$ rpki-client -vvvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft File: YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json) Hash identifier: p0yvg9vb6lj5f8ehH+i75Z1FDkzl/LX8i356m7bRyqA= Subject key identifier: 32:4D:27:D3:35:97:61:B7:70:B0:BE:1E:6F:54:34:76:71:84:95:9A Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7 Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft Manifest number: CA Signing time: Sat 03 Oct 2026 07:26:08 +0000 Manifest this update: Sat 03 Oct 2026 07:26:07 +0000 Manifest next update: Sat 10 Oct 2026 07:26:07 +0000 Files and hashes: 1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: 7pRHrskdSxG2imbQlLQTzAGnS8cW2MRIjZpq351yx2o=) 2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7 Validity Not Before: Oct 3 07:26:07 2026 GMT Not After : Oct 10 07:26:07 2026 GMT Subject: CN=6ac0ae10-e9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:17:46:24:00:1b:24:53:a8:73:f8:a6:20: 7c:5e:6f:0f:7b:34:a0:ae:82:cf:c6:10:4f:11:f3: ef:7c:5f:4f:86:b2:55:12:7b:0e:38:cd:48:ec:3b: e5:d8:6e:8f:56:e0:28:86:30:9d:dd:12:60:3d:e6: c6:9a:1f:59:31:c8:ad:46:74:a5:f1:eb:1f:9a:10: 98:27:9e:03:18:0a:51:1d:af:01:cc:ec:3f:da:5c: fa:f0:4d:f0:69:54:2c:d0:3a:38:48:8c:b6:12:75: 94:82:4b:5a:e9:ab:3e:36:be:a0:ff:33:c2:c6:e6: 00:bf:63:a1:85:ad:ee:2e:8c:53:fb:ea:f9:df:95: 80:77:c4:a0:09:8c:7d:29:be:cb:46:f5:39:04:93: 10:96:3d:5e:9a:20:a9:36:3c:39:6f:19:c7:c5:42: a0:a2:b0:bc:0e:cf:34:b2:bc:1b:ae:98:c8:36:07: 21:de:f2:04:7f:4a:c5:49:d3:f4:5f:e8:26:00:3f: 6f:21:6b:bb:10:7f:15:db:e9:3f:fa:9d:f4:7e:9f: cd:58:51:49:7f:eb:11:62:51:37:44:85:87:b1:69: 05:c2:f5:58:9b:1e:30:cd:32:f5:c4:ba:fb:6d:90: 06:fd:ec:87:16:0c:bf:0e:c5:48:20:74:c5:25:42: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:27:D3:35:97:61:B7:70:B0:BE:1E:6F:54:34:76:71:84:95:9A X509v3 Authority Key Identifier: keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a7:2a:69:84:8e:7c:40:1d:e6:f3:cf:3f:4f:3c:50:15:bf: b5:5c:09:6d:eb:55:bf:f1:e2:6c:23:a1:de:e3:9b:f1:15:3d: 50:c4:d6:8a:24:f8:77:d4:43:17:4c:89:8a:1a:e3:13:70:23: 1b:7a:1b:28:40:8f:ac:bf:ac:2b:8c:84:e4:79:34:97:8c:16: c7:38:de:06:f5:b1:9a:78:69:60:6f:f7:22:25:1a:b1:11:4c: 3b:8e:c2:c0:82:b0:21:95:d7:b2:70:59:4b:54:4c:25:fd:f8: e4:54:4e:2f:a6:27:e4:b4:8e:aa:65:17:4d:0f:c0:77:3a:9e: 4f:be:49:6f:86:42:af:ef:1a:57:aa:b9:b8:39:ca:ae:cc:db: 8d:c7:b7:72:da:6f:bc:2e:a8:20:c5:77:78:d1:43:dc:a2:ed: f0:d6:a8:f6:a9:f2:2d:f1:e0:07:ad:7b:76:58:1f:3c:45:69: e5:91:6e:83:6a:e0:a2:95:82:fc:01:88:2e:bc:5d:34:0e:b7: 4f:8d:48:6b:4b:bd:d1:63:45:1d:d9:8c:41:96:c9:33:79:e7: 58:59:bf:44:45:f7:c7:a6:85:8c:10:f8:e2:d0:3d:a4:f1:a7: 56:f5:8d:22:be:31:3f:ad:b8:45:b4:85:dc:c6:a6:14:c4:4a: f7:7a:71:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzRkYxMTAvBgNVBAUTKDYwNkI0RjQyRUU5N0Y3NDg4RUMyMEI2M0Q4QjFBQUY2 RDQyRDlDQTcwHhcNMjYxMDAzMDcyNjA3WhcNMjYxMDEwMDcyNjA3WjAYMRYwFAYD VQQDEw02YWMwYWUxMC1lOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKAXRiQAGyRTqHP4piB8Xm8PezSgroLPxhBPEfPvfF9PhrJVEnsOOM1I7Dvl 2G6PVuAohjCd3RJgPebGmh9ZMcitRnSl8esfmhCYJ54DGApRHa8BzOw/2lz68E3w aVQs0Do4SIy2EnWUgkta6as+Nr6g/zPCxuYAv2Ohha3uLoxT++r535WAd8SgCYx9 Kb7LRvU5BJMQlj1emiCpNjw5bxnHxUKgorC8Ds80srwbrpjINgch3vIEf0rFSdP0 X+gmAD9vIWu7EH8V2+k/+p30fp/NWFFJf+sRYlE3RIWHsWkFwvVYmx4wzTL1xLr7 bZAG/eyHFgy/DsVIIHTFJUJl6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJNJ9M1 l2G3cLC+Hm9UNHZxhJWaMB8GA1UdIwQYMBaAFGBrT0Lul/dIjsILY9ixqvbULZyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNGRi8yMDBDMzc3QTg3 Q0IxMUYwODAyQjIyN0RDNEY5QUUwMi9ZR3RQUXU2WDkwaU93Z3RqMkxHcTl0UXRu S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHdFBRdTZYOTBpT3dndGoyTEdxOXRRdG5LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjNGRi8yMDBDMzc3QTg3Q0IxMUYwODAyQjIyN0RDNEY5QUUwMi9ZR3RQUXU2WDkw aU93Z3RqMkxHcTl0UXRuS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvacqaYSOfEAd5vPPP088UBW/tVwJbetVv/HibCOh3uOb8RU9UMTWiiT4d9RD F0yJihrjE3AjG3obKECPrL+sK4yE5Hk0l4wWxzjeBvWxmnhpYG/3IiUasRFMO47C wIKwIZXXsnBZS1RMJf345FROL6Yn5LSOqmUXTQ/AdzqeT75Jb4ZCr+8aV6q5uDnK rszbjce3ctpvvC6oIMV3eNFD3KLt8Nao9qnyLfHgB617dlgfPEVp5ZFug2rgopWC /AGILrxdNA63T41Ia0u90WNFHdmMQZbJM3nnWFm/REX3x6aFjBD44tA9pPGnVvWN Ir4xP624RbSF3MamFMRK93pxbQ== -----END CERTIFICATE-----Generated at Sun Oct 4 21:26:16 2026 by rpki-client