$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: sjz/+3hftLzVKdQl7KB6z8FVrY1INalFdm++J8EwqW0= Subject key identifier: E9:B6:DB:83:BF:8B:AF:C5:40:C6:AF:CB:A6:D2:00:DC:F8:B7:90:5E Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 03A2 Signing time: Mon 05 Oct 2026 00:39:26 +0000 Manifest this update: Mon 05 Oct 2026 00:39:26 +0000 Manifest next update: Mon 12 Oct 2026 00:39:26 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: 16qrkHOLh1VLUqpHunlPLBa1gz79xGjndlDNNbzDz0I=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: eTFcd93Ik05dvYU83eyYl+NfNuBY+EuLqHvO4+8nNVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Oct 5 00:39:26 2026 GMT Not After : Oct 12 00:39:26 2026 GMT Subject: CN=6ac2f1be-9bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:c1:5e:e1:50:5f:b1:03:0e:a5:7f:34:c9: 08:e7:e4:87:9a:e5:23:27:9e:fd:24:dd:56:d0:77: f5:a7:f8:41:ac:f2:b5:2c:8e:90:88:56:08:9d:02: 00:b3:e3:a1:e3:88:78:f4:5a:ac:2c:8e:c8:d0:fc: 96:90:46:cd:3a:1e:f6:12:34:c3:61:28:67:79:68: ca:74:18:20:fc:33:95:59:3d:4e:73:4f:49:90:d0: 31:6d:c6:67:38:73:b2:29:e1:38:69:da:88:0a:8b: 22:5d:bc:d5:53:a3:dd:ba:2e:da:fa:16:59:e7:ff: 08:d4:9b:09:9f:3a:b8:5e:1d:63:29:46:b9:f5:e4: ff:01:54:63:f0:3a:fa:14:9b:99:45:c5:25:79:cb: bf:7b:2e:1c:6e:7c:29:2e:a0:4b:16:ef:dd:40:76: 04:14:21:9d:ff:33:d1:e3:80:fd:44:28:77:c9:de: 21:f1:e8:49:9a:c8:03:9e:c4:80:06:66:2d:f3:67: ae:5d:6c:30:3b:4e:10:90:fb:74:54:d0:37:b6:f1: fb:0f:3b:94:85:a8:d2:8c:0b:d8:9c:a9:5c:67:c9: 2a:b6:0e:39:5d:7c:78:03:ba:a1:cb:a2:47:ee:56: 09:39:45:b4:2c:9a:96:18:4f:f9:ff:01:16:21:e9: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:DB:83:BF:8B:AF:C5:40:C6:AF:CB:A6:D2:00:DC:F8:B7:90:5E X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:4e:e4:f9:c4:c8:e4:3d:36:5b:d7:da:a8:b6:38:dd:dd:3f: 57:6c:66:dd:6e:43:ac:1c:f6:6c:2a:86:f9:74:9f:e0:65:da: b7:7c:0b:d2:e1:de:9c:45:d4:d1:7f:c2:1c:a7:65:9a:3a:69: 1f:5a:4d:63:b2:11:cf:9f:cd:85:f3:34:d0:b7:28:7d:8a:7c: 36:ff:05:f3:63:d4:c3:76:4e:ca:3b:81:98:87:8a:0d:b6:22: cd:a1:1b:6c:5e:6d:dc:6a:cb:0e:f2:a2:37:ed:69:d7:fe:6f: b7:68:3d:98:82:48:42:fe:10:47:7a:5d:cf:39:fd:67:1c:59: 80:94:81:5d:46:e6:00:f2:e8:00:db:1e:b0:ae:fd:ab:e0:42: 7e:34:7e:91:a2:96:01:12:dd:cc:ca:18:0e:d7:59:0a:50:ea: 36:f6:53:1a:e6:8b:47:97:59:c7:cd:91:7a:bb:42:3a:b4:2c: 07:62:fb:84:d9:fe:b8:45:e8:29:64:0a:49:c8:77:2a:5f:5d: 54:7c:b1:2e:25:d7:7f:02:d8:e3:50:39:fa:9b:00:bc:43:9b: 04:aa:1e:31:6d:76:ea:51:e4:fa:0e:0a:2d:1b:19:8d:27:30: e6:08:85:20:2b:1d:a4:da:9a:79:08:00:cf:75:28:cd:5b:55: 8b:7d:04:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjYxMDA1MDAzOTI2WhcNMjYxMDEyMDAzOTI2WjAYMRYwFAYD VQQDEw02YWMyZjFiZS05YmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvczBXuFQX7EDDqV/NMkI5+SHmuUjJ579JN1W0Hf1p/hBrPK1LI6QiFYInQIA s+Oh44h49FqsLI7I0PyWkEbNOh72EjTDYShneWjKdBgg/DOVWT1Oc09JkNAxbcZn OHOyKeE4adqICosiXbzVU6Pdui7a+hZZ5/8I1JsJnzq4Xh1jKUa59eT/AVRj8Dr6 FJuZRcUlecu/ey4cbnwpLqBLFu/dQHYEFCGd/zPR44D9RCh3yd4h8ehJmsgDnsSA BmYt82euXWwwO04QkPt0VNA3tvH7DzuUhajSjAvYnKlcZ8kqtg45XXx4A7qhy6JH 7lYJOUW0LJqWGE/5/wEWIenNkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOm224O/ i6/FQMavy6bSANz4t5BeMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA607k+cTI5D02W9faqLY43d0/V2xm3W5DrBz2bCqG+XSf4GXat3wL0uHenEXU 0X/CHKdlmjppH1pNY7IRz5/NhfM00LcofYp8Nv8F82PUw3ZOyjuBmIeKDbYizaEb bF5t3GrLDvKiN+1p1/5vt2g9mIJIQv4QR3pdzzn9ZxxZgJSBXUbmAPLoANsesK79 q+BCfjR+kaKWARLdzMoYDtdZClDqNvZTGuaLR5dZx82RertCOrQsB2L7hNn+uEXo KWQKSch3Kl9dVHyxLiXXfwLY41A5+psAvEObBKoeMW126lHk+g4KLRsZjScw5giF ICsdpNqaeQgAz3UozVtVi30Ejw== -----END CERTIFICATE-----Generated at Mon Oct 5 13:04:20 2026 by rpki-client