$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: AEbjQj+IJPVWybf1MZHfzEQvAY9f2C0nQZ2a+CM2L5c= Subject key identifier: 23:03:68:1A:A2:82:B4:AC:13:93:3B:B7:EA:64:DB:31:3F:D5:7D:8F Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 028F Signing time: Sat 03 Oct 2026 02:24:10 +0000 Manifest this update: Sat 03 Oct 2026 02:24:09 +0000 Manifest next update: Sat 10 Oct 2026 02:24:09 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: bo29sIkI73w/xZlaxjszhaGUYxyWiPi+2ZlvsewMftk=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: 4Ttg6a+Izn8a70sY4W6bAM3oSgGKBOsCI9uHmrpaOfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Oct 3 02:24:09 2026 GMT Not After : Oct 10 02:24:09 2026 GMT Subject: CN=6ac0674a-c06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:2b:f2:7d:98:2b:5e:c5:c6:a9:b8:3f:c7: 6f:98:37:7a:ac:66:e9:44:29:a7:31:56:af:4d:1b: 9e:fd:65:93:8c:65:91:07:16:12:e5:81:38:24:df: 2a:13:8d:52:ff:54:fb:2a:1c:a6:c4:71:62:92:f3: 47:fd:de:10:6e:8f:60:37:9b:66:06:39:ae:af:97: fc:92:0f:9b:50:1d:66:d0:63:04:1c:70:3c:53:f7: 9e:61:c9:19:f8:5d:cf:48:86:5d:59:d2:78:25:a6: 82:5d:ca:1e:db:a5:7c:4b:47:0d:d6:70:cb:96:e5: 2c:7e:f0:c8:23:04:e2:6c:c6:33:0e:ab:65:a9:fb: 4f:f7:48:71:51:d0:b2:e7:10:fd:c7:01:c0:99:3a: af:a6:a3:55:d6:8b:ec:91:60:2b:a6:f6:ec:0b:92: 7c:29:a3:41:36:57:b3:59:b0:c5:0c:8b:1f:e7:b1: b4:b1:e7:af:92:72:7c:44:2d:71:eb:97:2e:fd:ed: 98:94:fb:7d:e8:c5:7c:e9:70:b1:0c:83:f2:a2:c7: 29:1c:0e:c4:95:f9:8a:44:e6:71:e2:1c:98:b3:6d: 5e:8c:ab:86:34:2e:25:1b:4d:36:53:d4:0a:84:86: 8a:5f:2b:d3:15:f2:7f:9e:9a:64:1f:ff:2a:fb:c2: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:68:1A:A2:82:B4:AC:13:93:3B:B7:EA:64:DB:31:3F:D5:7D:8F X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:75:b2:77:72:e4:5e:e6:fd:70:3f:2f:63:8c:56:62:7f:47: 25:b6:31:02:03:71:32:c1:ea:3b:c1:8b:26:bc:06:c7:ff:47: 55:b5:22:d8:53:59:b4:bf:c6:0d:f0:6d:ba:d0:28:ce:52:bb: d0:e4:b5:a3:fd:0c:32:d6:4b:c3:f8:9f:b9:1f:23:0f:5c:79: b8:6d:ac:74:36:c4:85:36:41:d4:4b:db:36:77:d4:e3:a6:f8: 43:4d:13:13:58:12:60:d8:60:1b:d3:ff:d2:5a:4b:61:73:c8: 4b:e6:36:e9:c3:df:5f:ad:c6:71:64:3a:b8:72:1a:e3:46:15: 12:94:a4:ad:aa:a1:25:32:43:fa:72:ea:39:94:3f:f5:ef:6d: e1:f0:14:f0:20:b5:00:ee:2c:a3:1d:44:ab:f3:8e:35:d4:6d: 8c:1e:03:fd:fe:49:59:df:02:41:6d:a8:1e:a8:c5:0b:af:cf: bb:ba:f7:c9:0b:e4:ad:fe:34:29:eb:97:73:f2:45:4d:82:51: b0:66:79:e5:7b:48:74:e3:e6:43:21:41:0a:22:e1:a9:cf:28: 0b:2d:14:fa:74:78:ca:50:4c:e0:3b:a4:89:ef:b4:87:22:ec: 3b:d3:8f:2a:fe:5f:8e:f7:b2:a3:4e:a5:15:52:eb:e0:71:2a: 04:8e:d0:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjYxMDAzMDIyNDA5WhcNMjYxMDEwMDIyNDA5WjAYMRYwFAYD VQQDEw02YWMwNjc0YS1jMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBor8n2YK17Fxqm4P8dvmDd6rGbpRCmnMVavTRue/WWTjGWRBxYS5YE4JN8q E41S/1T7KhymxHFikvNH/d4Qbo9gN5tmBjmur5f8kg+bUB1m0GMEHHA8U/eeYckZ +F3PSIZdWdJ4JaaCXcoe26V8S0cN1nDLluUsfvDIIwTibMYzDqtlqftP90hxUdCy 5xD9xwHAmTqvpqNV1ovskWArpvbsC5J8KaNBNlezWbDFDIsf57G0seevknJ8RC1x 65cu/e2YlPt96MV86XCxDIPyoscpHA7ElfmKROZx4hyYs21ejKuGNC4lG002U9QK hIaKXyvTFfJ/nppkH/8q+8KAtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMDaBqi grSsE5M7t+pk2zE/1X2PMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN3Wyd3LkXub9cD8vY4xWYn9HJbYxAgNxMsHqO8GLJrwGx/9HVbUi2FNZtL/G DfBtutAozlK70OS1o/0MMtZLw/ifuR8jD1x5uG2sdDbEhTZB1EvbNnfU46b4Q00T E1gSYNhgG9P/0lpLYXPIS+Y26cPfX63GcWQ6uHIa40YVEpSkraqhJTJD+nLqOZQ/ 9e9t4fAU8CC1AO4sox1Eq/OONdRtjB4D/f5JWd8CQW2oHqjFC6/Pu7r3yQvkrf40 KeuXc/JFTYJRsGZ55XtIdOPmQyFBCiLhqc8oCy0U+nR4ylBM4Dukie+0hyLsO9OP Kv5fjveyo06lFVLr4HEqBI7QkQ== -----END CERTIFICATE-----Generated at Sun Oct 4 19:50:52 2026 by rpki-client