$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: AHj8ENCW6sb7397zcRq+t5n9nE/JYTOA5gMM42seOZw= Subject key identifier: C9:78:83:2E:00:D4:AD:CF:2D:78:2F:27:14:BE:10:B7:7E:DA:5B:84 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 360F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 35B6 Signing time: Mon 26 Oct 2026 14:50:07 +0000 Manifest this update: Mon 26 Oct 2026 14:50:07 +0000 Manifest next update: Mon 02 Nov 2026 14:50:07 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: 1K17QamUzohqul1pACtEHVo3iPagOl2wMalLEHKV01w=) 2: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=) 3: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=) 4: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=) 5: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=) 6: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=) 7: 78B9569EB33711F19DE78FDE6D11F970.roa (hash: C0/nryBG+LkmWz6cZbkZcEYqysNpXiFU08p//7bHVZo=) 8: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13839 (0x360f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Oct 26 14:50:07 2026 GMT Not After : Nov 2 14:50:07 2026 GMT Subject: CN=6adf689f-25e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:85:0a:3d:b2:3f:5a:93:0c:42:ad:c5:2c: ca:95:10:ae:44:32:93:ee:ce:53:d0:c5:73:c9:05: 19:23:fa:99:82:0a:9c:71:fe:b7:32:62:f7:57:d1: 00:68:92:e1:8e:08:2b:b5:55:8e:60:06:92:2e:2b: e0:ca:b5:92:ad:1a:e8:9a:26:6a:1c:79:ba:52:99: f5:91:41:52:a1:d6:2c:13:ec:72:94:77:be:cd:5f: a9:a3:ce:86:05:18:f7:82:cc:c6:fd:96:a0:12:f7: 5f:a9:7d:13:f9:4f:10:2e:d7:f5:5b:28:a8:a1:56: 7f:3c:fe:5d:10:55:b0:d8:9f:11:df:a0:fc:2f:95: fe:5b:61:45:f8:51:f0:92:bc:0f:e6:02:f7:87:13: cc:99:31:13:22:60:24:3d:50:33:4e:bc:b1:c1:27: 45:8f:03:f8:45:4b:db:bd:42:f3:b7:90:a5:e2:01: fc:2a:df:87:60:43:56:85:dd:13:fa:49:ec:cf:11: 90:4f:3d:89:1a:17:aa:0b:99:20:ab:b0:1a:5d:d4: dc:3c:6b:7e:60:e6:a6:0a:e8:69:d3:07:03:72:53: 3c:b7:46:47:ae:56:6a:c8:df:d5:e2:00:d0:b8:1f: 92:b9:00:ac:83:2b:8b:02:09:68:94:aa:ef:0d:c2: 2b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:83:2E:00:D4:AD:CF:2D:78:2F:27:14:BE:10:B7:7E:DA:5B:84 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5c:f2:c0:8f:5c:11:a7:17:65:fe:ad:66:fd:78:a8:f7:af: eb:f5:15:97:c3:39:92:da:35:f4:2c:7e:fa:98:0a:12:a5:f4: ed:a4:d8:6d:6e:3b:49:cf:30:d4:84:b6:f9:c4:0f:91:4a:00: ea:2a:2e:ca:3b:08:4b:99:94:66:1b:87:fc:e1:c8:4e:66:60: 30:f1:6e:18:37:96:bc:e3:09:6f:db:c5:fa:59:61:1f:50:de: d5:90:9a:15:f3:77:2c:6a:c5:c0:b7:2c:bb:54:f5:96:50:d6: 90:64:90:d4:4c:1e:88:20:77:44:78:ac:20:ab:fa:63:d6:3a: 3b:bd:22:f6:ba:f1:95:37:37:19:26:22:7b:36:a6:87:ab:13: 98:59:aa:97:ec:9b:d4:17:a9:8e:63:73:94:bf:e5:20:40:26: 51:8e:33:45:4b:2c:32:9f:e1:a5:d6:ee:c8:c5:86:81:8c:71: ae:3e:69:25:58:23:c5:11:d5:51:1e:e2:c5:42:30:bb:56:7c: bf:49:c8:01:38:af:21:29:a8:e3:da:99:22:a8:98:12:42:73: 8b:07:d9:ed:ec:60:ea:3f:e8:0d:15:c6:41:13:b6:e6:c9:06: 88:16:66:52:35:bf:63:f9:51:fe:4c:32:7a:09:af:a8:a3:51: fc:ce:b8:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYxMDI2MTQ1MDA3WhcNMjYxMTAyMTQ1MDA3WjAYMRYwFAYD VQQDEw02YWRmNjg5Zi0yNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQyFCj2yP1qTDEKtxSzKlRCuRDKT7s5T0MVzyQUZI/qZggqccf63MmL3V9EA aJLhjggrtVWOYAaSLivgyrWSrRromiZqHHm6Upn1kUFSodYsE+xylHe+zV+po86G BRj3gszG/ZagEvdfqX0T+U8QLtf1WyiooVZ/PP5dEFWw2J8R36D8L5X+W2FF+FHw krwP5gL3hxPMmTETImAkPVAzTryxwSdFjwP4RUvbvULzt5Cl4gH8Kt+HYENWhd0T +knszxGQTz2JGheqC5kgq7AaXdTcPGt+YOamCuhp0wcDclM8t0ZHrlZqyN/V4gDQ uB+SuQCsgyuLAglolKrvDcIrvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMl4gy4A 1K3PLXgvJxS+ELd+2luEMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhFzywI9cEacXZf6tZv14qPev6/UVl8M5kto19Cx++pgKEqX07aTYbW47Sc8w 1IS2+cQPkUoA6iouyjsIS5mUZhuH/OHITmZgMPFuGDeWvOMJb9vF+llhH1De1ZCa FfN3LGrFwLcsu1T1llDWkGSQ1EweiCB3RHisIKv6Y9Y6O70i9rrxlTc3GSYiezam h6sTmFmql+yb1BepjmNzlL/lIEAmUY4zRUssMp/hpdbuyMWGgYxxrj5pJVgjxRHV UR7ixUIwu1Z8v0nIATivISmo49qZIqiYEkJziwfZ7exg6j/oDRXGQRO25skGiBZm UjW/Y/lR/kwyegmvqKNR/M64ww== -----END CERTIFICATE-----Generated at Wed Oct 28 14:34:38 2026 by rpki-client