$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json) Hash identifier: PmHf5CjMdHOUiDVi/pblqHTmC+Ws0vzdkv8j05RJ+gg= Subject key identifier: AA:4C:D6:F7:AF:58:36:36:47:7D:EF:56:8E:5E:51:14:09:63:70:C3 Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft Manifest number: 0144 Signing time: Sun 25 Oct 2026 06:13:34 +0000 Manifest this update: Sun 25 Oct 2026 06:13:33 +0000 Manifest next update: Sun 01 Nov 2026 06:13:33 +0000 Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: YpORJt3jq5FVGg1C35k7oFjzJgyBLaLrAI9XdJJCWII=) 2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: /oG+kh2eKtakm2rIYi2rKJyApYpZtiilOJOldegtuSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: Oct 25 06:13:33 2026 GMT Not After : Nov 1 06:13:33 2026 GMT Subject: CN=6add9e0d-4d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:1b:54:7e:ad:f6:35:20:ad:04:06:75:13: ec:0d:3e:3a:e2:d8:b7:28:2b:b3:86:f1:3d:cc:3b: ee:eb:93:7c:bf:6a:44:8e:87:ab:83:1f:63:7d:56: bb:22:5b:28:12:13:22:d9:67:83:56:d2:a7:88:bf: 8c:f6:d0:bb:f0:4a:e5:d0:8a:a4:85:a5:a2:09:0e: 0e:2f:54:a0:22:60:31:e7:f7:87:49:44:ee:06:f0: 13:d3:0c:30:44:10:1a:f2:23:79:17:93:9c:a3:b5: 50:56:a8:30:69:bd:22:c9:53:f3:69:47:4b:03:4f: 30:62:34:fd:08:a1:f4:da:f0:34:ca:63:b3:b9:15: c9:b0:eb:88:1c:fb:00:b7:6d:cb:20:9a:13:c2:8c: 13:af:be:fd:97:c1:6d:fc:02:40:97:34:7d:26:c6: e9:5b:a8:6a:df:b0:16:5b:85:82:64:f4:70:97:83: 17:39:a2:86:6c:64:17:4e:22:9d:ee:7c:62:bf:37: 6a:09:a3:d6:43:73:fa:73:6b:05:90:a2:ab:90:76: 1b:bc:b8:e1:b6:10:bc:05:29:37:50:d3:41:92:90: 03:f2:94:69:ff:ba:2d:85:78:36:40:0f:e0:f9:98: cf:b9:bf:c4:50:c3:40:40:f7:89:b2:da:bd:45:f9: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:D6:F7:AF:58:36:36:47:7D:EF:56:8E:5E:51:14:09:63:70:C3 X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:be:77:35:6b:a1:f9:59:a4:9f:98:77:94:a9:3f:ad:47:75: ac:1a:5e:43:66:6e:dd:3f:37:8c:71:17:d4:bf:c4:e2:fa:a8: 40:c0:53:e8:29:c5:8f:58:a7:ef:a5:cc:2b:46:ce:ee:47:5d: 05:31:f0:cc:9a:01:f2:28:17:17:4d:20:80:ce:28:06:b0:d8: 3a:25:84:2b:09:5f:80:48:e2:7d:3e:cd:34:2e:64:fc:7b:76: e2:71:5e:16:a9:2b:bd:c7:31:8b:7c:6a:c1:bf:ba:53:a2:25: ea:b3:bc:57:5f:fe:95:63:0b:b8:12:11:ce:7e:80:f4:12:96: df:35:0a:60:b6:c1:6e:6a:11:7c:5b:fa:11:7a:32:71:1d:a6: e6:b8:82:6a:3f:25:c5:8c:93:9a:2e:5a:d1:da:42:99:4e:11: ea:19:42:a0:9d:56:e6:c8:bd:03:74:bc:46:2a:95:82:04:e5: 66:ef:70:aa:b5:4e:05:16:80:24:43:3c:a5:b5:c5:a9:74:d8: 1b:bd:35:af:a8:ef:3b:a3:f0:46:40:77:6f:91:78:ed:fe:28: bb:a0:bb:c2:d1:20:7c:0d:43:e1:a1:be:6f:59:83:30:84:6c: af:a7:e0:f7:5e:5b:2e:34:51:56:45:9b:41:55:03:b5:e2:1e: 79:37:4c:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQTUxMTAvBgNVBAUTKEY3MjY3RTgwQkU4MTdGMDQzRDI4RkI3RTczMDVGNEM0 ODhBODM5MUEwHhcNMjYxMDI1MDYxMzMzWhcNMjYxMTAxMDYxMzMzWjAYMRYwFAYD VQQDEw02YWRkOWUwZC00ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFobVH6t9jUgrQQGdRPsDT464ti3KCuzhvE9zDvu65N8v2pEjoergx9jfVa7 IlsoEhMi2WeDVtKniL+M9tC78Erl0IqkhaWiCQ4OL1SgImAx5/eHSUTuBvAT0www RBAa8iN5F5Oco7VQVqgwab0iyVPzaUdLA08wYjT9CKH02vA0ymOzuRXJsOuIHPsA t23LIJoTwowTr779l8Ft/AJAlzR9JsbpW6hq37AWW4WCZPRwl4MXOaKGbGQXTiKd 7nxivzdqCaPWQ3P6c2sFkKKrkHYbvLjhthC8BSk3UNNBkpAD8pRp/7othXg2QA/g +ZjPub/EUMNAQPeJstq9RfmtCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpM1vev WDY2R33vVo5eURQJY3DDMB8GA1UdIwQYMBaAFPcmfoC+gX8EPSj7fnMF9MSIqDka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FBNS9CQUZCMzU3NDE1 QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3UTlLUHQtY3dYMHhJaW9P Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3 UTlLUHQtY3dYMHhJaW9PUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKr53NWuh+Vmkn5h3lKk/rUd1rBpeQ2Zu3T83jHEX1L/E4vqoQMBT6CnFj1in 76XMK0bO7kddBTHwzJoB8igXF00ggM4oBrDYOiWEKwlfgEjifT7NNC5k/Ht24nFe Fqkrvccxi3xqwb+6U6Il6rO8V1/+lWMLuBIRzn6A9BKW3zUKYLbBbmoRfFv6EXoy cR2m5riCaj8lxYyTmi5a0dpCmU4R6hlCoJ1W5si9A3S8RiqVggTlZu9wqrVOBRaA JEM8pbXFqXTYG701r6jvO6PwRkB3b5F47f4ou6C7wtEgfA1D4aG+b1mDMIRsr6fg 915bLjRRVkWbQVUDteIeeTdMEw== -----END CERTIFICATE-----Generated at Sun Oct 25 20:09:17 2026 by rpki-client