$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: V45WPbn8Xr9yoZ5np7t2EZolbyHGea7Naz+ESkFnGOw= Subject key identifier: 71:26:EE:D6:30:87:51:B2:89:F1:0F:2E:A2:AE:3E:56:AB:4C:5F:A1 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 021C Signing time: Mon 05 Oct 2026 03:12:52 +0000 Manifest this update: Mon 05 Oct 2026 03:12:52 +0000 Manifest next update: Mon 12 Oct 2026 03:12:52 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: lZa+0y+r9IHBmLLe0htVmyxH5LLUp6h+saVQYOmlzXA=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: esJHSwP5qiLnITDA6HOx8pEFmC6BOBPZgF6kgLGLSk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Oct 5 03:12:52 2026 GMT Not After : Oct 12 03:12:52 2026 GMT Subject: CN=6ac315b4-706b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:ab:da:a4:7d:4d:dc:39:bf:1f:37:93:d7: 5f:67:b7:a3:b8:92:de:43:37:13:87:c3:4d:57:88: d7:1a:44:78:a8:c8:ac:cc:2f:db:3c:36:34:cc:5f: 65:3d:f8:ca:9a:b4:12:71:5c:f5:f7:a4:d1:db:a0: 69:39:cd:40:2e:e1:fc:7d:04:bc:65:25:a3:82:11: 7a:39:01:67:7b:9f:20:22:e2:ba:eb:c1:3b:8b:59: cc:1f:1d:be:28:6a:ab:14:d6:b7:9e:7c:03:14:b2: 69:ed:75:b1:5d:d1:ba:a0:4d:f7:4b:08:ca:30:64: 10:6a:d0:99:bf:76:da:e5:f4:a8:90:a4:68:95:08: 86:79:a9:c3:8a:7c:40:fb:a0:48:7a:c2:71:36:15: 77:d1:7d:7c:c0:d5:5b:a5:e7:6b:85:d3:92:6c:a1: 3e:ad:67:e1:04:40:06:ba:40:3c:e8:0d:f4:d7:30: 10:c9:7f:be:49:fb:0d:fa:82:16:e3:58:94:d4:4d: 43:26:70:bc:be:2a:87:61:98:c0:1e:cc:73:00:62: 5e:c3:5e:67:60:78:73:e1:d3:f6:40:0b:be:3c:33: 4f:25:e6:3d:16:e6:f8:44:57:84:c3:f0:3d:cf:01: 87:43:4c:8f:65:2f:6d:9b:5c:ce:f7:58:5d:dd:a1: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:26:EE:D6:30:87:51:B2:89:F1:0F:2E:A2:AE:3E:56:AB:4C:5F:A1 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:88:59:a0:71:04:48:66:05:be:9c:5c:78:70:1c:93:c8:d4: b5:e6:3a:99:bc:46:1e:12:92:f4:d1:03:e2:f3:6b:a4:7e:c4: fa:af:c1:06:db:88:21:29:45:79:be:29:93:78:09:98:b0:5a: 79:7e:8b:c6:0d:c0:f5:2d:df:35:08:4a:5a:56:e0:60:b7:fa: a1:b4:64:59:3a:06:26:83:6c:1c:99:01:0e:a0:13:c5:90:06: 8a:35:81:25:dc:9a:3d:55:c3:be:a8:ff:18:ad:29:a0:ea:40: 09:8c:12:fb:e4:62:26:9f:dd:b7:57:1a:fd:af:84:63:6d:9a: a2:f8:d6:cc:61:d4:2a:83:19:1f:64:dd:91:42:fd:38:38:01: b2:ee:ea:8b:1c:46:e4:fa:c4:f3:37:f8:f9:81:0f:41:43:10: 58:4b:9d:f6:8c:2b:bb:61:7e:f1:6f:88:ba:e5:25:5c:3c:6d: b7:5e:16:76:f4:a7:28:da:2e:36:cc:12:e4:97:d6:e7:79:90: e5:51:52:11:0d:db:f3:3e:9a:06:bb:fc:d6:ee:f2:cf:3a:61: a1:e8:0c:99:d1:54:df:2f:0a:59:a5:49:37:24:97:5a:f5:14: e1:0a:aa:ac:ed:8c:42:8a:8a:3d:42:cc:32:e3:67:5c:10:5a: 39:01:d3:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYxMDA1MDMxMjUyWhcNMjYxMDEyMDMxMjUyWjAYMRYwFAYD VQQDEw02YWMzMTViNC03MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHer2qR9Tdw5vx83k9dfZ7ejuJLeQzcTh8NNV4jXGkR4qMiszC/bPDY0zF9l PfjKmrQScVz196TR26BpOc1ALuH8fQS8ZSWjghF6OQFne58gIuK668E7i1nMHx2+ KGqrFNa3nnwDFLJp7XWxXdG6oE33SwjKMGQQatCZv3ba5fSokKRolQiGeanDinxA +6BIesJxNhV30X18wNVbpedrhdOSbKE+rWfhBEAGukA86A301zAQyX++SfsN+oIW 41iU1E1DJnC8viqHYZjAHsxzAGJew15nYHhz4dP2QAu+PDNPJeY9Fub4RFeEw/A9 zwGHQ0yPZS9tm1zO91hd3aGk6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEm7tYw h1GyifEPLqKuPlarTF+hMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPYhZoHEESGYFvpxceHAck8jUteY6mbxGHhKS9NED4vNrpH7E+q/BBtuIISlF eb4pk3gJmLBaeX6Lxg3A9S3fNQhKWlbgYLf6obRkWToGJoNsHJkBDqATxZAGijWB JdyaPVXDvqj/GK0poOpACYwS++RiJp/dt1ca/a+EY22aovjWzGHUKoMZH2TdkUL9 ODgBsu7qixxG5PrE8zf4+YEPQUMQWEud9owru2F+8W+IuuUlXDxtt14WdvSnKNou NswS5JfW53mQ5VFSEQ3b8z6aBrv81u7yzzphoegMmdFU3y8KWaVJNySXWvUU4Qqq rO2MQoqKPULMMuNnXBBaOQHTvQ== -----END CERTIFICATE-----Generated at Wed Oct 7 04:09:56 2026 by rpki-client