$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: GvRGsK9FjfnstqPELvV+VtDed/0vAYQ/KWhNl3ljEFo= Subject key identifier: 4F:91:9D:DF:37:1D:23:CF:FD:F8:32:49:2E:93:FE:31:92:C0:E1:F2 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 0168 Signing time: Sat 31 Oct 2026 05:28:13 +0000 Manifest this update: Sat 31 Oct 2026 05:28:12 +0000 Manifest next update: Sat 07 Nov 2026 05:28:12 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: q+KztzNRFOd4Pu/qkaPK1Y5vFTPgt2IUmk9qCDC5Bek=) 2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y=) 3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 05:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Oct 31 05:28:12 2026 GMT Not After : Nov 7 05:28:12 2026 GMT Subject: CN=6ae57c6d-ef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:c4:b8:3f:db:73:1a:d6:a6:4c:19:e4:64: 1c:23:91:97:8d:b4:44:76:9d:b5:55:c5:db:ca:de: 13:bd:e0:eb:da:c1:5d:b7:13:48:64:68:a4:82:70: 51:8f:ff:bf:c5:79:d3:9b:cb:f1:5a:c3:74:e3:58: f8:d6:dd:ab:79:aa:37:9c:f9:15:65:9f:19:7e:33: 76:c9:e5:7d:e6:95:de:82:d5:fc:58:87:cb:5a:e1: 91:90:7b:61:4b:07:70:e4:af:d3:78:1b:cb:72:69: 80:f3:85:d2:ef:bc:21:57:79:83:2f:6f:8b:56:53: 3f:ed:c2:f1:90:fc:ad:54:1d:64:d4:56:7d:ec:07: e3:5b:76:20:0d:2f:3a:41:ac:72:ca:ca:0f:df:fe: e2:6b:18:0a:90:0f:b3:63:90:c2:61:7e:0c:54:11: 07:f9:b3:94:e2:99:e5:c3:68:3d:b5:85:ab:a7:61: 6c:66:f7:4d:ba:af:15:a0:c4:94:c3:29:b6:2c:c5: 65:d2:1f:e1:5c:f1:6b:c1:52:25:b9:51:6c:fc:f7: a1:df:41:40:d5:02:55:79:aa:cd:ee:15:72:8e:48: 8a:3d:39:09:00:f9:6e:dd:5b:41:8a:e9:9c:cf:e2: d2:44:4f:44:99:61:8e:1e:93:24:c6:1d:11:ab:c0: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:91:9D:DF:37:1D:23:CF:FD:F8:32:49:2E:93:FE:31:92:C0:E1:F2 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:2a:ed:f5:43:1a:a4:cd:3a:03:62:3b:ec:b9:0a:28:ef:70: 51:fa:ab:69:d0:d1:c2:7d:af:df:ee:1d:14:19:2b:90:a9:1f: 97:ce:40:f1:fe:ec:54:d1:f6:79:6f:82:e3:c0:c3:ef:32:f1: 79:25:02:ac:17:ea:e7:65:bf:09:54:7a:44:88:c5:d5:2f:61: 4a:0a:63:81:8a:0b:a8:e7:13:58:6c:ba:5e:15:a2:1e:23:58: 25:b0:1a:e2:70:06:5a:47:bf:3e:2b:ee:10:1e:70:5a:c5:ea: 82:ff:00:84:f9:11:2d:ca:25:50:63:28:6c:e2:63:f5:1b:35: 5b:19:b5:57:2f:ba:c9:51:54:00:72:38:6a:e6:57:8a:6b:f0: 09:9f:86:ea:e5:33:4f:80:fd:6a:04:f7:9e:26:13:50:67:cc: 27:9c:9c:a1:b3:ea:d6:49:da:d7:bb:4f:2e:2d:fd:9e:c0:be: ee:f5:fa:ae:7b:42:a3:3f:bc:2e:04:76:8f:60:f6:10:10:e4: 62:e3:92:92:b0:5b:da:08:49:da:b1:ed:cb:59:b4:3c:b5:b6: 57:09:6a:99:1e:84:90:98:7e:c0:fb:db:e5:4d:02:16:2d:8a: 48:6b:39:a0:f1:93:85:bd:13:b8:02:59:dc:54:cf:73:c4:32: 50:2e:41:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYxMDMxMDUyODEyWhcNMjYxMTA3MDUyODEyWjAYMRYwFAYD VQQDEw02YWU1N2M2ZC1lZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcnEuD/bcxrWpkwZ5GQcI5GXjbREdp21VcXbyt4TveDr2sFdtxNIZGikgnBR j/+/xXnTm8vxWsN041j41t2reao3nPkVZZ8ZfjN2yeV95pXegtX8WIfLWuGRkHth Swdw5K/TeBvLcmmA84XS77whV3mDL2+LVlM/7cLxkPytVB1k1FZ97AfjW3YgDS86 QaxyysoP3/7iaxgKkA+zY5DCYX4MVBEH+bOU4pnlw2g9tYWrp2FsZvdNuq8VoMSU wym2LMVl0h/hXPFrwVIluVFs/Peh30FA1QJVearN7hVyjkiKPTkJAPlu3VtBiumc z+LSRE9EmWGOHpMkxh0Rq8DSJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+Rnd83 HSPP/fgySS6T/jGSwOHyMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhyrt9UMapM06A2I77LkKKO9wUfqradDRwn2v3+4dFBkrkKkfl85A8f7sVNH2 eW+C48DD7zLxeSUCrBfq52W/CVR6RIjF1S9hSgpjgYoLqOcTWGy6XhWiHiNYJbAa 4nAGWke/PivuEB5wWsXqgv8AhPkRLcolUGMobOJj9Rs1Wxm1Vy+6yVFUAHI4auZX imvwCZ+G6uUzT4D9agT3niYTUGfMJ5ycobPq1kna17tPLi39nsC+7vX6rntCoz+8 LgR2j2D2EBDkYuOSkrBb2ghJ2rHty1m0PLW2VwlqmR6EkJh+wPvb5U0CFi2KSGs5 oPGThb0TuAJZ3FTPc8QyUC5B4Q== -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:18 2026 by rpki-client