$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: bHOSwleBOdC30ntOIQiTBTDY6P+RFYfsVU8zYyhnXJY= Subject key identifier: EB:11:2E:CC:0C:8A:AE:7D:AE:3E:5F:15:13:3A:85:9E:7C:6B:9A:7C Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0A9C Signing time: Mon 26 Oct 2026 19:35:28 +0000 Manifest this update: Mon 26 Oct 2026 19:35:27 +0000 Manifest next update: Mon 02 Nov 2026 19:35:27 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: dimilhrnEAsn5IUo+4Tvn2zL0iBwTt1mWqLVPINcEPw=) 2: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=) 3: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=) 4: C86AB87A4D2711F1906BF3DDBE833773.roa (hash: SKrWdYrl9KleuCmzcfglzGlBQ52LXQEO3/LUYZ1Seeg=) 5: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=) 6: 3D96FCE64D1C11F19558AE18BA833773.roa (hash: fWrnDRf0ygF/bELqyvqgRKiyxFoBJGTEgo2RIONYsM0=) 7: D68A6AA64D1B11F1887430DDB9833773.roa (hash: RbJva28JL0oRQGNXfDxaa35qEtDL+UO0626spMk2ark=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Oct 26 19:35:27 2026 GMT Not After : Nov 2 19:35:27 2026 GMT Subject: CN=6adfab80-b68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:6f:31:5d:51:ca:0b:99:72:f5:94:8e:68: 0a:84:1f:02:b9:e6:17:43:b2:08:b2:df:95:ef:a5: 12:b0:f8:42:e8:8d:9e:0f:a8:c0:28:03:06:75:eb: d6:17:76:03:ee:94:d5:2a:d6:fc:e8:66:75:57:e7: 80:31:e0:c1:41:c7:74:0b:96:59:03:a7:84:cd:4a: 17:65:a3:18:52:04:ba:6e:40:3a:ca:79:a2:08:ee: 92:f5:3d:7d:e0:76:fb:22:19:c5:37:44:b8:28:fe: d8:9f:e8:b6:bb:99:61:ab:e1:d1:52:5f:89:98:09: 3d:37:7a:bc:dc:da:e0:00:10:85:fb:62:a6:fc:b8: 9b:74:91:12:ac:e6:2b:a5:65:6c:9e:09:c6:3e:dd: 29:93:cf:b7:3f:d1:fa:a1:de:4e:3e:75:52:80:7c: 3c:b4:e2:db:bb:10:cf:14:4d:21:88:33:4a:cb:bc: 2f:11:16:b6:b2:97:8f:b6:00:aa:67:c5:63:f0:aa: 41:a8:33:43:71:05:e0:d3:44:6c:f8:21:57:90:a0: e6:c5:25:27:d4:9e:56:6e:28:03:42:0c:46:b9:dc: fa:61:38:69:e5:4d:58:36:66:33:66:43:1a:9a:d6: 12:99:48:a5:a2:20:52:4e:a7:bd:38:b4:a7:b8:0b: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:11:2E:CC:0C:8A:AE:7D:AE:3E:5F:15:13:3A:85:9E:7C:6B:9A:7C X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:48:bb:55:a5:19:43:f2:15:4a:1a:14:aa:0a:b3:f7:d8:13: f2:a3:b0:02:8b:c6:e5:98:f1:05:d5:83:76:8b:26:5a:31:1c: ad:1c:05:d1:c8:6f:1e:6e:b9:83:12:9b:08:8f:79:4f:d2:81: 87:71:cd:6c:b3:0f:ee:f9:b7:40:94:f5:15:b4:e0:86:e5:cc: 08:4e:ad:3c:10:4e:9c:b2:95:70:e9:e7:0b:2f:0f:3e:d2:47: 24:0d:fa:e5:a2:82:ad:81:d4:32:94:82:71:8f:4f:f7:dc:b2: ae:61:cf:6c:dd:f7:24:40:f6:b2:17:4e:20:a0:c8:72:a0:2a: 72:69:3e:2c:31:44:43:c0:9c:aa:db:f2:6e:27:75:d7:e7:8f: c8:9c:e2:a5:60:c5:36:8f:ee:09:02:1d:55:49:a2:fe:48:35: a8:d3:41:f0:46:93:bc:7e:45:6b:fa:5b:ab:09:4a:a0:bb:88: 72:8e:0e:a4:c0:60:9a:b7:3a:93:0e:68:a0:d5:23:cb:06:1e: 6e:2b:4c:cf:11:c0:d7:e2:ca:74:69:5c:19:11:ee:4e:2a:ba: 8e:f7:0c:a9:32:8d:80:83:da:82:15:a0:26:74:87:46:25:aa: c0:10:18:19:58:97:ae:42:78:e6:df:af:d3:3b:cf:14:b5:19: 48:d7:bd:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYxMDI2MTkzNTI3WhcNMjYxMTAyMTkzNTI3WjAYMRYwFAYD VQQDEw02YWRmYWI4MC1iNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjVpvMV1RyguZcvWUjmgKhB8CueYXQ7IIst+V76USsPhC6I2eD6jAKAMGdevW F3YD7pTVKtb86GZ1V+eAMeDBQcd0C5ZZA6eEzUoXZaMYUgS6bkA6ynmiCO6S9T19 4Hb7IhnFN0S4KP7Yn+i2u5lhq+HRUl+JmAk9N3q83NrgABCF+2Km/LibdJESrOYr pWVsngnGPt0pk8+3P9H6od5OPnVSgHw8tOLbuxDPFE0hiDNKy7wvERa2spePtgCq Z8Vj8KpBqDNDcQXg00Rs+CFXkKDmxSUn1J5WbigDQgxGudz6YThp5U1YNmYzZkMa mtYSmUiloiBSTqe9OLSnuAtE7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsRLswM iq59rj5fFRM6hZ58a5p8MB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy0i7VaUZQ/IVShoUqgqz99gT8qOwAovG5ZjxBdWDdosmWjEcrRwF0chvHm65 gxKbCI95T9KBh3HNbLMP7vm3QJT1FbTghuXMCE6tPBBOnLKVcOnnCy8PPtJHJA36 5aKCrYHUMpSCcY9P99yyrmHPbN33JED2shdOIKDIcqAqcmk+LDFEQ8Ccqtvybid1 1+ePyJzipWDFNo/uCQIdVUmi/kg1qNNB8EaTvH5Fa/pbqwlKoLuIco4OpMBgmrc6 kw5ooNUjywYebitMzxHA1+LKdGlcGRHuTiq6jvcMqTKNgIPaghWgJnSHRiWqwBAY GViXrkJ45t+v0zvPFLUZSNe9GQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:43:46 2026 by rpki-client