$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json) Hash identifier: V2UfIx/aDEjZQbpTtMq++v+TUrvuo6LPx8DsssMKk/g= Subject key identifier: 99:A7:F5:67:0A:64:88:BD:99:2C:9E:2F:6C:E7:21:5D:74:AA:AE:B7 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft Manifest number: 013A Signing time: Wed 07 Oct 2026 06:03:00 +0000 Manifest this update: Wed 07 Oct 2026 06:03:00 +0000 Manifest next update: Wed 14 Oct 2026 06:03:00 +0000 Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: fwJvZs5BsSbeN9PjO/qs8BjSJ7+J0qqAOndBLt8T+CY=) 2: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=) 3: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=) 4: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Validity Not Before: Oct 7 06:03:00 2026 GMT Not After : Oct 14 06:03:00 2026 GMT Subject: CN=6ac5e094-b0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:3a:a3:ac:f2:81:55:2e:f5:9d:30:37:31: 91:99:c4:8e:5d:96:29:53:94:69:92:fb:a3:1d:75: a0:aa:82:4d:03:5a:d0:83:c0:b3:b8:c8:47:8f:10: 09:28:21:f0:e8:5d:42:df:c0:77:58:84:55:b6:fb: 45:23:e4:35:14:59:bf:fe:3e:3b:0f:08:61:86:b9: d1:01:56:0a:d9:35:fc:c8:dd:1e:91:10:d8:3b:5d: ef:aa:66:9f:0a:4b:8c:5d:f3:83:36:77:eb:fb:50: 26:6d:ce:30:2a:fd:84:cc:66:60:d1:3e:35:b3:9a: 99:d0:75:21:d3:ea:83:a9:2f:24:bb:3f:d6:a8:1a: 0a:43:af:5e:e8:c5:22:aa:8d:19:9d:3c:3d:b0:7a: 28:45:aa:92:eb:73:97:a3:7c:99:23:9e:05:e6:b8: 0d:35:12:3d:e3:33:38:90:ef:35:cc:6f:43:27:30: 1b:2f:f2:46:76:bc:19:e4:3a:2a:b5:24:fb:d3:7c: be:06:1f:b8:7c:6a:9b:51:c4:f1:a0:41:aa:bc:3d: 7f:07:7a:17:2a:82:2b:53:31:77:87:74:d7:8d:c4: 76:87:97:53:65:a6:09:f4:5d:9f:38:60:0b:80:be: 4b:71:15:8d:0a:42:d8:3d:1a:31:27:eb:6a:46:06: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A7:F5:67:0A:64:88:BD:99:2C:9E:2F:6C:E7:21:5D:74:AA:AE:B7 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:8b:58:c1:7c:70:9c:79:ea:27:c6:26:e3:cd:af:9c:98:c3: ce:58:56:89:c8:db:94:8e:10:72:63:61:11:04:11:58:9e:e6: 68:80:d2:e5:5f:33:cd:8c:47:b7:05:89:b3:0a:86:91:a0:4d: da:2d:bb:c5:6f:4a:23:f3:5b:07:09:ee:a9:39:78:ce:61:6d: 11:1a:86:42:56:c9:15:6c:a7:6c:32:b8:e5:ee:31:67:f3:58: 5d:28:81:1e:f9:dc:db:93:45:86:f4:ef:01:71:9d:9c:02:0b: d8:58:6b:67:8d:37:f8:5d:ee:5b:0b:ae:bf:76:b5:76:c6:ca: 71:e0:7f:bb:f2:71:78:d7:4b:f0:a9:ff:95:a4:96:4d:f0:4a: c6:72:9c:2d:c2:65:64:8c:67:b9:c4:9b:48:7c:38:f4:9f:59: 5a:07:95:7d:b4:71:ca:83:77:4d:f2:58:df:72:d0:da:3e:2a: 0c:16:5d:b7:bf:04:c5:a9:27:3c:a7:2c:1c:d2:8e:55:3e:32: e6:61:b1:c9:72:cf:e3:58:4c:57:81:c0:c6:f4:91:8d:29:10: fd:03:a1:97:92:3a:33:5d:ff:09:8c:fa:ce:e6:38:49:8c:2f: 78:1b:6b:4a:50:2d:82:22:19:7c:50:c0:44:35:ce:b2:fa:50: 5c:c3:fc:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUxRkMxMTAvBgNVBAUTKENBNUY3QTMxMjFDMUY1Rjk4OTUyMEM3QTUxOTcxM0ZC M0E2OENBN0UwHhcNMjYxMDA3MDYwMzAwWhcNMjYxMDE0MDYwMzAwWjAYMRYwFAYD VQQDEw02YWM1ZTA5NC1iMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhvo6o6zygVUu9Z0wNzGRmcSOXZYpU5RpkvujHXWgqoJNA1rQg8CzuMhHjxAJ KCHw6F1C38B3WIRVtvtFI+Q1FFm//j47DwhhhrnRAVYK2TX8yN0ekRDYO13vqmaf CkuMXfODNnfr+1Ambc4wKv2EzGZg0T41s5qZ0HUh0+qDqS8kuz/WqBoKQ69e6MUi qo0ZnTw9sHooRaqS63OXo3yZI54F5rgNNRI94zM4kO81zG9DJzAbL/JGdrwZ5Doq tST703y+Bh+4fGqbUcTxoEGqvD1/B3oXKoIrUzF3h3TXjcR2h5dTZaYJ9F2fOGAL gL5LcRWNCkLYPRoxJ+tqRgbQowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmn9WcK ZIi9mSyeL2znIV10qq63MB8GA1UdIwQYMBaAFMpfejEhwfX5iVIMelGXE/s6aMp+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTFGQy81QjMyNUZBNkU5 QjkxMUVGQjZEQTQxNENDNEY5QUUwMi95bDk2TVNIQjlmbUpVZ3g2VVpjVC16cG95 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3luNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi95bDk2TVNIQjlm bUpVZ3g2VVpjVC16cG95bjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlotYwXxwnHnqJ8Ym482vnJjDzlhWicjblI4QcmNhEQQRWJ7maIDS5V8zzYxH twWJswqGkaBN2i27xW9KI/NbBwnuqTl4zmFtERqGQlbJFWynbDK45e4xZ/NYXSiB Hvnc25NFhvTvAXGdnAIL2FhrZ403+F3uWwuuv3a1dsbKceB/u/JxeNdL8Kn/laSW TfBKxnKcLcJlZIxnucSbSHw49J9ZWgeVfbRxyoN3TfJY33LQ2j4qDBZdt78Exakn PKcsHNKOVT4y5mGxyXLP41hMV4HAxvSRjSkQ/QOhl5I6M13/CYz6zuY4SYwveBtr SlAtgiIZfFDARDXOsvpQXMP8vA== -----END CERTIFICATE-----Generated at Thu Oct 8 14:18:38 2026 by rpki-client