$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json) Hash identifier: mW3VPPfynu/B0fpDWNiBvnlgmfbEru9CUgSca+7FAHM= Subject key identifier: 61:79:E9:00:EB:BD:1A:0D:00:78:59:6A:C0:88:18:EF:DE:48:00:45 Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft Manifest number: FC Signing time: Tue 29 Sep 2026 06:47:29 +0000 Manifest this update: Tue 29 Sep 2026 06:47:29 +0000 Manifest next update: Tue 06 Oct 2026 06:47:29 +0000 Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: wAZziQK714b3IicfUOek9eJT2MPBRw3tuvmxyvguHTM=) 2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: 54rNaHs3BHHyTMIFPvOgY9u0ai10wJmM8WXV532IDWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 06:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Sep 29 06:47:29 2026 GMT Not After : Oct 6 06:47:29 2026 GMT Subject: CN=6abb5f01-e09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:09:2c:bb:cb:d3:e4:8c:bd:12:47:64:36: 95:aa:31:1b:27:c5:04:41:66:c2:5b:b2:cc:8a:bb: e7:63:8f:a7:9c:8f:57:4e:b0:c2:47:85:ca:e5:4b: 92:51:2a:6c:f6:54:29:7d:1f:1a:4e:09:2b:a6:d5: af:0e:4c:23:da:7b:fc:13:14:bd:22:bb:bb:18:e7: ce:35:c2:6e:95:40:67:2e:da:11:52:a4:94:91:3f: e2:03:8e:e0:e4:0f:b8:6f:94:68:42:12:e9:0d:f5: b2:71:e2:3b:ba:d1:76:34:1b:52:c8:21:f2:75:e1: 99:cf:b9:6d:d1:de:6e:3b:8d:89:31:26:53:23:3a: 7a:2e:28:75:7f:a6:3b:22:f5:8d:95:3d:cb:df:51: 79:76:98:6c:f8:8f:f4:cd:2d:b0:21:92:cf:31:98: e0:ce:40:2d:61:9d:1d:e9:0f:be:3a:80:08:29:a7: 59:03:11:31:2d:3e:15:ae:1e:9a:ca:50:22:d3:04: b4:58:24:7a:a2:c1:32:b4:87:49:f2:91:87:23:79: 46:a1:bd:ef:6f:77:68:05:43:a6:db:66:ed:1a:aa: f7:da:94:a9:bd:88:bb:12:64:55:9b:5b:4e:12:71: 01:37:fd:90:ec:5c:d8:42:62:c3:bb:86:f8:f9:4d: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:E9:00:EB:BD:1A:0D:00:78:59:6A:C0:88:18:EF:DE:48:00:45 X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1d:fb:ec:c4:81:c0:95:e9:f2:d4:a0:28:07:f4:e3:8f:d2: d5:3d:4b:67:1d:84:fe:7a:1d:66:26:02:9f:a1:76:94:69:d1: 67:23:3f:24:6a:d3:cb:b9:b7:f7:38:e5:77:63:63:c6:49:eb: 76:b7:1b:85:ad:6b:2f:d9:ec:ca:8f:74:5d:6b:d8:e6:89:b7: 64:ee:bd:f5:b3:3e:6c:65:77:93:85:86:3c:1f:ec:ca:9a:f3: 5a:be:40:b1:c2:a4:66:17:29:e6:dc:57:42:c7:2c:e5:25:e9: e8:97:e9:29:1b:64:27:95:a6:c9:ba:c6:70:5a:df:b3:dc:6a: 6c:82:b2:a4:c8:d4:4c:95:2b:9e:8a:75:8e:97:45:6c:70:fa: 37:fc:14:48:23:2b:ca:fe:b1:1e:cf:fd:d8:88:df:e7:e5:87: 55:89:8e:d3:54:e3:c4:b9:5b:e8:b2:51:60:4e:4c:d2:72:39: 7f:32:fc:57:61:dd:28:c4:b0:fc:b8:89:73:ab:dc:2c:72:de: cc:42:41:78:43:fb:6c:43:6a:97:a4:98:d1:06:5d:45:f3:32: 65:93:0b:af:e3:f2:7d:0d:3b:19:1c:7a:0e:06:61:ef:ad:21: 67:78:0d:8f:b2:c3:ed:cb:7c:d3:7b:46:84:2e:21:c2:0d:54: 21:07:a4:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKENCNTMxQzFFQzY5MjI1RjBEQ0FFNDRDRUNBNUUzNTk4 MENFOUMwRjIwHhcNMjYwOTI5MDY0NzI5WhcNMjYxMDA2MDY0NzI5WjAYMRYwFAYD VQQDEw02YWJiNWYwMS1lMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAku4JLLvL0+SMvRJHZDaVqjEbJ8UEQWbCW7LMirvnY4+nnI9XTrDCR4XK5UuS USps9lQpfR8aTgkrptWvDkwj2nv8ExS9Iru7GOfONcJulUBnLtoRUqSUkT/iA47g 5A+4b5RoQhLpDfWyceI7utF2NBtSyCHydeGZz7lt0d5uO42JMSZTIzp6Lih1f6Y7 IvWNlT3L31F5dphs+I/0zS2wIZLPMZjgzkAtYZ0d6Q++OoAIKadZAxExLT4Vrh6a ylAi0wS0WCR6osEytIdJ8pGHI3lGob3vb3doBUOm22btGqr32pSpvYi7EmRVm1tO EnEBN/2Q7FzYQmLDu4b4+U2LhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGF56QDr vRoNAHhZasCIGO/eSABFMB8GA1UdIwQYMBaAFMtTHB7GkiXw3K5EzspeNZgM6cDy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9GNURCN0ExNjQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pmRGNya1RPeWw0MW1BenB3 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9GNURCN0ExNjQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pm RGNya1RPeWw0MW1BenB3UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQx377MSBwJXp8tSgKAf044/S1T1LZx2E/nodZiYCn6F2lGnRZyM/JGrTy7m3 9zjld2Njxknrdrcbha1rL9nsyo90XWvY5om3ZO699bM+bGV3k4WGPB/syprzWr5A scKkZhcp5txXQscs5SXp6JfpKRtkJ5WmybrGcFrfs9xqbIKypMjUTJUrnop1jpdF bHD6N/wUSCMryv6xHs/92Ijf5+WHVYmO01TjxLlb6LJRYE5M0nI5fzL8V2HdKMSw /LiJc6vcLHLezEJBeEP7bENql6SY0QZdRfMyZZMLr+PyfQ07GRx6DgZh760hZ3gN j7LD7ct803tGhC4hwg1UIQektg== -----END CERTIFICATE-----Generated at Wed Sep 30 00:23:06 2026 by rpki-client