$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft File: yCFQSaXsETZftnQLghcGdiaArRc.mft (raw, json) Hash identifier: 3W8Sn1PXNraLfU0xtxXNor95Vi8+t4STluKkM+x0RE0= Subject key identifier: 8D:CC:6C:F0:C0:1C:4A:63:40:2A:C1:0D:B1:0B:C1:96:1D:22:ED:14 Authority key identifier: C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17 Certificate issuer: /CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft Manifest number: 01D1 Signing time: Sat 03 Oct 2026 04:20:01 +0000 Manifest this update: Sat 03 Oct 2026 04:20:01 +0000 Manifest next update: Sat 10 Oct 2026 04:20:01 +0000 Files and hashes: 1: yCFQSaXsETZftnQLghcGdiaArRc.crl (hash: NOfZ6vw3qc+t0SYoGJ5U+m6CkIo9QkxuYVe1sWOG+lc=) 2: 264C45FAFA3F11EE8A884F09C4F9AE02.roa (hash: 5wpit00HjrDdtoq3eiW6to5uWB0TX3js4LGWC8s6SMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC459, serialNumber=C8215049A5EC11365FB6740B821706762680AD17 Validity Not Before: Oct 3 04:20:01 2026 GMT Not After : Oct 10 04:20:01 2026 GMT Subject: CN=6ac08271-a1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:af:c5:11:1b:ce:32:9c:1e:36:b0:b8:68: 5e:78:53:59:89:a7:0f:80:c7:19:b9:4a:54:c9:01: 8b:83:e4:1a:77:65:78:52:5e:08:40:fb:e4:1b:fa: 82:0e:47:51:c6:15:f4:66:95:a6:48:a0:35:9f:df: 4e:e3:ba:d9:b5:76:06:5b:95:3d:49:39:a4:89:89: d7:76:e2:3e:8d:fe:82:90:75:f4:c3:43:80:8c:f2: ab:0a:b5:e5:f2:b4:89:2b:f3:47:60:07:ff:70:e2: 1d:67:7f:94:02:e6:70:94:63:15:1e:85:74:b7:7d: 7e:09:d4:14:e2:4e:b1:f0:dc:d1:d0:18:c7:5c:ba: 31:d4:26:78:77:c9:75:6e:66:57:81:6a:dc:53:e1: df:b3:4d:fb:35:6f:21:87:e8:29:9f:f0:a5:46:28: 11:fd:dc:3a:07:43:cb:83:9e:da:1a:0f:62:b8:91: 8d:94:28:77:ad:df:e4:52:2d:a7:71:81:ff:2b:f2: 45:71:be:e3:a8:4b:d6:ff:e5:bd:ff:e7:c0:51:20: 4d:41:c7:3d:df:4c:70:87:b6:d6:5f:02:11:e2:e0: 94:26:73:36:a6:18:f7:af:0f:9b:6f:87:17:66:70: cc:14:97:da:17:3c:44:62:f7:34:f8:e9:9c:14:64: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CC:6C:F0:C0:1C:4A:63:40:2A:C1:0D:B1:0B:C1:96:1D:22:ED:14 X509v3 Authority Key Identifier: keyid:C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:14:22:63:6e:7b:1a:3d:77:aa:5e:97:b8:a6:3d:23:7c:d9: 74:3e:d9:75:07:36:a7:62:0d:e9:85:a1:66:b0:fe:42:d4:08: 89:6e:a8:4f:7d:27:64:b8:94:53:c8:70:44:28:71:aa:ff:b6: 1a:8b:92:bd:66:47:df:1f:23:62:73:60:8c:93:e8:03:a0:97: e3:db:71:ca:0a:6c:d6:28:70:41:da:c0:05:f4:49:07:6e:de: 40:1a:af:78:27:51:60:91:ef:23:1b:22:ef:bb:ed:21:9c:38: ba:8b:2d:61:43:96:cb:c3:2e:cc:6d:94:94:50:77:b0:53:5f: 11:12:ae:eb:d4:78:09:10:24:c0:13:fa:36:87:d2:65:7d:de: 3e:03:b1:d3:f1:3a:77:df:7a:38:d0:e5:f7:16:74:32:68:d8: cb:29:46:3f:6b:e4:a2:e9:18:c2:71:04:44:69:9f:8c:f6:66: 9b:f5:37:34:99:3c:f0:51:a8:4f:ae:f7:12:1f:c3:6d:92:dd: 02:e1:29:c4:8b:69:2d:ff:41:d4:29:3b:98:7f:47:8c:d7:0d: dc:d5:7f:b1:6b:90:a7:5a:8b:a8:bf:4a:f7:1b:6a:bc:85:2a: c2:04:50:91:68:c4:a7:1f:28:a8:0f:90:45:02:90:45:b0:9e: 4e:a7:29:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NTkxMTAvBgNVBAUTKEM4MjE1MDQ5QTVFQzExMzY1RkI2NzQwQjgyMTcwNjc2 MjY4MEFEMTcwHhcNMjYxMDAzMDQyMDAxWhcNMjYxMDEwMDQyMDAxWjAYMRYwFAYD VQQDEw02YWMwODI3MS1hMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSSvxREbzjKcHjawuGheeFNZiacPgMcZuUpUyQGLg+Qad2V4Ul4IQPvkG/qC DkdRxhX0ZpWmSKA1n99O47rZtXYGW5U9STmkiYnXduI+jf6CkHX0w0OAjPKrCrXl 8rSJK/NHYAf/cOIdZ3+UAuZwlGMVHoV0t31+CdQU4k6x8NzR0BjHXLox1CZ4d8l1 bmZXgWrcU+Hfs037NW8hh+gpn/ClRigR/dw6B0PLg57aGg9iuJGNlCh3rd/kUi2n cYH/K/JFcb7jqEvW/+W9/+fAUSBNQcc930xwh7bWXwIR4uCUJnM2phj3rw+bb4cX ZnDMFJfaFzxEYvc0+OmcFGRfxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3MbPDA HEpjQCrBDbELwZYdIu0UMB8GA1UdIwQYMBaAFMghUEml7BE2X7Z0C4IXBnYmgK0X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ1OS9BOTM1MDdCQ0Y2 RDUxMUVFQjg3ODNDMUVDNEY5QUUwMi95Q0ZRU2FYc0VUWmZ0blFMZ2hjR2RpYUFy UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDRlFTYVhzRVRaZnRuUUxnaGNHZGlhQXJSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ1OS9BOTM1MDdCQ0Y2RDUxMUVFQjg3ODNDMUVDNEY5QUUwMi95Q0ZRU2FYc0VU WmZ0blFMZ2hjR2RpYUFyUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhhQiY257Gj13ql6XuKY9I3zZdD7ZdQc2p2IN6YWhZrD+QtQIiW6oT30nZLiU U8hwRChxqv+2GouSvWZH3x8jYnNgjJPoA6CX49txygps1ihwQdrABfRJB27eQBqv eCdRYJHvIxsi77vtIZw4uostYUOWy8MuzG2UlFB3sFNfERKu69R4CRAkwBP6NofS ZX3ePgOx0/E6d996ONDl9xZ0MmjYyylGP2vkoukYwnEERGmfjPZmm/U3NJk88FGo T673Eh/DbZLdAuEpxItpLf9B1Ck7mH9HjNcN3NV/sWuQp1qLqL9K9xtqvIUqwgRQ kWjEpx8oqA+QRQKQRbCeTqcpZg== -----END CERTIFICATE-----Generated at Sun Oct 4 18:28:22 2026 by rpki-client