$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft File: YwwCddFRnD7kuqftn9t0UvPhDEs.mft (raw, json) Hash identifier: SweopQ0F0xaaQ5c9B5ukAYyNe75E6RGFwJwyHsRBN20= Subject key identifier: 79:2E:EB:F2:46:27:20:16:B3:9C:1C:4F:36:E7:CA:1B:E0:E2:C5:75 Authority key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B Certificate issuer: /CN=A91F69AC/serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft Manifest number: 33 Signing time: Fri 23 Oct 2026 09:12:59 +0000 Manifest this update: Fri 23 Oct 2026 09:12:58 +0000 Manifest next update: Fri 30 Oct 2026 09:12:58 +0000 Files and hashes: 1: YwwCddFRnD7kuqftn9t0UvPhDEs.crl (hash: Br64jexBV3vvOM6uplv3YV+er6GyZJgfi0D5jVzveNQ=) 2: 32701246850511F19B0544DB68A30FBC.roa (hash: lRJz8Jm02V4m/7gp5At9XI7RM1aeGiqZoYJHPf5CB2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B Validity Not Before: Oct 23 09:12:58 2026 GMT Not After : Oct 30 09:12:58 2026 GMT Subject: CN=6adb251a-fa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:47:13:78:cf:37:1d:85:76:5c:63:fa:f4: 37:28:f5:1d:eb:26:a7:56:8a:a5:77:4e:d2:c4:ed: 04:f1:cd:2c:fc:79:fa:b5:42:d7:de:4b:dd:0e:12: 95:3a:08:d8:25:b9:a4:36:7c:72:ff:b2:18:ee:68: ed:31:4b:0e:90:c2:54:c8:4b:be:ea:1b:1b:14:3f: 8d:03:14:57:ad:26:2e:3a:a7:c7:eb:c2:cc:da:69: 8e:27:74:ac:fb:37:4b:a8:9d:ae:53:c4:96:75:83: 59:9c:2f:54:bc:b1:96:fa:fb:8a:78:41:07:80:02: 21:2f:74:d9:e9:cc:a5:10:30:39:08:01:c4:e3:e3: d4:cb:00:db:6b:c6:58:93:b2:35:d5:5e:b4:18:23: 77:4a:49:03:2f:39:50:44:56:51:bb:67:c6:8c:e3: 25:24:be:b6:a5:27:99:90:e0:74:55:2e:bd:b9:37: d6:7a:37:8d:fb:99:e3:b0:85:2b:64:1b:ff:37:35: f4:b1:8c:db:97:22:0b:f3:ca:01:ea:85:6a:d7:79: de:dd:b1:bd:b2:06:b8:e9:3d:4e:49:5d:1d:bd:49: c4:73:89:fb:ee:48:ae:17:43:61:c2:6f:1b:31:72: d1:7d:3e:08:bd:15:68:87:a4:e6:a0:1c:07:d8:04: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2E:EB:F2:46:27:20:16:B3:9C:1C:4F:36:E7:CA:1B:E0:E2:C5:75 X509v3 Authority Key Identifier: keyid:63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:99:27:8c:a6:71:d0:a5:bb:19:53:2d:df:c8:0c:34:32:4f: d0:45:76:ae:89:4e:65:78:14:15:36:5d:ea:f1:07:94:8e:af: 42:64:2f:b1:e0:b6:57:dd:76:82:d6:6e:a0:0f:ab:f8:7b:1b: d5:c7:41:28:cc:0c:67:d7:40:47:09:ec:00:29:55:68:d7:2a: fb:3d:47:67:32:5c:a5:6f:19:c9:01:36:8f:3a:e1:0b:bc:cf: e4:67:05:fb:9e:79:d1:93:78:c8:6d:88:3c:09:c3:f0:0a:1a: c5:ea:3a:44:a4:bf:5c:ce:a2:58:52:b3:fa:e4:ea:5e:57:ca: 8c:23:40:bd:b3:11:37:fa:2d:5b:43:31:7d:2f:1f:bb:df:79: fc:d8:78:70:62:a9:60:7d:3f:dc:d2:55:4b:80:38:94:21:0b: 3e:09:57:e0:79:af:15:ce:17:a0:9d:1f:fe:da:ca:54:45:36: 84:26:cf:85:ac:d6:2b:e4:9a:3a:d9:94:18:d7:73:e8:e8:71: 7e:9d:9c:db:78:03:ce:8a:30:22:8c:24:7f:83:59:83:ef:ff: ec:89:4a:01:de:aa:73:56:98:ac:3b:38:99:30:8f:da:e2:64: 4c:3d:8e:66:22:31:cc:12:9a:c7:1b:89:a2:7d:c7:05:82:09: e9:fa:17:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NjlBQzExMC8GA1UEBRMoNjMwQzAyNzVEMTUxOUMzRUU0QkFBN0VEOUZEQjc0NTJG M0UxMEM0QjAeFw0yNjEwMjMwOTEyNThaFw0yNjEwMzAwOTEyNThaMBgxFjAUBgNV BAMTDTZhZGIyNTFhLWZhN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCP6UcTeM83HYV2XGP69Dco9R3rJqdWiqV3TtLE7QTxzSz8efq1QtfeS90OEpU6 CNgluaQ2fHL/shjuaO0xSw6QwlTIS77qGxsUP40DFFetJi46p8frwszaaY4ndKz7 N0uona5TxJZ1g1mcL1S8sZb6+4p4QQeAAiEvdNnpzKUQMDkIAcTj49TLANtrxliT sjXVXrQYI3dKSQMvOVBEVlG7Z8aM4yUkvralJ5mQ4HRVLr25N9Z6N437meOwhStk G/83NfSxjNuXIgvzygHqhWrXed7dsb2yBrjpPU5JXR29ScRzifvuSK4XQ2HCbxsx ctF9Pgi9FWiHpOagHAfYBF9HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeS7r8kYn IBaznBxPNufKG+DixXUwHwYDVR0jBBgwFoAUYwwCddFRnD7kuqftn9t0UvPhDEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2OUFDL0ZEMEQzQzEwODQ4 MTExRjE4RDlFRDhFNjdGQTMwRkJDL1l3d0NkZEZSbkQ3a3VxZnRuOXQwVXZQaERF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWXd3Q2RkRlJuRDdrdXFmdG45dDBVdlBoREVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 OUFDL0ZEMEQzQzEwODQ4MTExRjE4RDlFRDhFNjdGQTMwRkJDL1l3d0NkZEZSbkQ3 a3VxZnRuOXQwVXZQaERFcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkmSeMpnHQpbsZUy3fyAw0Mk/QRXauiU5leBQVNl3q8QeUjq9CZC+x4LZX3XaC 1m6gD6v4exvVx0EozAxn10BHCewAKVVo1yr7PUdnMlylbxnJATaPOuELvM/kZwX7 nnnRk3jIbYg8CcPwChrF6jpEpL9czqJYUrP65OpeV8qMI0C9sxE3+i1bQzF9Lx+7 33n82HhwYqlgfT/c0lVLgDiUIQs+CVfgea8VzhegnR/+2spURTaEJs+FrNYr5Jo6 2ZQY13Po6HF+nZzbeAPOijAijCR/g1mD7//siUoB3qpzVpisOziZMI/a4mRMPY5m IjHMEprHG4mifccFggnp+hfX -----END CERTIFICATE-----Generated at Sat Oct 24 10:23:58 2026 by rpki-client