$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft File: IY_bC_-9DsQ8Nb53hZviztXFQOo.mft (raw, json) Hash identifier: qgncnJNXHDqjNCkLHcYN3AUHGYonjPsdYjrPDyKppCI= Subject key identifier: F2:93:41:8B:17:BB:BA:E6:28:AD:C7:1D:CB:D1:FF:0E:B6:59:90:A1 Authority key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA Certificate issuer: /CN=A91CF477/serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft Manifest number: 3F Signing time: Sun 25 Oct 2026 08:52:51 +0000 Manifest this update: Sun 25 Oct 2026 08:52:50 +0000 Manifest next update: Sun 01 Nov 2026 08:52:50 +0000 Files and hashes: 1: IY_bC_-9DsQ8Nb53hZviztXFQOo.crl (hash: yL7ARd6hDKNdca5NalNgsA9UC+xmfVQY4gnRuiHsdrk=) 2: BB05DCBA712511F1BDAC11CB6EA30FBC.roa (hash: P4GuX5ou/U+Rpw8seN62fuLfOYRcHVXRnnvShlDFcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA Validity Not Before: Oct 25 08:52:50 2026 GMT Not After : Nov 1 08:52:50 2026 GMT Subject: CN=6addc362-8f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:4b:e8:76:15:fc:fe:5d:3e:04:12:d5:42: d8:cf:87:29:ca:ee:4e:eb:ce:b2:6d:45:16:b2:03: d7:f9:72:65:a8:62:bf:bb:f1:9f:fc:0c:de:ca:da: 57:2b:e6:ad:7e:57:45:f3:60:e8:89:3f:e6:d3:e3: e4:5b:ce:19:de:9a:2a:50:9b:65:d2:ff:46:89:c2: a8:9f:75:98:45:4b:f0:f6:cf:10:6b:3b:d5:19:8b: 56:eb:6b:36:4d:d2:99:25:a1:07:fb:ed:d8:d0:27: ee:4d:f5:6a:08:fa:3b:67:93:00:87:38:83:fe:4d: cf:44:77:fe:0c:a8:39:df:bc:21:5c:5d:7a:75:dc: 51:40:09:58:97:65:70:ba:8a:a3:1f:22:b9:cf:2a: cf:b9:15:3a:52:31:63:c4:59:5a:59:d6:61:2e:e3: d0:05:fd:2b:82:6f:8d:ff:52:e7:81:54:a9:67:45: cf:6c:e0:76:25:8d:af:bf:76:76:be:6a:55:a9:47: f5:23:76:5e:40:85:45:ce:cc:99:74:e3:57:65:9d: 0b:f0:e3:e6:a9:12:00:1f:90:5b:7c:2b:80:a8:f9: d6:be:17:d8:ce:ab:04:59:4c:17:48:c8:3d:11:80: 46:a3:b8:3c:12:34:03:71:10:76:74:cd:25:dd:34: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:93:41:8B:17:BB:BA:E6:28:AD:C7:1D:CB:D1:FF:0E:B6:59:90:A1 X509v3 Authority Key Identifier: keyid:21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3d:ab:4c:81:f5:86:84:14:ab:65:82:0f:59:1f:dc:5d:ed: 13:99:82:22:91:75:5e:69:74:d2:db:07:9c:50:67:13:73:1e: d3:02:ba:31:46:a0:2f:9b:3c:e7:fc:49:00:96:d3:fe:03:a1: 00:85:1c:80:d9:18:a4:9b:12:40:c2:ed:4b:71:79:85:c5:72: 50:aa:1f:68:8a:77:a3:79:04:56:a5:25:44:1d:3e:55:c7:d2: a7:62:fd:1a:ed:b2:3a:0b:b4:b0:a5:c7:d2:4f:93:39:39:5f: 0c:b5:7f:63:34:81:a9:73:24:2d:fd:9f:58:69:cb:14:ff:5b: 7a:db:b8:b5:90:9d:04:cc:d2:5a:de:28:5a:91:00:82:ad:dd: 57:45:f3:9b:07:ae:be:18:cf:9d:5e:e7:ef:c5:2e:0b:98:e2: d5:17:7f:1f:93:cc:55:a8:c4:85:cf:45:51:ec:a2:07:0f:af: 0c:0a:d3:15:ca:2e:13:41:fd:92:d3:18:72:0d:61:85:2d:47: 9e:55:7e:df:fe:85:fc:a3:47:70:bd:cf:18:cc:de:3f:87:cc: 88:af:df:74:f9:6b:41:aa:08:79:72:88:cf:0e:5d:2c:47:8b: ba:e9:92:31:d6:01:e9:33:eb:05:23:7a:b9:48:07:da:2b:f9: 28:b9:50:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RjQ3NzExMC8GA1UEBRMoMjE4RkRCMEJGRkJEMEVDNDNDMzVCRTc3ODU5QkUyQ0VE NUM1NDBFQTAeFw0yNjEwMjUwODUyNTBaFw0yNjExMDEwODUyNTBaMBgxFjAUBgNV BAMTDTZhZGRjMzYyLThmM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9y0vodhX8/l0+BBLVQtjPhynK7k7rzrJtRRayA9f5cmWoYr+78Z/8DN7K2lcr 5q1+V0XzYOiJP+bT4+RbzhnemipQm2XS/0aJwqifdZhFS/D2zxBrO9UZi1brazZN 0pkloQf77djQJ+5N9WoI+jtnkwCHOIP+Tc9Ed/4MqDnfvCFcXXp13FFACViXZXC6 iqMfIrnPKs+5FTpSMWPEWVpZ1mEu49AF/SuCb43/UueBVKlnRc9s4HYlja+/dna+ alWpR/Ujdl5AhUXOzJl041dlnQvw4+apEgAfkFt8K4Co+da+F9jOqwRZTBdIyD0R gEajuDwSNANxEHZ0zSXdNHc5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8pNBixe7 uuYorccdy9H/DrZZkKEwHwYDVR0jBBgwFoAUIY/bC/+9DsQ8Nb53hZviztXFQOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGNDc3LzY1NDJDNjQ0NzEy NTExRjE4N0VBQURDQTZEQTMwRkJDL0lZX2JDXy05RHNROE5iNTNoWnZpenRYRlFP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVlfYkNfLTlEc1E4TmI1M2hadml6dFhGUU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG NDc3LzY1NDJDNjQ0NzEyNTExRjE4N0VBQURDQTZEQTMwRkJDL0lZX2JDXy05RHNR OE5iNTNoWnZpenRYRlFPby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAiPatMgfWGhBSrZYIPWR/cXe0TmYIikXVeaXTS2wecUGcTcx7TAroxRqAvmzzn /EkAltP+A6EAhRyA2RikmxJAwu1LcXmFxXJQqh9oinejeQRWpSVEHT5Vx9KnYv0a 7bI6C7SwpcfST5M5OV8MtX9jNIGpcyQt/Z9YacsU/1t627i1kJ0EzNJa3ihakQCC rd1XRfObB66+GM+dXufvxS4LmOLVF38fk8xVqMSFz0VR7KIHD68MCtMVyi4TQf2S 0xhyDWGFLUeeVX7f/oX8o0dwvc8YzN4/h8yIr990+WtBqgh5cojPDl0sR4u66ZIx 1gHpM+sFI3q5SAfaK/kouVDT -----END CERTIFICATE-----Generated at Sun Oct 25 14:40:23 2026 by rpki-client