$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft File: y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft (raw, json) Hash identifier: 5NImxXV+vGRJTF8COZoRatn/f4lLoCMVobzo+ejZ8y8= Subject key identifier: BF:29:70:01:11:DD:3B:AE:E0:A1:42:B6:DD:EB:48:23:7B:E1:D8:7D Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64 Certificate issuer: /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft Manifest number: 38 Signing time: Sun 11 Oct 2026 09:17:15 +0000 Manifest this update: Sun 11 Oct 2026 09:17:15 +0000 Manifest next update: Sun 18 Oct 2026 09:17:15 +0000 Files and hashes: 1: y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl (hash: RkrwhUPScGjTu4ObcUTB/nnmq6ahJKa6TYrvlHT5WsM=) 2: 57845FE2794811F1AAEBC54078A30FBC.roa (hash: w1yghT1rOxwGO8/T6GJUmND+ehogxUkK8p0zMCmeKII=) 3: D9B1050C794711F18C3268FE77A30FBC.roa (hash: MZj0KWbRgcpAkQHNAEsOeyaAYyuXdWg3Z7/YmLPlVvg=) 4: 58704E16794811F1AAEBC54078A30FBC.roa (hash: Km7e1KI0bVjT2Vh8k/KxoUV9U/mE9RQGwRbSbVtmpII=) 5: 5958BB9C794811F1AAEBC54078A30FBC.roa (hash: TuJjYxvjs+S72EJKI50mOSLZsks+omAAzCh4dv+qAnY=) 6: 57254472794711F1832D99FC77A30FBC.roa (hash: v65T9nnV5djYR187TPvpWjpUtCbMgF/t1xM2ojHyBBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64 Validity Not Before: Oct 11 09:17:15 2026 GMT Not After : Oct 18 09:17:15 2026 GMT Subject: CN=6acb541b-5830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:d0:f1:d1:da:ae:cd:37:fc:ed:56:88:43: 66:36:aa:2b:c0:66:f2:f7:9c:26:ca:07:1f:21:0d: 83:46:4c:14:91:6c:36:93:0c:ff:a7:c1:9e:29:6d: 4d:84:5a:16:2b:02:25:e3:6a:dd:07:02:62:7b:d2: 74:3d:64:cd:88:72:3a:c9:8a:82:7b:48:a1:12:2c: d7:65:f0:d1:48:9a:fc:ca:91:f7:1b:5d:3e:d5:c8: c3:fd:ad:99:1b:62:60:70:83:77:43:87:7f:e0:0f: eb:67:c1:24:30:2e:59:19:c7:ea:da:75:71:87:74: 46:e2:9b:2e:9f:69:4e:19:09:fb:4d:9d:b0:61:79: 38:81:fe:3e:89:55:64:f2:66:ef:40:37:06:40:c7: 97:10:54:92:1a:11:26:34:5a:b8:4c:c0:30:62:ec: 86:66:86:08:3d:cf:17:c3:a6:f6:9f:23:97:f1:72: fb:87:6e:16:6e:e7:fa:88:88:cf:f8:4b:cc:30:63: bb:69:73:3a:a6:54:40:02:45:7d:9e:9a:84:ed:ac: b3:cb:af:b4:79:0d:18:f4:33:68:cd:e0:ec:c3:1a: d6:26:42:74:b5:a2:0c:57:35:ff:39:21:cb:9d:38: c4:1d:c4:97:05:50:39:43:26:09:9a:39:8b:ea:31: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:29:70:01:11:DD:3B:AE:E0:A1:42:B6:DD:EB:48:23:7B:E1:D8:7D X509v3 Authority Key Identifier: keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:48:f5:98:9c:67:fd:a4:b5:a1:e0:ec:a7:d7:15:0a:a1:ee: 