$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json) Hash identifier: jn2zYXScsQbZkBfKtuctdZ0U29fBBpCkdw55Zt9H55o= Subject key identifier: 4D:05:35:17:80:29:32:53:5B:4F:1E:A7:6E:EE:9B:5A:3E:99:E5:26 Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft Manifest number: 087E Signing time: Fri 04 Sep 2026 20:38:49 +0000 Manifest this update: Fri 04 Sep 2026 20:38:49 +0000 Manifest next update: Fri 11 Sep 2026 20:38:49 +0000 Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: OQBo1Zkb63y6c+mQLXzWu6zuahj8rfFcvyNXV1WeXk0=) 2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: ariwM0UNsN9RHsI11tEsRZAkUo+gH7DpYJGLIoLRlPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Validity Not Before: Sep 4 20:38:49 2026 GMT Not After : Sep 11 20:38:49 2026 GMT Subject: CN=6a9b2c59-4032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:3e:26:85:0c:fa:4e:6e:85:7e:2c:22:ce: 83:c0:93:fa:61:fe:e6:2a:ee:91:b3:2a:52:65:47: a0:16:1e:3a:c3:00:ac:e0:19:6f:16:96:6e:cb:08: 54:97:ad:5f:d8:6e:c0:ee:76:c2:61:f8:2a:73:a1: cd:91:b6:1b:a5:90:23:1e:61:f2:78:9c:c8:13:3b: 23:2d:3d:f7:d6:65:1c:ea:4e:13:11:9e:01:6e:3d: 87:b0:2e:cd:14:fc:77:bf:40:8e:a2:08:a1:59:fa: 5f:02:9f:db:a1:bc:6a:36:b0:98:32:54:60:01:ec: 52:44:5e:d0:ac:bb:4c:76:96:b0:cd:69:83:85:a1: ac:87:9c:56:cf:0a:d0:88:9a:84:76:61:30:13:8b: cc:c4:cc:59:a2:28:6d:9f:85:65:4f:f3:26:bc:02: 03:bb:98:8f:57:d5:fc:fa:93:fd:65:49:46:0d:6b: 31:dc:3b:b7:71:ba:95:3b:bd:de:f9:c0:39:a1:91: a9:a5:9f:a5:dd:d5:9b:4e:8a:a5:45:7f:43:b9:d0: a6:e6:06:0d:e8:7a:b9:3a:0e:e6:fc:f8:ad:61:6d: 51:a3:ce:b7:eb:76:8d:e2:18:a4:47:b4:fe:9c:3b: 00:fd:1a:0d:b0:22:11:7a:e4:03:75:98:20:df:50: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:35:17:80:29:32:53:5B:4F:1E:A7:6E:EE:9B:5A:3E:99:E5:26 X509v3 Authority Key Identifier: keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:90:40:45:86:35:d6:06:d9:88:54:3f:dd:04:9b:bc:37:91: fc:57:9e:3c:c7:73:9c:a5:ac:2b:e8:96:f2:6b:14:a7:17:e9: 98:df:b9:65:9a:53:e8:4b:7c:76:00:7c:40:a7:0e:c0:b6:76: 21:96:cf:ed:f2:1d:bc:8a:93:a7:f0:df:0f:cd:1a:76:cd:38: 1e:d9:44:1c:f7:1d:1c:af:e8:71:01:cf:37:b0:de:d5:42:7b: 06:88:4b:ba:3a:c0:9c:81:2f:b2:f0:40:0e:ee:48:5e:f8:1f: 00:37:6a:6b:e7:56:8e:f0:9e:70:b2:56:77:a7:1b:98:be:ab: 69:22:ba:7c:7b:94:98:67:60:ba:c5:70:9b:d2:17:06:71:a1: 29:97:66:93:84:57:e1:3c:d5:60:be:83:ab:bf:c4:64:9a:e9: 7e:b7:a7:70:fe:e5:6b:ed:46:42:ef:37:0a:1c:d5:9f:41:c9: 97:59:67:f3:e8:e8:b3:2a:4b:d4:19:ab:04:cc:36:ee:33:e3: a0:12:7a:e4:9d:78:f9:9c:44:12:c2:e9:3f:a4:a8:e6:0f:ba: 49:ef:a4:27:05:6c:ad:88:9d:4f:5c:ba:cf:51:f0:15:9f:b5: a9:73:98:0b:6b:5e:8b:6b:d5:de:7a:7c:07:75:f1:63:0a:f6: 61:fd:78:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0MkUxMTAvBgNVBAUTKENBODVFMTMzQzFFMjM5NjE0QzlDNTc3ODAxMThCREIz MDk1MjhFNzYwHhcNMjYwOTA0MjAzODQ5WhcNMjYwOTExMjAzODQ5WjAYMRYwFAYD VQQDEw02YTliMmM1OS00MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/Q+JoUM+k5uhX4sIs6DwJP6Yf7mKu6RsypSZUegFh46wwCs4BlvFpZuywhU l61f2G7A7nbCYfgqc6HNkbYbpZAjHmHyeJzIEzsjLT331mUc6k4TEZ4Bbj2HsC7N FPx3v0COogihWfpfAp/bobxqNrCYMlRgAexSRF7QrLtMdpawzWmDhaGsh5xWzwrQ iJqEdmEwE4vMxMxZoihtn4VlT/MmvAIDu5iPV9X8+pP9ZUlGDWsx3Du3cbqVO73e +cA5oZGppZ+l3dWbToqlRX9DudCm5gYN6Hq5Og7m/PitYW1Ro86363aN4hikR7T+ nDsA/RoNsCIReuQDdZgg31BzzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0FNReA KTJTW08ep27um1o+meUmMB8GA1UdIwQYMBaAFMqF4TPB4jlhTJxXeAEYvbMJUo52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQyRS9ENkE3RkY0ODBE MTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9XRk1uRmQ0QVJpOXN3bFNq blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvWGhNOEhpT1dGTW5GZDRBUmk5c3dsU2puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQyRS9ENkE3RkY0ODBEMTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9X Rk1uRmQ0QVJpOXN3bFNqblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwJBARYY11gbZiFQ/3QSbvDeR/FeePMdznKWsK+iW8msUpxfpmN+5ZZpT6Et8 dgB8QKcOwLZ2IZbP7fIdvIqTp/DfD80ads04HtlEHPcdHK/ocQHPN7De1UJ7BohL ujrAnIEvsvBADu5IXvgfADdqa+dWjvCecLJWd6cbmL6raSK6fHuUmGdgusVwm9IX BnGhKZdmk4RX4TzVYL6Dq7/EZJrpfrencP7la+1GQu83ChzVn0HJl1ln8+josypL 1BmrBMw27jPjoBJ65J14+ZxEEsLpP6So5g+6Se+kJwVsrYidT1y6z1HwFZ+1qXOY C2tei2vV3np8B3XxYwr2Yf142A== -----END CERTIFICATE-----Generated at Sat Sep 5 04:03:37 2026 by rpki-client