$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json) Hash identifier: Ea21PmylUPIn75/eKi3PvL6cr+1c5BXglxocwqe0UU8= Subject key identifier: 96:3C:63:90:7F:DD:E6:44:03:D0:75:B0:19:42:1B:CE:CD:9F:46:07 Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft Manifest number: 52 Signing time: Tue 27 Oct 2026 08:35:46 +0000 Manifest this update: Tue 27 Oct 2026 08:35:46 +0000 Manifest next update: Tue 03 Nov 2026 08:35:46 +0000 Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: C3puteUTkX71PF3EqayuImhRSPvUiRfQIZDylztcw04=) 2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Validity Not Before: Oct 27 08:35:46 2026 GMT Not After : Nov 3 08:35:46 2026 GMT Subject: CN=6ae06262-90c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:98:c0:b3:01:bd:9a:6b:6f:0f:fe:f3:b3: 2d:5c:36:1a:1b:a3:8d:14:76:0c:15:d9:ca:b5:da: a1:22:a7:e6:f9:53:84:4e:17:7e:06:1a:8b:c1:67: 33:a7:eb:9b:95:55:04:51:3b:bc:0f:29:ae:87:35: 29:39:57:05:95:80:f0:54:ec:0b:89:30:6d:7a:13: f6:b0:3a:89:0a:8c:e9:6c:48:d3:25:20:4a:2e:8d: 7f:39:88:88:1e:f3:d3:90:24:53:60:3d:d8:8e:03: 30:ea:f6:7f:e2:2f:bf:58:44:52:3c:f8:79:79:cb: c9:cc:6d:14:ff:f8:41:96:0e:3e:68:95:9f:ba:9d: c2:4e:53:06:ff:cc:12:e9:17:bc:69:48:ab:5d:de: 63:78:d9:17:71:26:6a:fe:bd:56:f6:ec:22:b1:32: d8:94:91:f2:49:df:31:2f:33:52:76:8c:66:c8:f8: 87:4d:b3:75:c8:32:fc:a1:67:e4:ee:77:2f:b3:76: 74:5a:62:0f:8b:ee:88:03:1e:d9:36:16:9f:76:77: b9:59:5a:65:e5:cc:96:4c:bd:1c:e0:f3:8f:5a:23: 05:2b:16:90:54:c2:61:9c:10:ba:50:5b:fb:19:f1: bf:c3:c1:81:40:5c:4f:46:2f:f4:fc:d9:39:ce:2b: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3C:63:90:7F:DD:E6:44:03:D0:75:B0:19:42:1B:CE:CD:9F:46:07 X509v3 Authority Key Identifier: keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:27:8b:06:65:ec:98:4c:97:10:db:7b:73:dc:09:ef:03:0e: e0:85:5b:b0:60:b3:b2:af:34:a8:a9:21:f5:76:b5:b5:91:90: 87:4f:ce:ec:6c:2b:92:b4:e4:d4:a2:2c:f0:c5:25:85:8b:1a: 5e:31:65:33:67:fe:59:dc:de:b2:97:a9:fa:8a:d1:24:db:28: 83:87:54:57:ee:16:eb:18:c2:66:9c:e0:0a:55:b8:bb:8a:26: 22:ed:25:bd:91:3d:b5:21:cf:41:4d:26:d0:8c:87:89:41:0b: d0:c6:ff:13:97:a3:05:84:fe:26:07:02:a4:9e:35:f3:8c:34: 98:49:8e:2a:fc:cb:d7:eb:a2:39:b0:a7:22:b9:b6:7a:0d:d4: 81:c4:7e:f7:c6:93:16:5f:92:1f:cd:8f:26:47:a5:34:47:d7: 3a:d5:7c:b4:06:e3:36:77:89:57:ca:d7:a2:de:82:f8:80:db: b5:d6:4b:11:03:bd:a4:a6:bc:72:f1:bc:58:06:b0:b6:64:42: 0e:5b:87:02:d7:64:4f:27:2f:59:31:af:37:53:0d:44:3f:5e: e8:94:4a:f2:d8:2a:5d:0f:de:40:a6:2e:9a:8c:cc:66:f5:ce: a5:14:38:2c:f0:18:ce:90:5f:9e:32:74:d8:fc:93:49:fb:d1: 50:2e:a0:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG MkFEQzExMzAeFw0yNjEwMjcwODM1NDZaFw0yNjExMDMwODM1NDZaMBgxFjAUBgNV BAMTDTZhZTA2MjYyLTkwYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRL5jAswG9mmtvD/7zsy1cNhobo40UdgwV2cq12qEip+b5U4ROF34GGovBZzOn 65uVVQRRO7wPKa6HNSk5VwWVgPBU7AuJMG16E/awOokKjOlsSNMlIEoujX85iIge 89OQJFNgPdiOAzDq9n/iL79YRFI8+Hl5y8nMbRT/+EGWDj5olZ+6ncJOUwb/zBLp F7xpSKtd3mN42RdxJmr+vVb27CKxMtiUkfJJ3zEvM1J2jGbI+IdNs3XIMvyhZ+Tu dy+zdnRaYg+L7ogDHtk2Fp92d7lZWmXlzJZMvRzg849aIwUrFpBUwmGcELpQW/sZ 8b/DwYFAXE9GL/T82TnOK8JhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUljxjkH/d 5kQD0HWwGUIbzs2fRgcwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGJ4sGZeyYTJcQ23tz3AnvAw7ghVuwYLOyrzSoqSH1drW1kZCHT87sbCuStOTU oizwxSWFixpeMWUzZ/5Z3N6yl6n6itEk2yiDh1RX7hbrGMJmnOAKVbi7iiYi7SW9 kT21Ic9BTSbQjIeJQQvQxv8Tl6MFhP4mBwKknjXzjDSYSY4q/MvX66I5sKciubZ6 DdSBxH73xpMWX5IfzY8mR6U0R9c61Xy0BuM2d4lXytei3oL4gNu11ksRA72kprxy 8bxYBrC2ZEIOW4cC12RPJy9ZMa83Uw1EP17olEry2CpdD95Api6ajMxm9c6lFDgs 8BjOkF+eMnTY/JNJ+9FQLqDH -----END CERTIFICATE-----Generated at Tue Oct 27 20:35:56 2026 by rpki-client