$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: 0IZKD2ypS5bmwcdhuJbfdCX+5+kFaEhKZkvvwdd3OLk= Subject key identifier: A3:FF:B0:10:D5:0C:4C:B1:A8:13:D5:78:10:F1:CD:DC:DC:14:47:0A Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0B2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0B16 Signing time: Sat 24 Oct 2026 19:17:53 +0000 Manifest this update: Sat 24 Oct 2026 19:17:53 +0000 Manifest next update: Sat 31 Oct 2026 19:17:53 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: +zAs1Vejw4jyQjEdaSKWBlAqaDCuWY6Exh9UoNKFY4I=) 2: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: 1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=) 3: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: 9jHgiW6B1sqLvSJnd17xl6prg5mUxXRdfL0P2w6JRHY=) 4: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: B7PIpT06o5yz5X0ICfGhNE1RjQ8ofk6sdiEjNK1EArU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 19:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Oct 24 19:17:53 2026 GMT Not After : Oct 31 19:17:53 2026 GMT Subject: CN=6add0461-1a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:34:db:c7:61:85:9e:b1:a7:c4:49:c6:f2: 1e:31:c5:a0:19:d8:89:dd:57:7f:2d:d7:f4:a5:cc: 61:97:7f:56:1b:7d:3b:dc:c0:af:dc:82:5a:e2:c7: 2a:02:56:9e:cb:ac:3c:3d:c4:73:3f:8d:81:03:37: 56:c9:a9:1a:53:fa:92:f4:ad:8e:54:c9:0f:35:1b: 55:dc:1c:3a:08:19:86:f1:6b:91:e5:26:57:cb:0c: 81:37:82:1e:cf:9d:5c:24:31:98:cc:b3:14:6d:8d: 22:2e:f6:45:30:06:03:d7:58:36:81:d1:3e:78:9a: 93:86:97:a8:e0:6d:d4:cb:56:fa:9e:7d:20:b6:a0: eb:06:9d:30:e6:38:70:47:0c:4d:11:47:75:d8:42: 77:6a:12:32:cb:12:17:31:21:93:a6:67:7c:43:e1: 8b:d9:b9:35:a4:eb:f8:2b:f8:d4:4a:e6:36:2a:c3: d9:9b:2c:03:40:e6:4e:64:5b:7d:ab:1b:71:35:8e: a8:ee:5e:cf:07:a2:d9:e9:e4:99:0f:bc:41:49:83: 35:d7:8c:56:5f:b5:5b:a8:a5:c0:91:c3:61:c1:c1: b0:d7:2b:b8:d5:69:37:08:29:c3:b4:e2:44:c7:d2: 94:81:75:bb:56:14:1e:7a:c1:8c:da:25:0d:76:9b: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:B0:10:D5:0C:4C:B1:A8:13:D5:78:10:F1:CD:DC:DC:14:47:0A X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6f:25:27:9c:67:85:31:4a:4a:79:3d:02:13:1d:cf:63:44: 49:3e:c3:85:81:1e:b4:e8:11:59:a3:4f:68:30:a9:b8:ca:21: 90:3b:8c:f7:54:02:2a:cb:b0:d0:b6:66:f4:64:61:9a:34:74: 35:0d:bc:58:49:bc:7e:a7:91:00:d8:71:63:a9:bd:64:07:59: 05:7b:2b:31:ad:f1:37:b7:5a:82:81:d6:5a:f2:25:38:45:cc: e6:ec:73:ac:6c:6e:3e:1a:33:2e:94:12:e7:a8:e1:07:d5:a8: 42:00:78:e1:83:8e:7b:36:9f:9c:59:64:86:9e:8b:28:35:b9: dd:03:61:e5:4e:e3:2e:ee:f8:75:3d:04:b2:1a:bb:fb:04:94: e5:6f:77:1f:08:32:31:80:c2:91:cb:34:f1:fd:a2:75:a4:7d: d9:f6:24:dd:75:e6:5c:59:e1:dd:d6:8b:78:8d:b3:21:4e:97: 7f:45:c5:3b:4a:ac:6b:4e:df:81:5f:bd:13:7e:97:cd:75:57: 7e:39:eb:d1:ac:45:db:62:2c:cc:ba:5b:cc:de:5b:51:a9:2a: d1:a6:ad:c9:98:b6:8e:d0:a2:c5:82:2b:c5:2a:96:00:2d:26: d3:2d:b3:cf:19:57:a8:3d:06:4d:96:b0:ce:d5:6b:86:be:e1: cf:5d:a4:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYxMDI0MTkxNzUzWhcNMjYxMDMxMTkxNzUzWjAYMRYwFAYD VQQDEw02YWRkMDQ2MS0xYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n4028dhhZ6xp8RJxvIeMcWgGdiJ3Vd/Ldf0pcxhl39WG3073MCv3IJa4scq Alaey6w8PcRzP42BAzdWyakaU/qS9K2OVMkPNRtV3Bw6CBmG8WuR5SZXywyBN4Ie z51cJDGYzLMUbY0iLvZFMAYD11g2gdE+eJqThpeo4G3Uy1b6nn0gtqDrBp0w5jhw RwxNEUd12EJ3ahIyyxIXMSGTpmd8Q+GL2bk1pOv4K/jUSuY2KsPZmywDQOZOZFt9 qxtxNY6o7l7PB6LZ6eSZD7xBSYM114xWX7VbqKXAkcNhwcGw1yu41Wk3CCnDtOJE x9KUgXW7VhQeesGM2iUNdptMiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKP/sBDV DEyxqBPVeBDxzdzcFEcKMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMW8lJ5xnhTFKSnk9AhMdz2NEST7DhYEetOgRWaNPaDCpuMohkDuM91QCKsuw 0LZm9GRhmjR0NQ28WEm8fqeRANhxY6m9ZAdZBXsrMa3xN7dagoHWWvIlOEXM5uxz rGxuPhozLpQS56jhB9WoQgB44YOOezafnFlkhp6LKDW53QNh5U7jLu74dT0Eshq7 +wSU5W93HwgyMYDCkcs08f2idaR92fYk3XXmXFnh3daLeI2zIU6Xf0XFO0qsa07f gV+9E36XzXVXfjnr0axF22IszLpbzN5bUakq0aatyZi2jtCixYIrxSqWAC0m0y2z zxlXqD0GTZawztVrhr7hz12kdg== -----END CERTIFICATE-----Generated at Mon Oct 26 02:21:34 2026 by rpki-client