$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft File: ypAQR86iWPy4s5sDZNpIokZit00.mft (raw, json) Hash identifier: Ta6NrWx+nknW0rGiQvh03EOyyyfjRFw8whFVkKhM4z4= Subject key identifier: 40:CC:E4:AB:91:F4:D2:F5:8F:ED:DF:05:D0:C5:33:CD:29:A8:3C:8C Authority key identifier: CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D Certificate issuer: /CN=A91C987A/serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft Manifest number: 2E Signing time: Sun 11 Oct 2026 09:26:26 +0000 Manifest this update: Sun 11 Oct 2026 09:26:25 +0000 Manifest next update: Sun 18 Oct 2026 09:26:25 +0000 Files and hashes: 1: ypAQR86iWPy4s5sDZNpIokZit00.crl (hash: S9SpaiwStJBvufesI2O5nuDvikX4P4RmkdZ95sW8Kp8=) 2: BD79B614915611F18490ADCA6911F970.roa (hash: QYVNcxQHFREpP33/6Uxpf9LJcni4eo476dd+VvhSGPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C987A, serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Validity Not Before: Oct 11 09:26:25 2026 GMT Not After : Oct 18 09:26:25 2026 GMT Subject: CN=6acb5642-5580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:2f:77:05:5f:10:5e:eb:cb:6d:8e:7f:4e: b0:a3:af:50:5b:8a:fd:ad:e4:bf:84:0c:96:6c:c4: bc:9a:1e:d0:13:13:f7:96:8f:ec:00:53:39:85:fa: 8c:53:9d:1d:c1:a0:05:e4:74:bb:20:1b:30:eb:4e: 08:6e:2c:eb:81:d2:b6:60:55:c2:fe:be:6d:d5:18: 33:46:f5:62:3b:35:3e:ca:7a:bb:88:fd:15:31:a1: 3c:b6:ea:0e:4c:b3:d5:96:ac:44:10:21:25:9b:05: 00:d0:e9:9d:42:24:ae:86:9f:55:4b:8d:6e:d8:2f: d6:0f:86:7d:71:ba:40:9e:35:a5:1f:9a:69:c5:e6: d6:c5:c3:cc:7b:b7:2e:d5:34:dc:c2:19:83:ca:3f: 44:8e:36:68:f1:91:4a:c9:ce:83:46:ab:53:3a:12: a2:85:0f:45:6e:36:b4:0d:66:57:c9:45:3a:c8:a7: 31:d5:1c:17:5d:68:73:80:12:fa:39:49:52:f4:2b: b2:35:19:94:e0:e0:65:64:bc:d3:43:00:42:ef:6e: 44:c7:3c:5b:da:a9:d1:fe:66:29:34:e8:42:64:25: d6:7a:f1:42:60:75:01:cf:6d:ac:d5:dd:aa:2b:cc: 26:3b:d0:f5:4c:d8:d2:4d:b0:f4:cd:f6:4d:1c:fd: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:E4:AB:91:F4:D2:F5:8F:ED:DF:05:D0:C5:33:CD:29:A8:3C:8C X509v3 Authority Key Identifier: keyid:CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:43:da:89:53:ae:49:b7:d0:6e:b4:51:44:f8:fc:3a:b7:5a: 79:77:1d:04:6c:a7:84:69:32:e9:d5:2e:16:58:6e:9b:74:d9: db:3d:11:41:16:28:7e:64:d2:38:12:c3:a7:2c:b1:47:a3:14: ce:b9:4b:00:f7:7f:0c:85:01:d5:5d:64:ac:3e:d9:18:78:05: 7e:98:53:c7:65:de:0a:c2:41:3e:1c:0f:26:fc:8c:b2:37:76: 10:ce:4a:b9:bc:90:ae:f2:95:09:46:eb:78:c0:7b:5c:79:21: c7:64:45:6c:69:9c:aa:35:d8:78:28:7b:c5:40:d7:67:c3:e9: 43:3c:aa:82:d8:8d:2a:8d:cd:8c:2e:c7:25:6f:21:4d:23:57: ba:bf:ab:47:7d:32:1e:0b:cb:d0:d0:50:94:a5:aa:94:94:83: 16:55:1e:d0:d3:06:63:57:cb:33:5b:83:32:ea:f6:5a:aa:7a: 8a:55:1c:09:ea:81:db:14:bb:2f:e7:ce:b7:62:c3:5c:cb:f7: 6a:10:75:04:a3:ff:84:d8:0b:e3:c4:9e:82:64:10:c1:f5:f9: 22:81:fc:91:89:cf:7b:b9:da:ce:6a:30:11:4c:06:94:c8:bb: 09:77:cc:2e:2c:11:7d:83:08:de:0a:69:3e:81:0b:ee:62:f0: 0a:02:64:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTg3QTExMC8GA1UEBRMoQ0E5MDEwNDdDRUEyNThGQ0I4QjM5QjAzNjREQTQ4QTI0 NjYyQjc0RDAeFw0yNjEwMTEwOTI2MjVaFw0yNjEwMTgwOTI2MjVaMBgxFjAUBgNV BAMTDTZhY2I1NjQyLTU1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmeS93BV8QXuvLbY5/TrCjr1Bbiv2t5L+EDJZsxLyaHtATE/eWj+wAUzmF+oxT nR3BoAXkdLsgGzDrTghuLOuB0rZgVcL+vm3VGDNG9WI7NT7KeruI/RUxoTy26g5M s9WWrEQQISWbBQDQ6Z1CJK6Gn1VLjW7YL9YPhn1xukCeNaUfmmnF5tbFw8x7ty7V NNzCGYPKP0SONmjxkUrJzoNGq1M6EqKFD0VuNrQNZlfJRTrIpzHVHBddaHOAEvo5 SVL0K7I1GZTg4GVkvNNDAELvbkTHPFvaqdH+Zik06EJkJdZ68UJgdQHPbazV3aor zCY70PVM2NJNsPTN9k0c/eHZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQMzkq5H0 0vWP7d8F0MUzzSmoPIwwHwYDVR0jBBgwFoAUypAQR86iWPy4s5sDZNpIokZit00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5ODdBLzIwOEM2QTc2OEIw ODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5NHM1c0RaTnBJb2taaXQw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXBBUVI4NmlXUHk0czVzRFpOcElva1ppdDAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 ODdBLzIwOEM2QTc2OEIwODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5 NHM1c0RaTnBJb2taaXQwMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsQ9qJU65Jt9ButFFE+Pw6t1p5dx0EbKeEaTLp1S4WWG6bdNnbPRFBFih+ZNI4 EsOnLLFHoxTOuUsA938MhQHVXWSsPtkYeAV+mFPHZd4KwkE+HA8m/IyyN3YQzkq5 vJCu8pUJRut4wHtceSHHZEVsaZyqNdh4KHvFQNdnw+lDPKqC2I0qjc2MLsclbyFN I1e6v6tHfTIeC8vQ0FCUpaqUlIMWVR7Q0wZjV8szW4My6vZaqnqKVRwJ6oHbFLsv 5863YsNcy/dqEHUEo/+E2AvjxJ6CZBDB9fkigfyRic97udrOajARTAaUyLsJd8wu LBF9gwjeCmk+gQvuYvAKAmQO -----END CERTIFICATE-----Generated at Mon Oct 12 03:35:39 2026 by rpki-client