$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: yW33ZG/3eT9XriX0HJGLdv7a/JIzgeKZAIXA/etw47g= Subject key identifier: 4F:37:6D:53:1A:E4:11:5F:FE:3A:CE:B6:0A:25:E4:17:0C:51:DB:B4 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 21DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 21CB Signing time: Tue 06 Oct 2026 15:54:53 +0000 Manifest this update: Tue 06 Oct 2026 15:54:52 +0000 Manifest next update: Tue 13 Oct 2026 15:54:52 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: jDBjQpndXbI3/HnWbqN2VREw70sBUiZZhh8Bk49loIo=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: cxHZgIn5a1/ZA9XMExrABMXo9q2aRlc+y7PTtXON5ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8666 (0x21da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: Oct 6 15:54:52 2026 GMT Not After : Oct 13 15:54:52 2026 GMT Subject: CN=6ac519cd-2cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:3b:86:cf:eb:60:e8:37:e9:62:17:d5:3c: 0f:b0:53:67:ed:c0:05:d3:a4:4d:fd:9d:7b:ac:5a: ba:8f:ab:3f:f5:83:ed:f1:12:12:ed:f3:35:46:4f: 85:dc:9f:16:d4:93:58:84:a6:ca:c7:c8:68:02:43: 25:8d:0a:54:60:ee:ee:53:fe:64:13:78:0c:0d:77: b4:2a:bc:1d:11:a1:03:28:f3:95:4e:65:d9:2b:af: 5b:ab:50:67:34:88:26:ec:1f:d1:95:63:f3:26:50: 79:69:35:73:c8:e7:2a:58:39:f3:4f:62:44:13:a1: 1b:ea:14:7b:1c:fd:e6:e4:68:92:83:27:d5:db:f7: 9e:9a:05:7c:1e:63:13:53:0c:a4:ce:7e:52:7c:15: 74:38:2f:d1:25:e1:aa:a6:44:86:ca:e6:20:1a:8b: 1c:86:f7:d4:31:43:a0:73:5b:d6:22:0d:df:42:27: da:0a:4c:9d:00:86:fa:5e:87:86:73:39:ce:9b:d3: 6c:fb:47:64:0c:3f:ff:fe:75:e9:5a:f4:c4:01:4b: de:0b:f6:fc:56:0e:3f:81:6f:81:ce:4d:95:95:90: 6f:54:f5:4c:2f:cc:62:50:16:93:f2:27:f8:02:6e: 9b:0b:67:59:b0:fd:c1:6b:cf:43:8b:65:94:3e:5a: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:6D:53:1A:E4:11:5F:FE:3A:CE:B6:0A:25:E4:17:0C:51:DB:B4 X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:44:c7:fe:95:7c:ca:ba:32:dc:5d:f0:22:ca:07:a9:38:74: 02:df:b8:ff:9a:b3:72:5f:d9:11:c9:02:05:97:b3:20:3c:89: e3:1c:30:d2:e0:5f:cc:9d:2a:ca:dd:e1:d9:52:a8:d3:64:ad: dc:b2:c1:5a:4c:a0:99:7d:1b:b3:f2:27:6d:e3:7c:b4:10:38: 76:09:ce:ac:74:98:68:f1:8a:44:21:11:ca:d6:56:47:0a:cc: b6:44:b4:30:53:6c:19:cb:93:ec:72:3b:86:9e:52:fe:ac:df: 82:e8:c8:8f:c4:52:93:83:cc:cf:24:8e:75:8b:f5:82:43:cd: 76:ec:54:19:1f:45:0f:4a:42:be:32:be:f8:07:78:1e:1f:e4: ca:a0:a3:ba:68:88:86:78:db:bd:58:05:d9:f6:3b:2d:92:6d: 9d:fb:89:92:ee:1c:df:25:39:99:15:72:3d:d1:46:09:2b:7c: 6e:33:1b:4f:6a:eb:35:b9:63:ac:68:69:60:f8:4a:e6:e4:6a: 3b:b6:7f:57:df:d3:07:80:6f:6d:38:27:f0:34:db:c5:d1:87: 5e:42:fc:81:35:c0:fd:64:59:05:48:e6:37:13:23:d8:fa:aa: c0:a8:b0:5a:22:f5:a3:6e:d2:90:3d:52:68:e8:1d:51:84:9f: 40:c6:62:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjYxMDA2MTU1NDUyWhcNMjYxMDEzMTU1NDUyWjAYMRYwFAYD VQQDEw02YWM1MTljZC0yY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV87hs/rYOg36WIX1TwPsFNn7cAF06RN/Z17rFq6j6s/9YPt8RIS7fM1Rk+F 3J8W1JNYhKbKx8hoAkMljQpUYO7uU/5kE3gMDXe0KrwdEaEDKPOVTmXZK69bq1Bn NIgm7B/RlWPzJlB5aTVzyOcqWDnzT2JEE6Eb6hR7HP3m5GiSgyfV2/eemgV8HmMT Uwykzn5SfBV0OC/RJeGqpkSGyuYgGoschvfUMUOgc1vWIg3fQifaCkydAIb6XoeG cznOm9Ns+0dkDD///nXpWvTEAUveC/b8Vg4/gW+Bzk2VlZBvVPVML8xiUBaT8if4 Am6bC2dZsP3Ba89Di2WUPlqagQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE83bVMa 5BFf/jrOtgol5BcMUdu0MB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqETH/pV8yroy3F3wIsoHqTh0At+4/5qzcl/ZEckCBZezIDyJ4xww0uBfzJ0q yt3h2VKo02St3LLBWkygmX0bs/InbeN8tBA4dgnOrHSYaPGKRCERytZWRwrMtkS0 MFNsGcuT7HI7hp5S/qzfgujIj8RSk4PMzySOdYv1gkPNduxUGR9FD0pCvjK++Ad4 Hh/kyqCjumiIhnjbvVgF2fY7LZJtnfuJku4c3yU5mRVyPdFGCSt8bjMbT2rrNblj rGhpYPhK5uRqO7Z/V9/TB4BvbTgn8DTbxdGHXkL8gTXA/WRZBUjmNxMj2PqqwKiw WiL1o27SkD1SaOgdUYSfQMZiaw== -----END CERTIFICATE-----Generated at Wed Oct 7 13:12:31 2026 by rpki-client