$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: DPR3UQ7MBCeFkO1ZWWKCCWJ3iAz8RVXPSjCPdb3OU6U= Subject key identifier: 9B:A7:16:C1:56:EF:64:29:EF:F0:C0:CE:A2:9E:46:CE:83:6A:3B:F6 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 1298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 128C Signing time: Wed 04 Nov 2026 17:09:52 +0000 Manifest this update: Wed 04 Nov 2026 17:09:52 +0000 Manifest next update: Wed 11 Nov 2026 17:09:52 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: kebUW2mcFvqQligtRKOegPcKpnUxOnxtNqOok+gCHTM=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4760 (0x1298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Nov 4 17:09:52 2026 GMT Not After : Nov 11 17:09:52 2026 GMT Subject: CN=6aeb66e0-97e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:35:27:aa:f9:3c:50:fd:18:ec:54:06:17: f1:48:7f:55:22:6f:cc:c4:f2:9c:ca:a1:b7:aa:31: 6a:a6:b6:23:f4:98:a6:27:af:25:b4:1b:4a:cf:40: 91:ae:7b:f8:7f:77:ac:62:f6:f2:6d:e2:61:36:83: aa:3c:e2:fc:64:85:93:3c:a7:ee:4b:56:1f:db:c8: 72:d3:e8:d4:dd:15:78:ba:05:82:3b:b7:f3:cd:ac: f3:00:b9:18:fe:79:51:b0:d9:0c:45:77:25:28:9c: d5:45:d1:66:d3:3b:75:d8:34:8a:ea:1b:a9:3e:5b: 42:66:84:d3:50:b6:94:a1:c3:f5:1e:15:ac:9b:2f: f1:7e:0d:88:73:8c:70:59:47:84:2c:45:f9:9d:3e: 01:17:18:98:77:dd:b1:23:07:1c:f6:85:06:92:6c: 1d:92:ef:fa:74:20:8a:f4:f2:12:fa:27:f3:90:b9: 59:0f:84:2f:32:6e:c9:b3:ba:c9:80:6a:3f:84:a5: 5a:f4:f1:21:3a:78:f4:0f:6a:9c:dc:06:ef:a1:93: ab:98:e6:37:2f:68:07:d9:04:48:19:bc:67:d3:63: 8d:2e:7b:81:9b:d6:bb:75:79:9b:46:4c:9b:07:91: fd:17:92:6b:31:1b:f3:a7:2c:f5:86:98:da:41:52: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A7:16:C1:56:EF:64:29:EF:F0:C0:CE:A2:9E:46:CE:83:6A:3B:F6 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:db:f3:e2:19:90:12:06:38:a6:8d:f5:f2:a7:15:00:bb:08: e1:a7:b7:5c:db:33:57:4a:7c:45:7a:d0:99:5c:c6:d9:41:5a: fd:48:86:cd:a1:99:7c:f5:dc:df:bf:78:be:a9:e8:fe:56:f9: 27:ec:a5:89:9b:ed:d7:bc:fd:86:03:56:d5:ab:84:d1:aa:80: a4:12:b2:00:29:70:72:df:fc:ad:83:3a:94:81:96:41:a9:b6: 81:55:ba:58:c4:b4:c0:76:69:11:e7:8b:c6:5d:2e:d5:bc:20: 9a:0b:23:e1:4f:45:43:13:63:14:d3:a9:78:4b:46:94:ef:a6: 52:7b:af:b7:c6:34:e6:de:7d:6d:2b:0a:de:2c:06:58:9c:ee: 9f:a8:37:10:33:01:db:56:9e:82:eb:f8:2b:f4:3f:e6:e3:17: fa:07:87:83:91:a9:f7:15:9c:60:00:d4:48:16:1d:6c:a5:d9: 10:eb:1c:5f:b5:23:53:18:5d:76:66:63:70:8a:9e:45:bb:5f: 28:b3:41:98:d4:4c:e9:56:a3:e9:9d:80:3e:f7:6c:b0:ed:71: 9e:44:f8:d7:78:89:60:4d:76:50:4d:27:d1:22:0f:45:d3:0b: c6:54:4b:1a:58:bc:73:35:69:1d:79:d0:b3:f4:29:5d:b5:27: d1:5e:56:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjYxMTA0MTcwOTUyWhcNMjYxMTExMTcwOTUyWjAYMRYwFAYD VQQDEw02YWViNjZlMC05N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEI1J6r5PFD9GOxUBhfxSH9VIm/MxPKcyqG3qjFqprYj9JimJ68ltBtKz0CR rnv4f3esYvbybeJhNoOqPOL8ZIWTPKfuS1Yf28hy0+jU3RV4ugWCO7fzzazzALkY /nlRsNkMRXclKJzVRdFm0zt12DSK6hupPltCZoTTULaUocP1HhWsmy/xfg2Ic4xw WUeELEX5nT4BFxiYd92xIwcc9oUGkmwdku/6dCCK9PIS+ifzkLlZD4QvMm7Js7rJ gGo/hKVa9PEhOnj0D2qc3AbvoZOrmOY3L2gH2QRIGbxn02ONLnuBm9a7dXmbRkyb B5H9F5JrMRvzpyz1hpjaQVJIlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJunFsFW 72Qp7/DAzqKeRs6Dajv2MB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY9vz4hmQEgY4po318qcVALsI4ae3XNszV0p8RXrQmVzG2UFa/UiGzaGZfPXc 3794vqno/lb5J+yliZvt17z9hgNW1auE0aqApBKyAClwct/8rYM6lIGWQam2gVW6 WMS0wHZpEeeLxl0u1bwgmgsj4U9FQxNjFNOpeEtGlO+mUnuvt8Y05t59bSsK3iwG WJzun6g3EDMB21aeguv4K/Q/5uMX+geHg5Gp9xWcYADUSBYdbKXZEOscX7UjUxhd dmZjcIqeRbtfKLNBmNRM6Vaj6Z2APvdssO1xnkT413iJYE12UE0n0SIPRdMLxlRL Gli8czVpHXnQs/QpXbUn0V5W8g== -----END CERTIFICATE-----Generated at Thu Nov 5 01:44:05 2026 by rpki-client