$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json) Hash identifier: 2BgWV5cVrDX+4Iq2n3btHoWYyNJa41GUXfR1+wFmAf4= Subject key identifier: 10:6A:08:83:87:3C:6E:10:94:57:80:A4:C5:E6:74:6E:13:A7:1D:FA Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1 Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft Manifest number: 02DD Signing time: Sun 25 Oct 2026 01:22:15 +0000 Manifest this update: Sun 25 Oct 2026 01:22:15 +0000 Manifest next update: Sun 01 Nov 2026 01:22:15 +0000 Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: C6IVttYJmd2/dbxB/eT9Eft0PmXKage9MrbM8kJANp4=) 2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 01:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1 Validity Not Before: Oct 25 01:22:15 2026 GMT Not After : Nov 1 01:22:15 2026 GMT Subject: CN=6add59c7-11fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:2e:1c:2b:46:56:ad:1f:b2:3e:27:46:d4: 91:72:df:7e:b9:5f:6f:8f:90:dc:65:92:b3:1a:38: 13:ca:87:d9:39:9e:14:15:4e:cc:62:fd:76:44:f3: 32:d2:1f:cc:a3:80:f5:0b:c0:dc:60:95:7c:e4:48: d7:8c:05:68:0f:5d:65:60:99:d9:ec:48:66:e6:93: 8a:48:96:0c:ba:dc:31:ad:b4:cd:c6:96:28:fb:07: e4:5b:f8:91:96:16:4f:58:52:c5:2e:85:30:89:ed: b3:c1:2e:41:aa:1f:ce:90:a4:0f:1d:c9:18:36:a6: 0d:06:d8:18:2e:30:be:61:ac:62:40:be:c5:fc:cd: cd:e7:46:7f:f2:45:7a:d7:20:00:24:46:09:73:76: 9c:66:0c:55:47:27:7b:be:84:99:b0:3f:0d:85:98: 2e:58:c6:af:27:89:17:f3:c1:ff:80:2e:1d:30:6e: 65:d2:5e:68:0b:8b:d0:09:61:9a:20:d7:a5:96:01: ec:f6:ec:62:f5:83:29:17:76:d3:ae:d2:de:3b:c1: ab:07:10:82:80:fb:4d:24:0e:91:a8:c8:6e:8c:d0: 5c:d6:5e:5c:50:7b:e1:9b:c1:47:30:57:ed:d5:e1: bb:a8:10:0a:6b:10:41:5e:a0:b4:f0:b1:74:46:80: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:08:83:87:3C:6E:10:94:57:80:A4:C5:E6:74:6E:13:A7:1D:FA X509v3 Authority Key Identifier: keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c3:24:cf:94:c0:a1:e9:18:28:32:b6:a2:0e:5b:6b:96:45: 8b:06:1d:29:25:d1:2e:6b:bb:3e:42:de:d1:cf:df:0f:23:da: eb:c7:b0:89:4b:d6:6d:5b:70:84:6c:8d:23:9c:ff:72:1f:2b: 48:c5:68:f1:cd:88:d6:89:a3:bc:4c:c9:4c:fd:30:47:da:2e: 29:ec:cf:2d:7b:05:7d:d3:4d:e9:1a:ff:8e:43:3d:28:0b:83: 35:24:3c:30:c6:2c:53:d9:e8:84:c3:d6:de:d2:1f:9a:24:d5: 82:24:df:b8:00:12:d4:09:74:0d:67:85:be:e1:7d:bd:33:7f: 73:d1:ab:a2:11:92:63:9a:b4:b4:f2:1d:de:93:ed:58:0d:c0: 4d:62:79:6d:35:33:08:ae:5a:df:30:38:5e:df:83:78:43:82: 6e:fe:d1:fc:7e:2f:93:0e:ce:1c:32:b3:f6:a4:4f:25:3b:79: aa:49:ba:a2:08:68:85:d3:ba:fe:eb:aa:d2:31:ad:c0:11:c7: 98:92:73:53:43:e7:68:a2:f5:ca:d5:f1:c3:49:19:af:f9:91: 5f:1a:1c:a2:22:85:87:1d:bb:4d:fb:aa:b9:0b:1f:0b:24:3a: 49:c8:b1:2d:4a:1b:75:ab:c1:2b:80:48:e9:c6:85:5e:da:f3: f6:0f:80:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQTUxMTAvBgNVBAUTKDYwMThCOTg1QzM5OUNCMDczMUMxNjM0Q0ZFNEI0Nzkx MkYyQUY1RDEwHhcNMjYxMDI1MDEyMjE1WhcNMjYxMTAxMDEyMjE1WjAYMRYwFAYD VQQDEw02YWRkNTljNy0xMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq78uHCtGVq0fsj4nRtSRct9+uV9vj5DcZZKzGjgTyofZOZ4UFU7MYv12RPMy 0h/Mo4D1C8DcYJV85EjXjAVoD11lYJnZ7Ehm5pOKSJYMutwxrbTNxpYo+wfkW/iR lhZPWFLFLoUwie2zwS5Bqh/OkKQPHckYNqYNBtgYLjC+YaxiQL7F/M3N50Z/8kV6 1yAAJEYJc3acZgxVRyd7voSZsD8NhZguWMavJ4kX88H/gC4dMG5l0l5oC4vQCWGa INellgHs9uxi9YMpF3bTrtLeO8GrBxCCgPtNJA6RqMhujNBc1l5cUHvhm8FHMFft 1eG7qBAKaxBBXqC08LF0RoCpkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBqCIOH PG4QlFeApMXmdG4Tpx36MB8GA1UdIwQYMBaAFGAYuYXDmcsHMcFjTP5LR5EvKvXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JBNS8yODYyMENDNDcw NUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3Y3h3V05NX2t0SGtTOHE5 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3 Y3h3V05NX2t0SGtTOHE5ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAScMkz5TAoekYKDK2og5ba5ZFiwYdKSXRLmu7PkLe0c/fDyPa68ewiUvWbVtw hGyNI5z/ch8rSMVo8c2I1omjvEzJTP0wR9ouKezPLXsFfdNN6Rr/jkM9KAuDNSQ8 MMYsU9nohMPW3tIfmiTVgiTfuAAS1Al0DWeFvuF9vTN/c9GrohGSY5q0tPId3pPt WA3ATWJ5bTUzCK5a3zA4Xt+DeEOCbv7R/H4vkw7OHDKz9qRPJTt5qkm6oghohdO6 /uuq0jGtwBHHmJJzU0PnaKL1ytXxw0kZr/mRXxocoiKFhx27TfuquQsfCyQ6Scix LUobdavBK4BI6caFXtrz9g+AeA== -----END CERTIFICATE-----Generated at Mon Oct 26 08:31:30 2026 by rpki-client