$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft File: 0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json) Hash identifier: Z/2iDF7LS1ZPFckbKDKxEF+A6+O+pZhXeZaqxuipLoo= Subject key identifier: D3:C8:5E:5D:85:82:CC:A2:D2:57:4F:EF:6B:65:56:2A:CA:F6:CD:04 Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft Manifest number: 01C3 Signing time: Sun 25 Oct 2026 04:30:22 +0000 Manifest this update: Sun 25 Oct 2026 04:30:21 +0000 Manifest next update: Sun 01 Nov 2026 04:30:21 +0000 Files and hashes: 1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: Z02I+uIHS6tn91DV8Z4ASsj3WBXmyo065dZkBIb4LMw=) 2: 302768A6C8CE11F1AD968CFE6611F970.roa (hash: xjhdiBJYZ/QzBii4+RbevwzS+oPnfsx9fU9b+5NEeTA=) 3: C07DC8947E9311F185EA92095FA30FBC.roa (hash: qRg84y5kVRE7bRiBaS6MkjPVv43I0mEppMl+KIu+SBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Validity Not Before: Oct 25 04:30:21 2026 GMT Not After : Nov 1 04:30:21 2026 GMT Subject: CN=6add85de-e12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:54:ea:74:96:14:09:ee:d9:92:ff:35:2b: 9b:31:b3:3e:8a:57:6d:5d:7f:f0:75:8e:7a:18:17: 90:b3:95:b8:04:7f:be:b6:ae:b2:c2:1b:fa:1b:28: 2a:69:01:47:09:55:fd:d0:98:f2:df:66:d1:ee:55: 98:35:66:45:e2:da:88:36:18:0b:4e:72:7e:de:42: 31:7a:67:6e:9b:b1:9e:49:a9:0d:a1:5b:e1:33:11: 01:5d:58:72:1f:07:dd:56:25:a1:94:40:67:ba:ef: a4:4e:34:78:4f:dc:53:75:c5:b3:7d:fb:19:4b:0c: 6b:bb:cb:6e:e3:87:53:d1:18:0c:ec:13:d5:6b:72: 72:41:da:1a:31:48:ab:f9:9d:8d:a9:57:96:4a:24: fd:b5:8b:23:d2:f3:74:46:20:64:bd:cf:5e:52:1a: 8f:66:f1:11:14:0b:41:99:e0:da:f9:1d:82:b9:3c: 55:46:4f:85:18:6b:d2:26:77:42:bd:6d:1f:38:e9: 6a:11:dd:a4:25:a0:84:88:24:b7:ce:45:96:b4:f8: 00:f1:84:3f:11:30:29:e5:98:e6:79:4c:e8:81:f8: 9d:5d:d6:5e:c2:52:0e:18:e1:86:81:36:2c:c5:40: 6f:28:3f:8c:30:f7:ca:35:6c:f1:71:78:e8:e4:31: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:5E:5D:85:82:CC:A2:D2:57:4F:EF:6B:65:56:2A:CA:F6:CD:04 X509v3 Authority Key Identifier: keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0d:4c:88:4f:a8:ce:28:cb:65:25:35:07:d6:5f:fd:98:49: 1a:39:0a:20:b9:55:bf:1d:85:3c:1b:0a:16:92:59:46:f3:5d: 43:26:59:a6:6c:fa:1f:3e:a6:ef:6b:80:84:a7:37:0e:a4:a4: 09:0e:2a:54:b9:c0:f1:ed:69:57:eb:67:96:61:3c:ac:3b:d2: 89:17:89:21:bb:ca:de:21:38:8c:8f:1e:fa:42:b3:2a:07:2a: a4:7c:b1:86:9a:e9:2e:03:92:f1:82:16:94:2c:10:22:40:7b: cf:33:4e:97:35:3e:dc:c3:fd:6b:58:ed:07:67:8a:89:a0:71: b3:9d:55:7b:e0:87:e4:dc:ca:84:6b:ea:6f:ab:b3:3e:66:ba: cf:5a:22:46:c9:ae:fb:49:3d:f4:9e:f2:ba:31:a8:75:51:13: 9c:c0:17:c8:cb:47:a7:7a:a6:15:65:79:ea:0f:af:dc:f9:57: 3d:b8:61:3f:0e:fb:80:6a:44:70:2c:6b:d4:46:03:13:c5:2d: 7f:11:6b:c1:2b:66:95:74:6b:da:3c:55:5d:2b:78:6a:af:63: 93:ff:ca:a8:86:c4:0d:52:ba:25:75:2b:8c:f3:e6:bd:65:2b: 2d:33:bb:6e:33:04:e1:82:c2:7d:5a:78:d1:92:68:75:28:39: d5:15:2e:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4 NjlEMTc4OTcwHhcNMjYxMDI1MDQzMDIxWhcNMjYxMTAxMDQzMDIxWjAYMRYwFAYD VQQDEw02YWRkODVkZS1lMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIhU6nSWFAnu2ZL/NSubMbM+ildtXX/wdY56GBeQs5W4BH++tq6ywhv6Gygq aQFHCVX90Jjy32bR7lWYNWZF4tqINhgLTnJ+3kIxemdum7GeSakNoVvhMxEBXVhy HwfdViWhlEBnuu+kTjR4T9xTdcWzffsZSwxru8tu44dT0RgM7BPVa3JyQdoaMUir +Z2NqVeWSiT9tYsj0vN0RiBkvc9eUhqPZvERFAtBmeDa+R2CuTxVRk+FGGvSJndC vW0fOOlqEd2kJaCEiCS3zkWWtPgA8YQ/ETAp5ZjmeUzogfidXdZewlIOGOGGgTYs xUBvKD+MMPfKNWzxcXjo5DGXjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPIXl2F gsyi0ldP72tlVirK9s0EMB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0 OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS81MDRDRkZFMjQ0OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1 Z1h3Z0stYTNLQjZHblJlSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVw1MiE+ozijLZSU1B9Zf/ZhJGjkKILlVvx2FPBsKFpJZRvNdQyZZpmz6Hz6m 72uAhKc3DqSkCQ4qVLnA8e1pV+tnlmE8rDvSiReJIbvK3iE4jI8e+kKzKgcqpHyx hprpLgOS8YIWlCwQIkB7zzNOlzU+3MP9a1jtB2eKiaBxs51Ve+CH5NzKhGvqb6uz Pma6z1oiRsmu+0k99J7yujGodVETnMAXyMtHp3qmFWV56g+v3PlXPbhhPw77gGpE cCxr1EYDE8UtfxFrwStmlXRr2jxVXSt4aq9jk//KqIbEDVK6JXUrjPPmvWUrLTO7 bjME4YLCfVp40ZJodSg51RUuhQ== -----END CERTIFICATE-----Generated at Mon Oct 26 08:27:42 2026 by rpki-client