$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: 5v/w0pazPThLk7lqouuV/HrRnUaEawUmKba07rP7UEU= Subject key identifier: 4B:A6:12:1D:95:72:0B:7D:6D:BE:3C:E0:6E:58:5B:7F:08:38:C3:2A Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 35DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 35B6 Signing time: Mon 26 Oct 2026 15:01:01 +0000 Manifest this update: Mon 26 Oct 2026 15:01:00 +0000 Manifest next update: Mon 02 Nov 2026 15:01:00 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: LjBBZbTYc7+eiHvm604EhsNKToOoRwRUcBmtiAufhg0=) 2: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: 5+kHlPMY1vlmnCm2khEV4Cm9ZkyzeUnR4wfzGT1Bqgo=) 3: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: AqP5pcAaJH32TYuGX0fOzFQdp/XSO4T3mcIC6gFmJ5s=) 4: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: 24VUnNW+IwALD6fth9CM1bbdRgcY8qK4/vGIkj8WWe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13791 (0x35df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Oct 26 15:01:00 2026 GMT Not After : Nov 2 15:01:00 2026 GMT Subject: CN=6adf6b2d-66aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:a6:a6:25:87:4f:a7:3e:3c:ac:ed:ef:c0: e3:31:de:d8:20:24:45:c0:26:3d:7f:e9:6a:67:b0: 09:56:71:96:28:78:53:b5:cc:8f:87:a0:2f:0d:18: 3e:7b:d5:df:01:16:e4:f0:a9:84:f2:a6:82:50:3b: c7:8f:7c:7d:c3:0c:38:7f:d2:e9:a4:12:b0:f0:12: 7f:5b:3f:a4:1e:7c:74:85:df:08:4e:91:93:e4:03: 41:95:f5:23:b8:f5:e3:6b:a6:75:33:08:42:45:ef: 44:d0:48:b3:ba:a0:3a:56:95:a6:5b:4b:be:5b:20: 3e:63:a6:60:67:21:13:85:2e:06:91:bb:4c:f3:bd: f7:47:8d:81:c2:96:32:a6:19:7c:ab:2e:88:75:9a: 77:a4:a5:12:3b:9f:71:f8:91:f4:0d:1d:8c:67:9f: e4:68:bd:ba:0b:8e:ec:41:3d:72:8b:75:c2:32:ea: fe:75:82:3e:fd:56:3b:56:53:6e:32:3e:67:4b:c8: f3:d3:ac:bc:e5:cc:9b:5e:7a:7c:7d:57:49:4b:e8: 7c:3d:10:83:f5:71:a3:99:34:02:70:07:21:09:27: 53:5a:10:b7:d1:a0:9a:82:4b:6b:1c:73:9b:43:79: f3:a1:4b:00:5e:c4:55:a1:4a:4d:4a:11:e3:7f:34: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:12:1D:95:72:0B:7D:6D:BE:3C:E0:6E:58:5B:7F:08:38:C3:2A X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:34:0f:62:80:b6:a5:cd:a8:f5:8d:6e:21:95:84:fe:58:19: d6:ee:6c:2c:ce:e1:29:31:41:75:64:3d:22:50:a2:bf:57:2e: 26:5c:d9:fa:3c:22:3c:41:de:f8:14:0e:3f:56:f1:d7:e1:5b: 8a:f5:6a:35:0b:31:e3:6c:5c:64:68:c3:06:8d:cc:40:c7:29: 1b:41:7f:1d:84:ff:73:df:6c:e3:fd:52:6e:24:53:ca:73:9c: 4c:18:29:11:fc:a4:14:7e:1b:9f:71:24:af:64:cf:84:ed:00: 20:5d:58:42:51:ae:4e:7f:f5:5b:ba:bd:78:87:45:2b:0d:39: 79:ef:e2:47:a9:83:b9:19:be:dc:b7:19:68:e8:6a:c7:18:11: e6:19:cf:aa:52:11:61:eb:82:fa:d5:01:ae:8a:43:8a:f2:04: cc:61:e6:ce:54:f1:0d:d5:b6:7f:5e:a5:a8:14:ae:03:ab:2c: 6f:c7:cc:9e:70:87:62:1e:9f:d7:cb:0f:55:93:29:39:17:6d: bc:93:41:83:fa:de:da:15:e7:30:7a:6d:61:fa:71:81:29:27: 98:64:ff:26:ce:fb:53:58:63:5e:34:2c:48:d7:82:29:7d:09: 96:90:f2:6e:88:ff:54:cc:82:5b:b7:91:37:e7:f3:73:6b:4a: 9d:a7:34:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYxMDI2MTUwMTAwWhcNMjYxMTAyMTUwMTAwWjAYMRYwFAYD VQQDEw02YWRmNmIyZC02NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql2mpiWHT6c+PKzt78DjMd7YICRFwCY9f+lqZ7AJVnGWKHhTtcyPh6AvDRg+ e9XfARbk8KmE8qaCUDvHj3x9www4f9LppBKw8BJ/Wz+kHnx0hd8ITpGT5ANBlfUj uPXja6Z1MwhCRe9E0EizuqA6VpWmW0u+WyA+Y6ZgZyEThS4GkbtM8733R42BwpYy phl8qy6IdZp3pKUSO59x+JH0DR2MZ5/kaL26C47sQT1yi3XCMur+dYI+/VY7VlNu Mj5nS8jz06y85cybXnp8fVdJS+h8PRCD9XGjmTQCcAchCSdTWhC30aCagktrHHOb Q3nzoUsAXsRVoUpNShHjfzT4QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEumEh2V cgt9bb484G5YW38IOMMqMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABDQPYoC2pc2o9Y1uIZWE/lgZ1u5sLM7hKTFBdWQ9IlCiv1cuJlzZ+jwiPEHe +BQOP1bx1+FbivVqNQsx42xcZGjDBo3MQMcpG0F/HYT/c99s4/1SbiRTynOcTBgp EfykFH4bn3Ekr2TPhO0AIF1YQlGuTn/1W7q9eIdFKw05ee/iR6mDuRm+3LcZaOhq xxgR5hnPqlIRYeuC+tUBropDivIEzGHmzlTxDdW2f16lqBSuA6ssb8fMnnCHYh6f 18sPVZMpORdtvJNBg/re2hXnMHptYfpxgSknmGT/Js77U1hjXjQsSNeCKX0JlpDy boj/VMyCW7eRN+fzc2tKnac0OA== -----END CERTIFICATE-----Generated at Wed Oct 28 14:49:44 2026 by rpki-client