$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft File: Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft (raw, json) Hash identifier: WpZHSig6BHF6h/JcDlXxiPN13H79cQN1/2rhpnxPSjY= Subject key identifier: 66:D4:97:18:6E:DD:5C:11:0C:43:8D:06:8D:58:0E:36:37:CB:91:44 Authority key identifier: 63:44:56:A4:9A:5B:2C:B6:1C:CD:90:A9:DC:61:F2:60:29:E8:7C:D4 Certificate issuer: /CN=A91C0657/serialNumber=634456A49A5B2CB61CCD90A9DC61F26029E87CD4 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft Manifest number: 27 Signing time: Fri 09 Oct 2026 09:35:57 +0000 Manifest this update: Fri 09 Oct 2026 09:35:56 +0000 Manifest next update: Fri 16 Oct 2026 09:35:56 +0000 Files and hashes: 1: Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl (hash: VCIODNJP+WbGeubDtlvKPxCKnVDXRrdvhRZAlGYaV6E=) 2: 9CFD6C4E8B9F11F1A015FFA56211F970.roa (hash: ae75i1UsURK661qHNvPqlVIMqk92KChqVwayxmO6Y0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0657, serialNumber=634456A49A5B2CB61CCD90A9DC61F26029E87CD4 Validity Not Before: Oct 9 09:35:56 2026 GMT Not After : Oct 16 09:35:56 2026 GMT Subject: CN=6ac8b57d-1000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:b2:05:d3:ef:08:c5:bb:78:50:3d:9d:1f: 46:76:b6:60:0a:c0:b5:13:e0:36:f6:dc:91:69:58: 41:18:2f:9f:15:fb:a6:bf:d0:ed:6a:5a:1b:23:13: 56:34:24:f8:cf:ea:36:52:1b:4b:26:1a:42:17:d9: be:58:62:35:f8:46:0f:bf:95:23:33:5c:7f:bb:0b: 0f:4e:d2:0e:8c:13:39:52:62:3b:39:dd:fd:47:c6: b5:ab:67:49:d5:f0:67:50:f0:33:61:41:74:f1:69: 29:07:84:77:ea:c0:a2:03:f4:43:5e:ff:df:d8:97: 9c:aa:95:4f:6f:80:bd:61:32:d1:f2:db:82:04:46: 8b:59:19:9d:de:41:93:af:9d:06:25:96:f0:9a:cc: 37:17:92:91:c5:70:dd:08:28:37:4e:94:3c:c5:b5: 40:d3:e3:72:e5:3f:61:e9:fd:5f:88:ab:31:b6:bb: 78:75:0b:ec:6a:b6:e0:14:30:50:aa:13:d1:93:87: 59:bc:7e:0d:48:b3:f7:cc:af:da:a3:de:55:ac:aa: 57:12:df:08:05:99:7d:12:6f:ca:f8:57:47:b4:29: 28:93:0d:9b:91:88:1e:aa:bc:98:28:9c:aa:62:f6: f8:bf:a0:83:39:ef:74:bd:26:77:fa:c7:64:d2:b5: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:97:18:6E:DD:5C:11:0C:43:8D:06:8D:58:0E:36:37:CB:91:44 X509v3 Authority Key Identifier: keyid:63:44:56:A4:9A:5B:2C:B6:1C:CD:90:A9:DC:61:F2:60:29:E8:7C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:bc:be:66:7c:19:83:dc:8f:88:74:b8:c0:55:76:50:3f:05: