4RneWtX6qc/cEGhv9rQevObwUfUfcIbTA1H8pLDxR2ktK DsmTdgo2Y77DMmCc1cr5a0IET9/TXTC+xMAn2hG2JRFiDmfyqFdMVb+Ra2pO3fTp M9AQNXoXuz8QXDNxA7d5H5do5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKbj1kg ZACNjQAmkD4/CTpuyA7GMB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkxFPgIYwIoVtqvJ6bCAR66bT/RXbLnhv33ickK0WfnqRcRm/8C8OSmoh8vZu C65F0LEVEB4wzL8CXzvl5foOGRWzT3kOX+GWOEZSzZvfpdhzBcLSGa5OScqrLdp+ /fuTp7aVzwAYNrDOTs6ZTiARQPnWTbW5ycMe1lu15wjYcjjn8Dcq7hHWe/CvdLIk JjPygOGENYWzKM4JSOwFAAYZZbV9dC1WqYR1gJqONmNvMux5jUOU6XH55JfAgyjU srFCPs4b9WfFHo4O3xmLlOiNXyXERSEV6SIt+LCvvKqZ4O5u0kAW2fcHBzC3lTZE 29ffQ4oQ5cfkQ2eJPSDsbhgJrQ== -----END CERTIFICATE-----Generated at Wed Oct 21 03:14:58 2026 by rpki-client