$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: aWLiEoMLZ8sK6JsuN+VEwzeRlLaVtW/iUAMFQnvs1ok= Subject key identifier: 59:1A:17:7F:F9:6C:23:1F:A3:14:BE:94:89:E7:DB:1D:C3:29:77:2F Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 02D2 Signing time: Mon 19 Oct 2026 01:39:39 +0000 Manifest this update: Mon 19 Oct 2026 01:39:38 +0000 Manifest next update: Mon 26 Oct 2026 01:39:38 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: ZI9xr12eUTo7UoGMsXduksnlmnwA2z97QIs9rPREbFY=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: flivO9KZ3hNdVf6kTG0C2l09oeHTUSZTfnGjfG/rjIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 01:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Oct 19 01:39:38 2026 GMT Not After : Oct 26 01:39:38 2026 GMT Subject: CN=6ad574da-3440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:62:dc:91:4b:79:c6:7b:cd:d9:f1:fb:82: 1d:d6:97:9c:86:bc:ba:af:0a:e6:0e:33:6f:be:d1: 3e:c3:59:45:51:0d:c4:a0:f5:91:b7:c6:8e:11:85: 7f:94:f1:54:ed:d9:d5:02:27:5b:78:70:6b:b4:fe: 77:72:61:16:f1:a8:9e:3c:59:98:67:ac:bf:75:9c: 8d:68:f6:d2:9c:c6:bf:82:96:8c:2b:d7:d4:2d:fd: 6c:d3:13:ac:76:90:dc:48:e7:1d:c5:c1:5f:07:67: 3d:86:1a:80:90:23:59:90:ae:12:a7:42:15:42:8e: da:57:3a:dc:d4:89:d5:0d:b5:21:fe:b7:66:5c:a8: ad:96:59:01:4b:31:98:cc:d4:6a:ef:aa:10:bf:b1: 91:e2:8e:61:31:f9:34:f5:44:18:78:78:2b:b1:ef: dd:44:18:11:c3:bb:9d:7b:3a:38:14:e3:8d:c1:92: a3:7d:f3:9e:65:0d:83:3c:d8:94:b1:3b:5c:0b:71: 37:ee:fa:16:78:83:b1:19:9e:39:a4:4e:f0:9a:1a: 89:1d:e7:07:99:b7:0d:6b:51:f7:c5:03:e1:25:13: ce:05:60:82:d6:fb:ce:53:7f:64:7e:f5:c1:27:72: b5:57:73:7a:ae:df:66:36:4a:ff:0e:19:da:8d:23: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1A:17:7F:F9:6C:23:1F:A3:14:BE:94:89:E7:DB:1D:C3:29:77:2F X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6e:2e:69:60:c5:0e:bc:14:9f:ce:63:d1:6a:f6:cf:22:29: 9e:7a:c8:f1:25:8a:e2:27:4a:c4:f2:87:f6:71:58:8f:d7:49: a0:a1:70:b4:1c:24:b3:cb:b3:59:10:1c:8e:7f:e5:08:4c:7c: 4a:aa:ad:c1:a6:04:ee:86:5a:d9:2f:9a:a5:18:f2:86:ab:c3: 50:e2:59:f3:0f:5d:0b:ba:05:67:85:97:cc:11:bc:e8:83:cb: 2e:75:e0:42:6c:39:2b:e8:cd:66:fb:6f:b7:5d:4a:b8:8e:52: 30:40:b2:e3:d8:71:06:94:a8:4c:1a:79:42:f1:e1:6c:44:fa: 2c:bb:27:f6:2f:68:90:7b:a8:8c:35:50:eb:63:68:1e:65:fd: 8b:cc:b5:aa:47:2d:35:02:9f:7b:e7:32:4e:d9:05:69:e0:13: 63:c3:53:24:ea:d0:31:a7:65:ea:e9:05:e6:46:fb:06:ec:6e: 27:34:ff:8e:fc:dc:20:ea:dd:dd:72:7f:f8:66:04:5c:cf:67: 34:8a:7e:7b:7c:2f:2e:c1:44:b4:67:01:26:b9:18:b3:39:ea: 62:de:c7:ea:6f:1a:ed:16:f6:7b:d8:d1:27:fb:67:02:39:2e: cb:96:b1:fc:a0:d4:83:82:90:5c:47:2b:2a:4c:af:b1:89:be: 6c:f7:ee:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjYxMDE5MDEzOTM4WhcNMjYxMDI2MDEzOTM4WjAYMRYwFAYD VQQDEw02YWQ1NzRkYS0zNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAknxi3JFLecZ7zdnx+4Id1pechry6rwrmDjNvvtE+w1lFUQ3EoPWRt8aOEYV/ lPFU7dnVAidbeHBrtP53cmEW8aiePFmYZ6y/dZyNaPbSnMa/gpaMK9fULf1s0xOs dpDcSOcdxcFfB2c9hhqAkCNZkK4Sp0IVQo7aVzrc1InVDbUh/rdmXKitllkBSzGY zNRq76oQv7GR4o5hMfk09UQYeHgrse/dRBgRw7udezo4FOONwZKjffOeZQ2DPNiU sTtcC3E37voWeIOxGZ45pE7wmhqJHecHmbcNa1H3xQPhJRPOBWCC1vvOU39kfvXB J3K1V3N6rt9mNkr/DhnajSMpKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkaF3/5 bCMfoxS+lInn2x3DKXcvMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp24uaWDFDrwUn85j0Wr2zyIpnnrI8SWK4idKxPKH9nFYj9dJoKFwtBwks8uz WRAcjn/lCEx8SqqtwaYE7oZa2S+apRjyhqvDUOJZ8w9dC7oFZ4WXzBG86IPLLnXg Qmw5K+jNZvtvt11KuI5SMECy49hxBpSoTBp5QvHhbET6LLsn9i9okHuojDVQ62No HmX9i8y1qkctNQKfe+cyTtkFaeATY8NTJOrQMadl6ukF5kb7BuxuJzT/jvzcIOrd 3XJ/+GYEXM9nNIp+e3wvLsFEtGcBJrkYsznqYt7H6m8a7Rb2e9jRJ/tnAjkuy5ax /KDUg4KQXEcrKkyvsYm+bPfuqA== -----END CERTIFICATE-----Generated at Tue Oct 20 05:05:58 2026 by rpki-client