$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: hOwnkzAjwSmnwaLpeQRpYhF9/BfHVQOZ8A6npk0XhBQ= Subject key identifier: 95:62:3B:05:96:85:25:5C:CF:60:80:29:52:E6:10:B0:5C:EA:B8:E6 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0CF1 Signing time: Sun 04 Oct 2026 18:29:25 +0000 Manifest this update: Sun 04 Oct 2026 18:29:24 +0000 Manifest next update: Sun 11 Oct 2026 18:29:24 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: wW1cbZbww/xNE4pAZ0wASsc/22/VNwa5h3raQSC5ok0=) 2: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=) 3: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Oct 4 18:29:24 2026 GMT Not After : Oct 11 18:29:24 2026 GMT Subject: CN=6ac29b05-8e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:2f:47:7d:be:a0:56:f9:59:10:f7:58:bf: 9d:af:f5:ae:05:eb:71:8d:bd:0c:e0:a0:3d:85:bd: df:fb:22:f5:ee:6d:3a:cc:42:7b:41:44:cd:6d:7f: 6d:7d:c4:e7:ba:72:f7:a7:63:43:cf:58:cb:d2:99: 8b:6e:90:b1:49:35:42:a6:ca:fe:5f:98:e8:73:6d: 5c:4e:4c:01:0f:e6:4c:b1:6c:dc:bb:d5:f6:01:ac: 7c:f1:60:b6:b9:86:45:be:3e:b7:3c:35:10:f4:7c: fa:ae:49:f5:54:74:f4:a3:f1:b2:84:82:56:e1:4e: 80:b5:e9:85:93:99:33:01:65:41:0d:11:25:1e:13: c1:d9:d1:da:62:b9:3d:58:af:ec:61:62:30:0e:b7: f3:fe:90:12:48:2c:b4:33:f9:c7:65:7b:05:c0:13: 6f:72:b1:65:62:4f:80:05:ba:0f:65:23:ad:f8:43: a2:e6:61:e5:13:8f:21:b5:fb:36:6b:e0:7d:a2:c0: 3f:e0:95:39:a5:95:13:80:0b:3e:ae:3e:2c:00:a6: ea:f7:14:6b:7d:ef:12:60:5b:a1:3b:95:81:0d:e9: 64:45:61:58:9b:47:1f:41:fa:89:52:c3:e7:0c:74: af:12:4a:dd:20:be:e1:79:74:2b:b1:d3:a9:cc:da: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:3B:05:96:85:25:5C:CF:60:80:29:52:E6:10:B0:5C:EA:B8:E6 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:06:8e:2a:af:30:90:8c:02:00:af:d6:28:e1:65:43:2f:42: fa:d5:a9:3f:dc:da:8e:a0:2e:a2:45:08:81:1e:ba:c0:73:48: 60:01:9f:f4:c1:d8:c6:7b:35:4f:87:33:dd:d9:31:d2:f3:7d: ac:65:e3:b1:56:13:33:01:6e:ac:e4:a9:c0:c9:5c:a5:62:cc: 2a:85:2b:9b:b9:c3:8c:22:30:fa:53:13:b6:0f:6a:6d:48:ff: 13:b6:bb:8f:de:1a:57:7e:f2:ca:de:d1:d9:b6:90:47:e6:38: 74:85:6b:4c:bd:1e:65:b7:bf:c8:91:48:0d:0f:87:5c:6a:e5: c4:42:49:4d:75:8c:c7:eb:cc:36:1d:8a:23:5b:70:24:50:ab: 1b:a2:32:22:0f:89:24:2d:80:5a:3c:5b:ae:1f:c4:91:be:c4: 7b:9b:ab:2e:00:0a:cb:53:3f:c0:c9:c6:10:21:66:59:90:0a: c6:04:b4:7f:90:94:02:b8:c2:07:8d:83:bb:2b:db:84:bf:bb: 62:21:e0:a6:e0:45:c4:02:cb:94:8a:e4:70:c9:aa:20:48:a1: ac:5b:5d:78:1d:24:fe:2c:00:ee:f3:67:6f:07:da:41:39:f9: 7f:b8:fb:26:22:c1:6a:33:af:26:1a:c7:e3:a3:20:dd:98:96: f8:8b:07:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjYxMDA0MTgyOTI0WhcNMjYxMDExMTgyOTI0WjAYMRYwFAYD VQQDEw02YWMyOWIwNS04ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wEvR32+oFb5WRD3WL+dr/WuBetxjb0M4KA9hb3f+yL17m06zEJ7QUTNbX9t fcTnunL3p2NDz1jL0pmLbpCxSTVCpsr+X5joc21cTkwBD+ZMsWzcu9X2Aax88WC2 uYZFvj63PDUQ9Hz6rkn1VHT0o/GyhIJW4U6AtemFk5kzAWVBDRElHhPB2dHaYrk9 WK/sYWIwDrfz/pASSCy0M/nHZXsFwBNvcrFlYk+ABboPZSOt+EOi5mHlE48htfs2 a+B9osA/4JU5pZUTgAs+rj4sAKbq9xRrfe8SYFuhO5WBDelkRWFYm0cfQfqJUsPn DHSvEkrdIL7heXQrsdOpzNrbfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJViOwWW hSVcz2CAKVLmELBc6rjmMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPgaOKq8wkIwCAK/WKOFlQy9C+tWpP9zajqAuokUIgR66wHNIYAGf9MHYxns1 T4cz3dkx0vN9rGXjsVYTMwFurOSpwMlcpWLMKoUrm7nDjCIw+lMTtg9qbUj/E7a7 j94aV37yyt7R2baQR+Y4dIVrTL0eZbe/yJFIDQ+HXGrlxEJJTXWMx+vMNh2KI1tw JFCrG6IyIg+JJC2AWjxbrh/Ekb7Ee5urLgAKy1M/wMnGECFmWZAKxgS0f5CUArjC B42DuyvbhL+7YiHgpuBFxALLlIrkcMmqIEihrFtdeB0k/iwA7vNnbwfaQTn5f7j7 JiLBajOvJhrH46Mg3ZiW+IsHxg== -----END CERTIFICATE-----Generated at Mon Oct 5 18:58:30 2026 by rpki-client