$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json) Hash identifier: BfHhx7Rpm4inbJa3o9/st648jTr8cDNV3UkHvTGWNOU= Subject key identifier: 18:EB:57:6C:A9:1A:AB:41:35:60:78:36:60:EC:EA:8F:BE:38:EC:83 Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft Manifest number: 0586 Signing time: Thu 22 Oct 2026 23:22:36 +0000 Manifest this update: Thu 22 Oct 2026 23:22:35 +0000 Manifest next update: Thu 29 Oct 2026 23:22:35 +0000 Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: KvU016JhAKbpJMcWPfVXd7D7S3PHNX7c229m724uwD8=) 2: FB03729A370111F1AC489D14BF833773.roa (hash: qCyra6afbP8VZyk8tTQuTnWntq5Vf9XBEhtSR3+HSbs=) 3: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: bQnKvH35hX5X/UldLBXn3SvQoLw65mlVkunvCUb9t7w=) 4: FC94057A370111F1AC489D14BF833773.roa (hash: VzSo0BSup+M9DK5oiFRGkbacIHVy+Ni31LYkiFE8P8s=) 5: 89631CA886F211F1B8F66003A7EE528E.roa (hash: pp0SsPRI0lZaJFY63wMy0xm+ALBFk9ue42FemaySj5U=) 6: FBB1514E370111F1AC489D14BF833773.roa (hash: Y1XvAg0Ntlz4qbXESuumNTPWdZ4Y+sd5xBosago0l14=) 7: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: WkaUxI5aNRHxxaJY8HBva8OySlCaRi8rcu5by1WiBNg=) 8: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: KD9hfqOsHpMQcz4Ocv/ZU2VsOJ4y9reBcPWQuq7fk2E=) 9: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: Z7D659FzkIB1+T2i3b4ybnwfMQnbYWcfLc/V298b1eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Validity Not Before: Oct 22 23:22:35 2026 GMT Not After : Oct 29 23:22:35 2026 GMT Subject: CN=6ada9abc-ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:23:e4:71:47:72:bc:e5:f7:11:c1:3f:c5: c3:ef:ba:5c:ba:79:fa:1a:58:ae:5e:d2:07:a3:83: 39:59:f2:a9:65:3f:8f:38:15:7b:6d:55:53:1b:d7: a8:d7:43:da:d0:1e:59:8a:86:cf:e5:6f:33:7b:ee: fc:3a:bd:da:66:0f:2f:1a:28:73:12:bb:60:29:ad: 29:aa:be:78:f6:a3:68:2f:8a:f5:f2:0a:3e:b8:2e: f2:78:8f:42:bf:52:4d:7b:22:fd:f6:a6:ed:4b:30: ad:4c:c2:1a:f1:8f:e4:77:06:93:94:9b:dd:bc:fa: 9a:78:8e:83:7b:cb:c7:a7:f5:02:18:05:23:af:36: 25:11:a6:9b:e0:e5:d6:4e:b5:38:4e:49:cb:ab:5d: 6e:02:1a:c0:6e:a3:d1:cd:5a:7e:61:79:8c:40:bf: 36:47:2d:dd:b4:02:38:14:f4:48:ff:fe:7a:65:f6: c0:77:d4:0a:36:05:cf:3f:3e:fd:c8:32:22:ad:fe: 7a:2c:c0:21:09:9f:5c:cc:3e:95:39:56:71:93:5c: 1c:b6:d3:dc:7f:e1:41:27:f4:eb:dd:d4:fd:41:49: 22:e8:21:a6:9b:5e:3a:0e:32:a5:8e:9d:ab:a6:fa: 64:40:c9:4d:5a:9d:49:64:f9:bf:54:dd:04:7f:1a: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EB:57:6C:A9:1A:AB:41:35:60:78:36:60:EC:EA:8F:BE:38:EC:83 