$ rpki-client -vvvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: +mXKnpOpjTRYs7bATxXwa6BCLl9liMXqu3ZCF2WzS08= Subject key identifier: 23:87:1F:8E:BD:1F:BF:E4:1D:FC:9B:23:EA:DB:F0:A3:80:B4:7E:24 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0AA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0A93 Signing time: Mon 26 Oct 2026 17:10:45 +0000 Manifest this update: Mon 26 Oct 2026 17:10:45 +0000 Manifest next update: Mon 02 Nov 2026 17:10:45 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: i8MZzGhtHLUKFKNkP6pOlIGEiesRJA6/vQ61tBlcxmY=) 2: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=) 3: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Oct 26 17:10:45 2026 GMT Not After : Nov 2 17:10:45 2026 GMT Subject: CN=6adf8995-5c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c4:56:11:70:c3:bf:12:48:4e:ae:75:54:73: 91:8a:a9:0b:cc:13:3d:bf:17:46:17:4b:a4:4a:b7: c5:ea:28:85:1e:0e:bd:0a:54:7c:8e:1d:f3:48:34: f0:e7:39:99:f3:28:4f:c3:f0:b2:f7:a0:07:38:ab: 0c:49:b2:8a:b4:c7:aa:a7:67:5b:ee:0e:02:9e:f8: 5e:8a:bd:be:78:dd:03:62:f4:8d:8c:b3:00:7b:35: 4d:45:3c:45:67:98:24:a3:98:ee:25:21:87:34:3e: 7c:a5:12:94:53:06:9c:08:03:da:0c:c4:2c:d9:89: 30:d0:ba:28:b3:fc:b0:7e:15:dc:ab:e7:55:c6:18: 58:ca:f6:ff:46:84:60:75:a0:45:b1:f4:bc:cf:80: 8a:be:b9:51:0c:de:6b:8b:8e:e0:23:bf:fb:88:ba: 20:ff:10:52:a9:92:a5:54:6b:b7:85:21:39:32:7e: c3:9e:48:47:c5:9c:da:85:5c:10:fa:f5:73:3a:36: a8:47:e2:0b:06:fa:42:c5:df:4e:e0:4e:49:62:cc: 05:cf:7c:ce:cf:52:14:ca:90:54:65:7c:90:1b:8d: 82:44:94:2a:65:42:a6:a6:b5:dc:cf:71:04:82:7f: 73:51:60:29:b0:e8:54:eb:c4:5e:8b:d9:05:04:d3: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:87:1F:8E:BD:1F:BF:E4:1D:FC:9B:23:EA:DB:F0:A3:80:B4:7E:24 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0e:ae:a7:1e:93:0d:c6:60:e6:91:4d:e3:4f:b5:61:b7:f1: 86:1d:cb:ee:53:ad:52:71:de:a1:8a:88:9b:94:92:e7:66:50: ae:82:10:4d:08:cf:67:43:04:cc:34:67:1b:b9:fc:db:56:22: 06:75:e3:88:a8:46:f3:27:fd:3c:a5:13:30:69:bb:66:24:95: 04:75:7b:d9:50:05:77:2f:6b:92:bd:a8:dc:13:29:10:8d:06: 25:dc:c1:95:05:3c:d0:4c:66:d9:7f:f8:8a:ce:df:78:15:96: ea:20:50:a1:9b:f6:a3:1e:83:2a:ab:9c:de:25:10:da:59:f9: 55:fa:57:0f:d4:a4:d2:2f:90:6e:10:47:d0:bb:ec:91:a0:47: 0a:bd:ac:f2:a6:ee:e6:47:54:63:13:02:58:21:bc:24:6d:4b: 9d:ad:e3:07:67:b5:49:99:b0:c6:61:1c:24:e3:2c:45:5b:b1: 91:55:fa:23:3d:54:e5:61:80:9a:0a:88:9e:da:c9:72:c0:93: e0:94:e2:24:05:8d:ce:8e:40:b9:2c:4e:4c:67:fe:08:9b:26: 31:d8:20:da:ec:6f:72:c9:40:cc:d4:40:23:37:cd:62:f1:39: fa:a4:2d:ff:71:8a:22:23:ad:59:1f:a2:aa:b0:79:45:8b:d1: 70:9e:7d:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjYxMDI2MTcxMDQ1WhcNMjYxMTAyMTcxMDQ1WjAYMRYwFAYD VQQDEw02YWRmODk5NS01YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9cRWEXDDvxJITq51VHORiqkLzBM9vxdGF0ukSrfF6iiFHg69ClR8jh3zSDTw 5zmZ8yhPw/Cy96AHOKsMSbKKtMeqp2db7g4Cnvheir2+eN0DYvSNjLMAezVNRTxF Z5gko5juJSGHND58pRKUUwacCAPaDMQs2Ykw0Loos/ywfhXcq+dVxhhYyvb/RoRg daBFsfS8z4CKvrlRDN5ri47gI7/7iLog/xBSqZKlVGu3hSE5Mn7DnkhHxZzahVwQ +vVzOjaoR+ILBvpCxd9O4E5JYswFz3zOz1IUypBUZXyQG42CRJQqZUKmprXcz3EE gn9zUWApsOhU68Rei9kFBNNB6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOHH469 H7/kHfybI+rb8KOAtH4kMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfQ6upx6TDcZg5pFN40+1Ybfxhh3L7lOtUnHeoYqIm5SS52ZQroIQTQjPZ0ME zDRnG7n821YiBnXjiKhG8yf9PKUTMGm7ZiSVBHV72VAFdy9rkr2o3BMpEI0GJdzB lQU80Exm2X/4is7feBWW6iBQoZv2ox6DKquc3iUQ2ln5VfpXD9Sk0i+QbhBH0Lvs kaBHCr2s8qbu5kdUYxMCWCG8JG1Lna3jB2e1SZmwxmEcJOMsRVuxkVX6Iz1U5WGA mgqIntrJcsCT4JTiJAWNzo5AuSxOTGf+CJsmMdgg2uxvcslAzNRAIzfNYvE5+qQt /3GKIiOtWR+iqrB5RYvRcJ59Iw== -----END CERTIFICATE-----Generated at Tue Oct 27 15:23:58 2026 by rpki-client