$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: E0uNg12bDv5zr7ZJr+uxMaiZqkIqdXgJaPk+3FM+otU= Subject key identifier: 20:3B:18:9B:FE:0A:4C:D6:AA:AF:EA:8D:9F:80:C7:AC:C1:69:07:99 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 0169 Signing time: Sun 01 Nov 2026 06:07:18 +0000 Manifest this update: Sun 01 Nov 2026 06:07:17 +0000 Manifest next update: Sun 08 Nov 2026 06:07:17 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: lUpz3msWDWq12y7NLVXFIdiVonjJ8nvq5CfHdVPOrsM=) 2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y=) 3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 06:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Nov 1 06:07:17 2026 GMT Not After : Nov 8 06:07:17 2026 GMT Subject: CN=6ae6d716-b394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:70:d0:e9:f5:1e:e5:89:1a:ed:31:cc:7f:41: ab:08:f0:53:45:8b:d5:58:10:16:ba:fc:03:f0:4f: 10:a2:2d:b8:c5:10:db:a6:f0:18:a4:4a:4b:11:3e: 7a:15:a4:5d:ff:1e:43:b1:32:2f:b3:eb:76:ae:9b: 68:0e:4b:78:49:a2:6f:46:3c:69:85:d6:54:10:36: da:74:b1:aa:23:98:af:7c:56:d6:51:6e:5c:2c:6d: 7a:7b:a8:4f:6d:0a:d6:c7:62:0f:40:20:2b:b6:80: 0c:9d:42:ea:f2:6c:99:c2:95:d4:e6:7d:33:c0:76: c4:75:4f:80:b6:c1:ba:e0:41:37:93:bd:e6:9c:33: f4:cc:cc:f6:4d:53:2d:ad:cd:c8:8b:4f:72:b6:57: 06:73:9e:1b:c3:e0:28:71:d9:00:c6:1b:45:fd:ef: 9a:c2:1f:87:0b:63:75:3f:8f:12:7b:a5:81:d7:90: ae:83:59:b5:b3:36:b8:45:07:f9:dc:3b:67:95:8d: 92:42:dd:e5:8c:11:35:2c:0e:62:9d:f8:eb:42:23: 61:4a:92:d8:d4:21:6e:b9:3e:ab:26:54:21:94:58: 82:3c:c4:ce:c2:e6:4c:68:75:19:5a:98:94:2b:0f: d0:fa:c9:04:da:80:9c:a7:fe:38:15:ef:b1:c0:db: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:18:9B:FE:0A:4C:D6:AA:AF:EA:8D:9F:80:C7:AC:C1:69:07:99 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9c:8d:50:49:d5:47:06:14:09:eb:be:48:7c:82:22:75:b1: bd:f6:b1:9a:b6:b4:5f:c5:0b:75:3e:35:ee:39:77:9e:97:e2: 6a:9a:4d:32:82:07:75:de:96:06:bc:60:95:b5:b7:74:92:1f: 82:38:38:7a:6f:e5:43:24:49:4e:eb:ac:e6:8f:88:99:89:fb: 67:48:f9:06:6c:bc:56:4d:a0:c7:88:aa:4e:43:3e:90:63:82: 43:da:a5:42:d4:42:0d:63:8c:b5:9b:16:54:d4:57:24:c3:dd: 3b:cd:1a:2a:f0:b1:70:48:eb:d8:33:b7:b0:b4:54:37:95:40: c5:12:53:0c:55:e5:94:c3:75:c0:d9:1b:ea:71:19:47:bf:71: fb:8b:4e:9d:ee:2c:81:f0:5d:88:53:78:a2:1c:aa:94:3b:0b: de:d5:8b:59:54:dd:de:f2:05:2d:9a:cf:98:7b:e0:39:6c:b0: 35:da:5e:64:29:d5:c2:7e:fa:3e:bb:a3:51:ef:a6:ee:67:8a: 0b:db:a0:a1:fd:d1:e5:9f:ed:9d:94:9f:60:95:dd:ea:09:a9: 33:ce:ad:bf:b1:5d:e6:d5:4c:9e:49:0e:94:09:83:97:3d:71: ad:ab:0f:36:bd:be:d8:79:6f:b4:29:fd:8f:f1:6a:a8:ee:ca: 5a:23:66:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYxMTAxMDYwNzE3WhcNMjYxMTA4MDYwNzE3WjAYMRYwFAYD VQQDEw02YWU2ZDcxNi1iMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XDQ6fUe5Yka7THMf0GrCPBTRYvVWBAWuvwD8E8Qoi24xRDbpvAYpEpLET56 FaRd/x5DsTIvs+t2rptoDkt4SaJvRjxphdZUEDbadLGqI5ivfFbWUW5cLG16e6hP bQrWx2IPQCArtoAMnULq8myZwpXU5n0zwHbEdU+AtsG64EE3k73mnDP0zMz2TVMt rc3Ii09ytlcGc54bw+AocdkAxhtF/e+awh+HC2N1P48Se6WB15Cug1m1sza4RQf5 3DtnlY2SQt3ljBE1LA5infjrQiNhSpLY1CFuuT6rJlQhlFiCPMTOwuZMaHUZWpiU Kw/Q+skE2oCcp/44Fe+xwNsEaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCA7GJv+ CkzWqq/qjZ+Ax6zBaQeZMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpyNUEnVRwYUCeu+SHyCInWxvfaxmra0X8ULdT417jl3npfiappNMoIHdd6W BrxglbW3dJIfgjg4em/lQyRJTuus5o+ImYn7Z0j5Bmy8Vk2gx4iqTkM+kGOCQ9ql QtRCDWOMtZsWVNRXJMPdO80aKvCxcEjr2DO3sLRUN5VAxRJTDFXllMN1wNkb6nEZ R79x+4tOne4sgfBdiFN4ohyqlDsL3tWLWVTd3vIFLZrPmHvgOWywNdpeZCnVwn76 PrujUe+m7meKC9ugof3R5Z/tnZSfYJXd6gmpM86tv7Fd5tVMnkkOlAmDlz1xrasP Nr2+2HlvtCn9j/FqqO7KWiNmSQ== -----END CERTIFICATE-----Generated at Sun Nov 1 13:03:57 2026 by rpki-client