$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: Eu96Go1P0/Kj3po4A3CKVvpr6RHIZjEzH3isxWU2HKw= Subject key identifier: 55:9F:B8:42:C1:A9:28:32:85:08:08:AB:82:CA:06:7E:4F:F8:45:A1 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 08F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 08E1 Signing time: Fri 02 Oct 2026 20:45:10 +0000 Manifest this update: Fri 02 Oct 2026 20:45:10 +0000 Manifest next update: Fri 09 Oct 2026 20:45:10 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: Rbexmu6Vdq3ip4zlYNs7Tzl/+4fWIvYNOEeI677KbX0=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: d3gEiVUqUws+0A/GhooCgjNpu9i7U506wCE8JKmKXtk=) 3: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: hxEYoEMqj4BpXAJVc6GCqQHmmq9QFwmOlIQ9koH/Ilc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Oct 2 20:45:10 2026 GMT Not After : Oct 9 20:45:10 2026 GMT Subject: CN=6ac017d6-b261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:de:2c:43:83:35:90:77:8f:f5:3f:92:34: 98:dd:81:be:43:02:bf:71:66:55:50:ea:e9:d7:e9: 0a:23:70:a4:eb:d2:1a:c1:04:80:1d:f6:31:2d:6b: f8:91:fc:86:ec:10:59:17:e1:82:f8:eb:29:ba:cb: a5:44:53:c1:da:a2:8f:82:04:b1:3e:78:5a:41:df: b1:3b:ff:33:7f:5c:51:91:6e:9d:fa:b7:ed:b6:9f: 83:87:85:71:91:ed:47:81:06:72:43:7f:a2:7f:77: 5f:dc:59:1c:8f:1f:e8:7c:3b:c0:73:de:ba:52:bd: 2b:53:a4:4f:e6:2d:1f:55:ff:54:33:7e:c4:c3:48: 6c:a7:9f:af:a3:57:30:6d:fc:55:27:6f:ff:5f:38: 7a:b7:d7:15:28:68:f7:70:bc:cf:bb:63:07:e4:90: 38:02:87:8c:ec:16:5d:9a:02:42:dd:e3:bb:d7:b3: 7b:77:e0:96:e0:12:b1:1e:ba:d2:d4:c4:c3:e0:ba: 2a:73:1d:f1:71:95:81:6e:cc:01:f0:52:18:15:47: 24:31:0b:70:72:20:c5:b9:dd:c4:e4:ce:2a:7d:95: 67:14:7f:02:99:e3:9b:05:d7:e7:36:93:29:86:58: a8:77:51:5a:fb:61:5f:1d:2f:41:7d:be:b9:0d:3a: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9F:B8:42:C1:A9:28:32:85:08:08:AB:82:CA:06:7E:4F:F8:45:A1 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f8:30:3b:9a:ef:43:ab:bd:33:79:20:ba:81:87:f2:87:20: 82:b9:52:ba:5d:1f:ea:d9:28:dd:f5:4f:fd:c2:ac:b9:6b:88: e4:df:e4:43:a3:95:4b:6b:04:27:16:cf:d6:ba:79:cd:80:ce: 21:f8:70:69:dd:6e:d2:7b:1f:06:48:a2:a9:96:af:f4:a9:6f: 0c:95:55:cd:46:7c:d3:2f:74:9a:95:fe:29:aa:7b:74:88:3a: 12:5b:17:6d:05:b4:5e:c1:9f:ed:49:94:c0:ef:27:2c:41:cf: be:ed:fe:14:9e:c5:d0:9e:94:77:2a:87:7e:3c:ab:fe:59:41: 24:30:64:f5:1b:21:68:59:41:8a:6e:f6:d7:ba:0d:95:85:f1: a2:e4:2f:68:84:6b:2f:9e:11:b2:21:31:7b:4a:45:20:0f:0b: e8:28:6b:e5:32:d2:b3:de:ee:69:91:5b:e1:03:8f:65:02:69: bd:3d:99:5d:c6:20:03:eb:cb:7d:95:72:5b:2b:95:ca:7f:1a: d7:c8:23:52:5c:ab:06:27:90:4b:83:8d:70:64:2f:3b:20:39: 23:7c:d4:50:c7:0e:8a:6d:89:84:9b:49:fc:72:dc:c8:8c:f1: 44:7b:a4:d9:8e:e0:7e:8b:11:fb:d7:d4:43:43:0c:a0:18:90: ed:3d:1b:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYxMDAyMjA0NTEwWhcNMjYxMDA5MjA0NTEwWjAYMRYwFAYD VQQDEw02YWMwMTdkNi1iMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBneLEODNZB3j/U/kjSY3YG+QwK/cWZVUOrp1+kKI3Ck69IawQSAHfYxLWv4 kfyG7BBZF+GC+OspusulRFPB2qKPggSxPnhaQd+xO/8zf1xRkW6d+rfttp+Dh4Vx ke1HgQZyQ3+if3df3Fkcjx/ofDvAc966Ur0rU6RP5i0fVf9UM37Ew0hsp5+vo1cw bfxVJ2//Xzh6t9cVKGj3cLzPu2MH5JA4AoeM7BZdmgJC3eO717N7d+CW4BKxHrrS 1MTD4Loqcx3xcZWBbswB8FIYFUckMQtwciDFud3E5M4qfZVnFH8CmeObBdfnNpMp hliod1Fa+2FfHS9Bfb65DTq/+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWfuELB qSgyhQgIq4LKBn5P+EWhMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnvgwO5rvQ6u9M3kguoGH8ocggrlSul0f6tko3fVP/cKsuWuI5N/kQ6OVS2sE JxbP1rp5zYDOIfhwad1u0nsfBkiiqZav9KlvDJVVzUZ80y90mpX+Kap7dIg6ElsX bQW0XsGf7UmUwO8nLEHPvu3+FJ7F0J6UdyqHfjyr/llBJDBk9RshaFlBim7217oN lYXxouQvaIRrL54RsiExe0pFIA8L6Chr5TLSs97uaZFb4QOPZQJpvT2ZXcYgA+vL fZVyWyuVyn8a18gjUlyrBieQS4ONcGQvOyA5I3zUUMcOim2JhJtJ/HLcyIzxRHuk 2Y7gfosR+9fUQ0MMoBiQ7T0bEg== -----END CERTIFICATE-----Generated at Sun Oct 4 05:31:51 2026 by rpki-client