43:cd:61:84:47:f6:ea:54:58:10:e5:37:a1:25:d6:5b:75:b4: b2:18:2a:8e:22:89:d4:4e:09:69:84:43:ab:a0:d1:68:d6:0c: 3b:a3:c7:05:a3:d6:d8:4b:4d:60:7d:21:29:97:e3:c5:9d:f2: b6:5b:23:64:22:05:6e:86:56:11:e4:51:87:b3:04:80:74:0b: fd:b4:b0:45:07:79:5d:99:d1:95:54:7b:32:f2:39:4b:a7:d8: 96:c9:c7:de:2e:41:d4:65:d3:79:00:26:3e:8f:64:56:be:d7: 95:79:c8:8a:b7:41:c8:27:7d:1a:59:b7:e2:d0:a5:be:0a:6e: 5f:d9:3f:76:e6:3a:55:cb:4a:f1:f8:f2:57:37:ac:8d:2e:79: 64:74:71:01:e5:9f:63:a4:64:fe:f1:fa:99:d6:f0:db:c2:b5: 7c:ae:1f:55:fb:06:65:3f:73:00:e7:44:3b:6f:cf:f3:99:63: 98:3a:6c:22:a5:26:1a:77:67:54:a3:bb:36:ab:69:df:4c:2a: 4b:46:b7:9a:12:48:0f:af:63:d8:02:cb:e0:aa:78:c9:3e:4b: b3:f9:ed:c8:c7:e1:86:d7:62:c3:01:aa:1d:c0:91:6e:5d:b5: 9c:45:89:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEY5NzExMC8GA1UEBRMoQ0JCRDVCMUMzMUMxNjEyRTE1QUNFQzQ3MjU0RkQyRjMz RUM2OUM2NDAeFw0yNjEwMTEwOTE3MTVaFw0yNjEwMTgwOTE3MTVaMBgxFjAUBgNV BAMTDTZhY2I1NDFiLTU4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZddDx0dquzTf87VaIQ2Y2qivAZvL3nCbKBx8hDYNGTBSRbDaTDP+nwZ4pbU2E WhYrAiXjat0HAmJ70nQ9ZM2IcjrJioJ7SKESLNdl8NFImvzKkfcbXT7VyMP9rZkb YmBwg3dDh3/gD+tnwSQwLlkZx+radXGHdEbimy6faU4ZCftNnbBheTiB/j6JVWTy Zu9ANwZAx5cQVJIaESY0WrhMwDBi7IZmhgg9zxfDpvafI5fxcvuHbhZu5/qIiM/4 S8wwY7tpczqmVEACRX2emoTtrLPLr7R5DRj0M2jN4OzDGtYmQnS1ogxXNf85Icud OMQdxJcFUDlDJgmaOYvqMSIdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvylwARHd O67goUK23etII3vh2H0wHwYDVR0jBBgwFoAUy71bHDHBYS4VrOxHJU/S8z7GnGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRjk3L0QwRkUwMEFBNzk0 NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0VnJPeEhKVV9TOHo3R25H US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTcxYkhESEJZUzRWck94SEpVX1M4ejdHbkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw Rjk3L0QwRkUwMEFBNzk0NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0 VnJPeEhKVV9TOHo3R25HUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9SPWYnGf9pLWh4Oyn1xUKoe5DzWGER/bqVFgQ5TehJdZbdbSyGCqOIonUTglp hEOroNFo1gw7o8cFo9bYS01gfSEpl+PFnfK2WyNkIgVuhlYR5FGHswSAdAv9tLBF B3ldmdGVVHsy8jlLp9iWycfeLkHUZdN5ACY+j2RWvteVeciKt0HIJ30aWbfi0KW+ Cm5f2T925jpVy0rx+PJXN6yNLnlkdHEB5Z9jpGT+8fqZ1vDbwrV8rh9V+wZlP3MA 50Q7b8/zmWOYOmwipSYad2dUo7s2q2nfTCpLRreaEkgPr2PYAsvgqnjJPkuz+e3I x+GG12LDAaodwJFuXbWcRYkU -----END CERTIFICATE-----Generated at Mon Oct 12 20:23:24 2026 by rpki-client