X509v3 Authority Key Identifier: keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6d:94:f6:a3:a7:96:08:42:bf:b8:4f:d3:18:fb:86:09:08: 01:51:7f:f5:28:50:63:08:cf:8c:d0:0b:fc:0e:35:cb:50:e0: 18:ff:d4:49:86:15:ca:48:61:d6:11:34:6f:ce:72:4c:b2:da: fd:f9:c4:69:8c:df:4a:8e:09:c7:52:28:f0:fc:b3:ee:ee:00: c4:87:55:aa:9a:3a:78:1c:6f:4e:a6:c4:33:7e:76:fe:f6:d3: 7d:9b:60:2a:bb:f5:71:ea:c9:27:bd:2f:a8:05:c4:1e:f6:6a: 6a:f6:ae:b5:e8:2f:a1:1d:64:80:1e:99:dd:60:f6:a9:09:52: bc:74:db:62:64:2d:e5:35:a8:07:9e:09:bf:54:ef:b3:b5:34: 36:e9:1e:91:b5:86:c2:79:34:ba:17:0c:a0:3f:74:93:30:d2: 19:9d:46:a2:98:30:85:12:c4:89:d0:d8:e3:f5:00:6f:41:a2: 32:ac:3b:e5:1b:27:f4:30:93:e9:cc:33:cf:41:9e:69:d0:3e: f8:bf:2b:c0:b0:c9:74:d9:fe:69:9d:36:f5:e7:39:7c:00:2e: 74:98:1e:a3:de:15:11:3c:a1:3b:f7:ad:a8:af:30:5b:02:1e: ed:bf:cf:b0:d5:99:c3:cb:91:da:6a:61:23:90:b6:36:c8:a9: 8f:9a:10:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgxQjlGOTc5OERB RDYxNjk3MUEwHhcNMjYxMDIyMjMyMjM1WhcNMjYxMDI5MjMyMjM1WjAYMRYwFAYD VQQDEw02YWRhOWFiYy1hZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2kj5HFHcrzl9xHBP8XD77pcunn6GliuXtIHo4M5WfKpZT+POBV7bVVTG9eo 10Pa0B5ZiobP5W8ze+78Or3aZg8vGihzErtgKa0pqr549qNoL4r18go+uC7yeI9C v1JNeyL99qbtSzCtTMIa8Y/kdwaTlJvdvPqaeI6De8vHp/UCGAUjrzYlEaab4OXW TrU4TknLq11uAhrAbqPRzVp+YXmMQL82Ry3dtAI4FPRI//56ZfbAd9QKNgXPPz79 yDIirf56LMAhCZ9czD6VOVZxk1wcttPcf+FBJ/Tr3dT9QUki6CGmm146DjKljp2r pvpkQMlNWp1JZPm/VN0EfxpENQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjrV2yp GqtBNWB4NmDs6o++OOyDMB8GA1UdIwQYMBaAFMsWVoEdCEV5k+jYG5+XmNrWFpca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDM1Ny9CODRCMTBFQzQ1 QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJYbVQ2TmdibjVlWTJ0WVds eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4WldnUjBJUlhtVDZOZ2JuNWVZMnRZV2x4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDM1Ny9CODRCMTBFQzQ1QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJY bVQ2TmdibjVlWTJ0WVdseG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK22U9qOnlghCv7hP0xj7hgkIAVF/9ShQYwjPjNAL/A41y1DgGP/USYYVykhh 1hE0b85yTLLa/fnEaYzfSo4Jx1Io8Pyz7u4AxIdVqpo6eBxvTqbEM352/vbTfZtg Krv1cerJJ70vqAXEHvZqavautegvoR1kgB6Z3WD2qQlSvHTbYmQt5TWoB54Jv1Tv s7U0NukekbWGwnk0uhcMoD90kzDSGZ1GopgwhRLEidDY4/UAb0GiMqw75Rsn9DCT 6cwzz0GeadA++L8rwLDJdNn+aZ029ec5fAAudJgeo94VETyhO/etqK8wWwIe7b/P sNWZw8uR2mphI5C2Nsipj5oQcQ== -----END CERTIFICATE-----Generated at Sat Oct 24 12:42:56 2026 by rpki-client