$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: bRgMZtYfWZha7euj3x5Sg5AvrZU3ot9V3jlRkb+0vrw= Subject key identifier: FE:35:4C:87:1B:82:7A:D0:8D:78:FE:FB:83:34:11:FA:6B:58:25:B9 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0264 Signing time: Mon 05 Oct 2026 02:27:11 +0000 Manifest this update: Mon 05 Oct 2026 02:27:11 +0000 Manifest next update: Mon 12 Oct 2026 02:27:11 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: RIQL8xXEBHvHXyYrTodZNhAvZUQxOWkNDwr/xcYRQYY=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 3: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) 4: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Oct 5 02:27:11 2026 GMT Not After : Oct 12 02:27:11 2026 GMT Subject: CN=6ac30aff-83d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:89:da:f9:16:99:63:4e:8e:f2:2e:7e:35: a3:6d:0a:88:04:91:cd:32:1c:cb:27:f3:72:e3:13: 1e:10:83:eb:82:a9:79:ee:f7:96:19:ec:6e:69:ec: 4f:d2:c9:6c:12:f1:95:44:e5:37:74:f9:3f:ef:d1: 7e:b8:da:8c:45:71:d8:6e:b7:86:8f:77:9b:43:1c: e5:2f:5f:bb:ce:60:57:ea:2e:b5:28:2a:c8:d8:5e: 81:59:fe:bf:b0:0e:5d:fe:05:1e:74:5a:68:6f:aa: 82:70:cf:3a:cb:80:1f:92:61:dd:7b:5b:25:59:51: 41:f8:47:d8:3d:fd:44:4b:e1:d4:98:7c:c5:89:38: 6c:66:39:54:05:9a:8e:77:9a:a6:ee:0b:f4:3d:cb: ba:45:bf:44:25:ff:7d:fe:b9:4c:5b:4c:d6:5c:bc: 48:69:fa:c2:bd:01:e2:d0:c7:49:7d:0f:ae:cb:1f: a0:54:1e:5e:35:63:f1:7d:26:05:9b:dd:5e:e2:78: a0:10:00:12:5a:40:36:05:fb:ab:8f:d4:9c:a1:50: e1:34:eb:02:07:87:f7:72:b7:f0:e7:8d:00:80:8a: 9c:bf:f0:94:e0:ff:38:97:d1:e0:df:57:00:68:bf: 1b:19:1c:a0:de:dd:ef:d8:ac:15:95:c4:9b:f3:2c: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:35:4C:87:1B:82:7A:D0:8D:78:FE:FB:83:34:11:FA:6B:58:25:B9 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e2:fb:0a:2d:92:ff:67:26:83:e9:71:f4:c3:ca:59:ff:1a: 25:f4:00:fa:3c:4d:ae:07:c3:0a:90:04:b8:2f:d7:db:a7:ee: 54:6e:f2:36:ef:2d:cf:7f:9c:e6:9f:fb:a6:7c:45:d4:ad:58: e8:74:e1:55:cf:49:4a:9b:2b:33:70:4e:25:f8:b3:54:48:33: f4:d2:ba:a5:6a:91:54:4b:7b:f8:fc:f2:1c:30:1e:25:4d:bb: bc:c2:f4:17:cd:d7:dd:01:f2:b6:a5:3a:16:9a:2b:bd:69:d6: fc:00:66:39:06:92:ad:07:87:fb:35:05:1f:0d:76:1e:76:d6: 37:a2:ed:c9:39:83:66:07:18:08:f3:74:50:eb:df:9c:06:d6: 6e:f4:4d:0b:d8:37:7d:80:69:bd:42:ce:4c:28:59:54:f3:7c: d6:10:25:90:d3:db:e8:0c:47:72:38:c3:f7:b2:4b:6d:66:c4: 6b:42:10:d5:19:10:96:af:4e:b6:42:2b:07:bb:f0:0a:39:e0: c5:35:38:e7:14:90:93:b3:e6:10:16:57:68:ca:29:91:ed:3e: 54:ea:6f:3e:32:e3:d4:c1:8f:bd:a6:2d:2a:14:8b:34:32:4b: cc:8d:5c:0c:75:17:a2:79:c1:35:1f:a8:1a:12:43:6c:54:74: 81:96:7c:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYxMDA1MDIyNzExWhcNMjYxMDEyMDIyNzExWjAYMRYwFAYD VQQDEw02YWMzMGFmZi04M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqGJ2vkWmWNOjvIufjWjbQqIBJHNMhzLJ/Ny4xMeEIPrgql57veWGexuaexP 0slsEvGVROU3dPk/79F+uNqMRXHYbreGj3ebQxzlL1+7zmBX6i61KCrI2F6BWf6/ sA5d/gUedFpob6qCcM86y4AfkmHde1slWVFB+EfYPf1ES+HUmHzFiThsZjlUBZqO d5qm7gv0Pcu6Rb9EJf99/rlMW0zWXLxIafrCvQHi0MdJfQ+uyx+gVB5eNWPxfSYF m91e4nigEAASWkA2Bfurj9ScoVDhNOsCB4f3crfw540AgIqcv/CU4P84l9Hg31cA aL8bGRyg3t3v2KwVlcSb8yw+pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP41TIcb gnrQjXj++4M0EfprWCW5MB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIOL7Ci2S/2cmg+lx9MPKWf8aJfQA+jxNrgfDCpAEuC/X26fuVG7yNu8tz3+c 5p/7pnxF1K1Y6HThVc9JSpsrM3BOJfizVEgz9NK6pWqRVEt7+PzyHDAeJU27vML0 F83X3QHytqU6FporvWnW/ABmOQaSrQeH+zUFHw12HnbWN6LtyTmDZgcYCPN0UOvf nAbWbvRNC9g3fYBpvULOTChZVPN81hAlkNPb6AxHcjjD97JLbWbEa0IQ1RkQlq9O tkIrB7vwCjngxTU45xSQk7PmEBZXaMopke0+VOpvPjLj1MGPvaYtKhSLNDJLzI1c DHUXonnBNR+oGhJDbFR0gZZ82Q== -----END CERTIFICATE-----Generated at Tue Oct 6 20:34:12 2026 by rpki-client