$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: nL0tmYas92YefbKlYf5t367RphBMd+YX4x3I/ieFAS0= Subject key identifier: A4:C5:AD:EC:47:21:EC:EE:EC:52:56:E7:41:D3:5A:D8:76:4B:D5:91 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A5D Signing time: Mon 26 Oct 2026 19:39:34 +0000 Manifest this update: Mon 26 Oct 2026 19:39:33 +0000 Manifest next update: Mon 02 Nov 2026 19:39:33 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: u5tJ59aEjBBOJDKrWUmqVhTeRMZx2Cu7kO2a4FZnIA0=) 2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=) 3: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=) 4: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2683 (0xa7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Oct 26 19:39:33 2026 GMT Not After : Nov 2 19:39:33 2026 GMT Subject: CN=6adfac75-65c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:68:be:c8:50:7f:00:d2:13:14:75:47:53: 2b:4e:0e:ae:e2:a0:37:c1:06:53:ef:90:32:08:4e: ad:c5:30:fc:ea:73:cc:d2:bf:40:12:27:b2:0e:ac: ad:cf:33:a3:75:7b:01:8a:35:29:d6:62:d5:1c:d4: 80:8f:73:a6:b2:6a:f1:d2:a0:bf:29:e1:15:e2:f2: 81:24:4c:53:48:2d:33:a1:e6:9f:a6:f5:db:2d:6e: b5:a8:e9:db:74:fb:8f:ac:f2:9c:cd:4b:7c:8a:83: 0e:78:7f:50:28:d9:44:77:f7:cf:36:26:2e:ae:56: 8c:73:f8:6f:42:b7:64:58:45:49:27:2c:24:0f:4a: 4e:02:24:48:6e:8c:2a:01:0b:b1:ed:7b:8d:75:03: 73:62:27:e4:e7:7a:ff:31:df:44:40:f5:91:cd:a0: 9a:86:a3:9b:10:14:05:5c:f6:d8:c8:a6:43:f7:a6: f4:85:62:e6:bd:5a:a2:ff:7a:d5:35:61:79:8e:33: 1f:6d:55:52:ca:9d:62:bc:1c:c8:e9:5f:64:64:b9: 41:b8:b5:a1:6b:f6:cf:bf:17:fc:76:e7:56:08:5c: 7d:86:8f:a6:97:fe:3b:d6:24:bd:32:05:0b:6e:4c: 0d:60:5e:8c:ca:fe:74:ab:bd:fb:99:60:1c:ea:4a: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:AD:EC:47:21:EC:EE:EC:52:56:E7:41:D3:5A:D8:76:4B:D5:91 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ab:ac:7b:a1:af:d7:b5:b6:c7:99:09:89:1b:4d:cf:47:0b: 83:aa:7b:7f:c4:b9:34:3a:7b:6e:1d:bb:64:dd:d9:df:58:d8: d2:5d:a2:ec:fa:46:b3:49:43:31:30:d0:6c:cd:85:13:40:aa: 23:07:57:89:6f:b1:df:13:a1:39:1f:01:33:a5:fc:28:2f:d4: a5:fe:e5:5c:14:17:cd:6d:c2:79:26:11:d6:91:2f:3e:53:4e: 82:5d:38:00:98:84:6f:61:2b:71:7f:fc:34:28:1d:7d:36:5d: 47:5a:d1:6e:48:2a:99:24:db:6d:77:d6:bb:8d:81:6d:d2:9a: f7:f0:29:c6:2e:b4:08:52:86:02:7f:2d:5e:85:89:4b:86:ce: 5d:4e:92:45:b6:6e:cc:84:2d:ef:b8:f6:0f:84:a6:78:30:5b: e9:bc:51:98:c4:9e:fa:77:6c:0c:81:77:78:65:68:05:c6:69: cf:ed:fd:43:1d:61:11:61:b9:81:e2:27:d9:19:ce:3f:10:f2: d9:37:f7:18:de:3c:b2:9d:92:96:cd:14:16:4b:16:4e:9a:07: ca:1a:03:64:8d:fe:3a:71:c2:4a:ad:d8:15:4e:d2:ff:e4:99: 00:80:cd:da:c1:13:29:a5:3e:aa:a1:bb:02:59:6b:9d:20:8a: 57:99:18:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYxMDI2MTkzOTMzWhcNMjYxMTAyMTkzOTMzWjAYMRYwFAYD VQQDEw02YWRmYWM3NS02NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4JovshQfwDSExR1R1MrTg6u4qA3wQZT75AyCE6txTD86nPM0r9AEieyDqyt zzOjdXsBijUp1mLVHNSAj3Omsmrx0qC/KeEV4vKBJExTSC0zoeafpvXbLW61qOnb dPuPrPKczUt8ioMOeH9QKNlEd/fPNiYurlaMc/hvQrdkWEVJJywkD0pOAiRIbowq AQux7XuNdQNzYifk53r/Md9EQPWRzaCahqObEBQFXPbYyKZD96b0hWLmvVqi/3rV NWF5jjMfbVVSyp1ivBzI6V9kZLlBuLWha/bPvxf8dudWCFx9ho+ml/471iS9MgUL bkwNYF6Myv50q737mWAc6kr4wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTFrexH Iezu7FJW50HTWth2S9WRMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAquse6Gv17W2x5kJiRtNz0cLg6p7f8S5NDp7bh27ZN3Z31jY0l2i7PpGs0lD MTDQbM2FE0CqIwdXiW+x3xOhOR8BM6X8KC/Upf7lXBQXzW3CeSYR1pEvPlNOgl04 AJiEb2ErcX/8NCgdfTZdR1rRbkgqmSTbbXfWu42BbdKa9/Apxi60CFKGAn8tXoWJ S4bOXU6SRbZuzIQt77j2D4SmeDBb6bxRmMSe+ndsDIF3eGVoBcZpz+39Qx1hEWG5 geIn2RnOPxDy2Tf3GN48sp2Sls0UFksWTpoHyhoDZI3+OnHCSq3YFU7S/+SZAIDN 2sETKaU+qqG7AllrnSCKV5kYkw== -----END CERTIFICATE-----Generated at Wed Oct 28 14:16:25 2026 by rpki-client