$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: 7aUwSno3PhLK17cpp5iAKuC5xDTVHIWI++aw0NK8ZgU= Subject key identifier: 35:58:98:F4:AA:92:57:BC:82:69:6D:37:8B:77:19:8A:7C:34:4B:FF Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 01DD Signing time: Wed 07 Oct 2026 04:08:31 +0000 Manifest this update: Wed 07 Oct 2026 04:08:30 +0000 Manifest next update: Wed 14 Oct 2026 04:08:30 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: 0Y6HnKj0u6RlkieuGsL0+AgwEbRcjF8opwaiW7sVHPY=) 2: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=) 3: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=) 4: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 04:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Oct 7 04:08:30 2026 GMT Not After : Oct 14 04:08:30 2026 GMT Subject: CN=6ac5c5be-ec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:44:51:fa:d5:e7:61:84:a3:6e:16:15:b5: 61:0a:47:55:a4:72:06:43:95:c9:98:77:42:08:54: 57:f4:b1:c6:48:d9:c9:a1:22:bf:ab:4c:e7:cc:e3: 66:62:0a:00:44:02:20:ed:be:ac:5c:03:f9:b0:bd: 58:e9:75:9d:44:69:37:ef:93:25:14:20:3a:ff:34: 7a:d4:25:3f:e9:60:ff:b7:56:48:b5:b9:99:0f:99: 81:a7:07:24:16:00:b2:cf:30:b5:6e:b1:bb:23:8e: 13:e5:26:0b:52:66:23:13:46:b4:74:6f:a1:5f:b5: 59:ae:03:ec:94:6a:ae:55:69:a2:79:14:2b:3c:88: 07:92:45:c5:5f:2a:e4:2c:51:b9:bf:fb:1f:eb:47: 31:eb:32:7f:39:30:a6:ee:54:62:41:f7:07:cc:d5: 5f:7b:1b:32:c3:5b:22:77:09:36:87:9f:7b:40:e0: 43:ee:db:78:b8:c8:9a:20:a8:97:e5:c4:f6:b3:0c: 2c:3d:56:b8:e2:5f:f2:18:e6:91:11:38:f2:26:8f: 13:40:96:a0:68:06:cd:ca:c1:f9:62:86:81:88:9e: 45:26:af:fc:9e:7d:26:39:00:71:ca:b6:8d:e7:02: 82:a5:83:a6:5e:30:aa:29:ae:51:9a:f4:1a:3b:3e: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:58:98:F4:AA:92:57:BC:82:69:6D:37:8B:77:19:8A:7C:34:4B:FF X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:95:d7:65:9e:d2:a6:bc:d8:9e:34:20:42:33:e5:bc:c2:1a: 62:79:19:2a:ae:78:f7:0e:fa:ac:c2:a8:dd:a3:b3:88:af:22: 51:18:55:fb:ed:ee:10:ae:7d:53:31:e8:d3:c3:ea:a0:68:b3: 44:c0:9a:55:b2:f3:7c:be:cb:ef:11:e6:c6:5b:48:55:eb:30: 72:d7:83:0d:bc:29:cb:11:9b:c5:b3:44:ee:ea:40:bf:2d:d7: 89:89:94:0f:d6:cc:3b:a5:e6:ee:e2:d7:4c:d9:72:10:bb:7d: be:56:df:91:63:0c:a3:ca:5b:cc:e3:24:62:50:46:c0:c0:93: ed:cf:0f:c0:11:db:f3:92:46:4b:e7:b9:ce:9b:5f:96:7b:31: 25:bd:24:f4:08:0c:9a:f2:53:8e:5e:d2:4c:63:bb:dc:bb:33: b7:12:e3:c4:7f:76:47:7a:0e:2e:12:08:a5:46:2f:be:ac:4f: 16:91:44:8b:7c:f9:fe:5e:8e:31:13:ea:17:22:9f:c7:0e:76: 49:db:fa:87:35:96:d4:48:df:35:b1:ba:a7:71:fc:95:55:37: 78:af:b3:d7:1d:c5:a5:82:fc:96:cd:b9:85:3e:10:1f:e6:c4: 7c:83:2d:64:11:e8:28:6f:28:45:36:b8:66:f8:5f:f6:25:4e: 46:7e:1a:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYxMDA3MDQwODMwWhcNMjYxMDE0MDQwODMwWjAYMRYwFAYD VQQDEw02YWM1YzViZS1lYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvNEUfrV52GEo24WFbVhCkdVpHIGQ5XJmHdCCFRX9LHGSNnJoSK/q0znzONm YgoARAIg7b6sXAP5sL1Y6XWdRGk375MlFCA6/zR61CU/6WD/t1ZItbmZD5mBpwck FgCyzzC1brG7I44T5SYLUmYjE0a0dG+hX7VZrgPslGquVWmieRQrPIgHkkXFXyrk LFG5v/sf60cx6zJ/OTCm7lRiQfcHzNVfexsyw1sidwk2h597QOBD7tt4uMiaIKiX 5cT2swwsPVa44l/yGOaRETjyJo8TQJagaAbNysH5YoaBiJ5FJq/8nn0mOQBxyraN 5wKCpYOmXjCqKa5RmvQaOz5TAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVYmPSq kle8gmltN4t3GYp8NEv/MB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZJXXZZ7SprzYnjQgQjPlvMIaYnkZKq549w76rMKo3aOziK8iURhV++3uEK59 UzHo08PqoGizRMCaVbLzfL7L7xHmxltIVeswcteDDbwpyxGbxbNE7upAvy3XiYmU D9bMO6Xm7uLXTNlyELt9vlbfkWMMo8pbzOMkYlBGwMCT7c8PwBHb85JGS+e5zptf lnsxJb0k9AgMmvJTjl7STGO73LsztxLjxH92R3oOLhIIpUYvvqxPFpFEi3z5/l6O MRPqFyKfxw52Sdv6hzWW1EjfNbG6p3H8lVU3eK+z1x3FpYL8ls25hT4QH+bEfIMt ZBHoKG8oRTa4Zvhf9iVORn4anQ== -----END CERTIFICATE-----Generated at Thu Oct 8 03:52:53 2026 by rpki-client