f4:7e:24:27:c6:d3:5d:04:7a:08:c8:e7:49:a4:48:59:9a:2c: 2e:da:82:8c:63:86:66:ed:6c:b0:27:b9:e1:5d:e8:97:b9:2d: 1a:f0:76:55:08:af:f3:7d:60:bb:e4:3c:ae:5b:75:c7:16:9e: 85:53:61:3d:44:dc:2e:d2:33:7a:44:ed:cf:b9:9a:1b:7d:56: 8f:1c:19:85:32:9c:0b:ed:3c:18:70:1c:e3:de:56:9f:39:e0: b5:a1:1a:67:48:21:b5:cb:87:44:a4:c2:cb:39:29:28:f2:4a: 0f:97:85:95:b5:c6:b6:f1:7b:82:ae:42:c1:7f:53:fa:83:84: 43:58:fe:f1:dd:eb:0a:8e:5f:84:a4:99:da:1a:85:80:cc:99: 90:8e:78:ec:f2:f5:4f:36:86:36:25:64:3a:19:8d:33:af:04: 46:40:74:a0:b2:9b:2a:2d:c8:87:b1:df:82:82:7e:87:dd:52: 9b:36:61:93:da:86:53:3e:00:c3:c9:4e:1f:e2:f7:e9:b5:d5: 84:60:23:9e:aa:03:06:04:2f:ea:c9:d4:82:56:15:77:81:04: 87:b1:a1:bf:59:3a:ed:ec:13:6e:2c:1b:c3:4f:99:0d:9d:eb: b4:c9:6f:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDY1NzExMC8GA1UEBRMoNjM0NDU2QTQ5QTVCMkNCNjFDQ0Q5MEE5REM2MUYyNjAy OUU4N0NENDAeFw0yNjEwMDkwOTM1NTZaFw0yNjEwMTYwOTM1NTZaMBgxFjAUBgNV BAMTDTZhYzhiNTdkLTEwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpXrIF0+8Ixbt4UD2dH0Z2tmAKwLUT4Db23JFpWEEYL58V+6a/0O1qWhsjE1Y0 JPjP6jZSG0smGkIX2b5YYjX4Rg+/lSMzXH+7Cw9O0g6MEzlSYjs53f1HxrWrZ0nV 8GdQ8DNhQXTxaSkHhHfqwKID9ENe/9/Yl5yqlU9vgL1hMtHy24IERotZGZ3eQZOv nQYllvCazDcXkpHFcN0IKDdOlDzFtUDT43LlP2Hp/V+IqzG2u3h1C+xqtuAUMFCq E9GTh1m8fg1Is/fMr9qj3lWsqlcS3wgFmX0Sb8r4V0e0KSiTDZuRiB6qvJgonKpi 9vi/oIM573S9Jnf6x2TStfhRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZtSXGG7d XBEMQ40GjVgONjfLkUQwHwYDVR0jBBgwFoAUY0RWpJpbLLYczZCp3GHyYCnofNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwNjU3L0RGNjkzNDVDOEI5 RDExRjFCRDc4MTI0MTYyMTFGOTcwL1kwUldwSnBiTExZY3paQ3AzR0h5WUNub2ZO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTBSV3BKcGJMTFljelpDcDNHSHlZQ25vZk5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw NjU3L0RGNjkzNDVDOEI5RDExRjFCRDc4MTI0MTYyMTFGOTcwL1kwUldwSnBiTExZ Y3paQ3AzR0h5WUNub2ZOUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChvL5mfBmD3I+IdLjAVXZQPwX0fiQnxtNdBHoIyOdJpEhZmiwu2oKMY4Zm7Wyw J7nhXeiXuS0a8HZVCK/zfWC75DyuW3XHFp6FU2E9RNwu0jN6RO3PuZobfVaPHBmF MpwL7TwYcBzj3lafOeC1oRpnSCG1y4dEpMLLOSko8koPl4WVtca28XuCrkLBf1P6 g4RDWP7x3esKjl+EpJnaGoWAzJmQjnjs8vVPNoY2JWQ6GY0zrwRGQHSgspsqLciH sd+Cgn6H3VKbNmGT2oZTPgDDyU4f4vfptdWEYCOeqgMGBC/qydSCVhV3gQSHsaG/ WTrt7BNuLBvDT5kNneu0yW9p -----END CERTIFICATE-----Generated at Fri Oct 9 17:41:35 2026 by rpki-client