$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: PizM8MuH3XOHW6xBUkJ0lCYNsGeZetmAgBAtP38L9Rg= Subject key identifier: 5F:3F:FE:8A:86:94:E3:73:F9:04:7C:F3:69:AC:73:0C:B8:28:9C:11 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 01ED Signing time: Sun 15 Nov 2026 03:41:54 +0000 Manifest this update: Sun 15 Nov 2026 03:41:54 +0000 Manifest next update: Sun 22 Nov 2026 03:41:54 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: KEVusY+VoSVYjVi/wKkI/eMdiFODR9CZoaECP1ywh8o=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: IRQ5tUvjSdYBMHXJtMeaFpdBVsbhUU9VeI4w+7YPShY=) 3: C43ADC9898A011F197259AE96111F970.roa (hash: qUX0d4svcA2ISwsDOMGvmImpbdf1PX0kSQo3+dTZN0E=) 4: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: EXf60aPYaF6V19CZAmIAiXajARXVjVYLev6p/NnSpqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 03:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Nov 15 03:41:54 2026 GMT Not After : Nov 22 03:41:54 2026 GMT Subject: CN=6af92a02-31eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:61:28:c8:a3:3b:e4:c0:6e:f0:78:78:dd: 48:d8:46:c0:41:93:e7:cf:8a:a6:33:13:c7:e8:b5: 1a:06:cd:1d:33:e0:70:2b:51:8e:9b:a9:29:7e:d8: c7:f6:89:19:ea:07:f9:ae:3e:0a:40:0d:55:ef:4e: ff:84:bc:5b:9e:c9:7c:93:70:da:d6:7b:64:5e:b1: a8:c8:20:7e:0c:56:ba:9e:82:2b:77:4a:2d:51:26: cc:a0:e9:04:41:0c:cc:13:9a:f6:a4:0c:c4:bb:25: fb:ca:01:d7:69:75:bd:a1:bb:a4:8a:34:3d:eb:99: c7:81:a7:41:7a:71:bb:29:d7:a6:7c:87:29:73:b9: fa:f3:a6:a8:63:e7:c1:e8:48:2f:42:52:a5:5f:0d: 31:e3:aa:22:8b:e3:ca:60:30:45:3f:86:76:a1:cc: 38:a1:22:89:9d:5d:0c:a5:bb:3c:54:05:a1:45:38: 40:d2:fe:2b:59:68:03:1c:d5:69:42:ac:b6:d6:d9: 6f:dd:24:de:cf:1a:55:56:ba:0c:2b:32:9f:b2:d9: 7c:99:65:c9:64:87:21:52:19:94:c0:da:bc:22:fd: 02:19:c2:d5:37:1d:23:62:84:b4:1e:10:65:99:c1: d6:8c:1e:4a:9a:1a:86:cc:f9:d8:e3:80:0f:12:6d: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3F:FE:8A:86:94:E3:73:F9:04:7C:F3:69:AC:73:0C:B8:28:9C:11 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:db:05:b3:6a:00:9f:b5:fd:8a:27:6c:bd:01:9d:fc:f1:32: 13:c2:70:57:47:cd:36:4d:7f:b3:9a:86:3a:3d:e3:c0:79:8d: 32:f0:40:ca:55:25:b4:df:8a:a2:93:6c:0c:34:98:7b:c2:38: 64:06:2f:58:46:0f:5b:be:bb:af:52:b0:20:d6:1c:6f:37:a9: ad:ca:5a:b0:82:0d:03:56:ef:ad:38:94:be:ba:f3:8b:44:15: 0a:5f:1c:9e:6f:90:a9:f7:57:7b:aa:6c:cd:bb:4e:38:37:fd: f9:bd:32:aa:9a:d1:42:80:05:17:2c:4a:bc:eb:e8:c4:f4:40: 13:af:90:bb:ae:7e:37:1d:26:2b:6c:d3:35:dd:ca:59:26:94: cc:89:0b:51:62:b0:84:4f:b3:02:eb:a6:ab:e2:3d:db:67:49: 70:9b:52:49:ec:ae:9d:bb:ec:02:b2:ba:a0:c7:f6:03:df:a1: 37:ff:cd:69:04:44:98:0c:7f:a9:c2:e4:cd:25:b9:9c:9a:be: 03:22:ae:ff:fd:41:13:76:7b:b7:86:dc:a7:ee:64:87:8a:84: df:75:57:eb:ad:0e:df:c7:9d:dd:12:8a:c1:17:8d:43:df:1f: 5a:7e:01:30:35:c6:b3:db:a4:8b:f7:5b:33:ba:98:d6:1e:6c: 7f:ca:fd:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjYxMTE1MDM0MTU0WhcNMjYxMTIyMDM0MTU0WjAYMRYwFAYD VQQDEw02YWY5MmEwMi0zMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0RhKMijO+TAbvB4eN1I2EbAQZPnz4qmMxPH6LUaBs0dM+BwK1GOm6kpftjH 9okZ6gf5rj4KQA1V707/hLxbnsl8k3Da1ntkXrGoyCB+DFa6noIrd0otUSbMoOkE QQzME5r2pAzEuyX7ygHXaXW9obukijQ965nHgadBenG7KdemfIcpc7n686aoY+fB 6EgvQlKlXw0x46oii+PKYDBFP4Z2ocw4oSKJnV0Mpbs8VAWhRThA0v4rWWgDHNVp Qqy21tlv3STezxpVVroMKzKfstl8mWXJZIchUhmUwNq8Iv0CGcLVNx0jYoS0HhBl mcHWjB5KmhqGzPnY44APEm0ibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8//oqG lONz+QR882mscwy4KJwRMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR9sFs2oAn7X9iidsvQGd/PEyE8JwV0fNNk1/s5qGOj3jwHmNMvBAylUltN+K opNsDDSYe8I4ZAYvWEYPW767r1KwINYcbzeprcpasIINA1bvrTiUvrrzi0QVCl8c nm+QqfdXe6pszbtOODf9+b0yqprRQoAFFyxKvOvoxPRAE6+Qu65+Nx0mK2zTNd3K WSaUzIkLUWKwhE+zAuumq+I922dJcJtSSeyunbvsArK6oMf2A9+hN//NaQREmAx/ qcLkzSW5nJq+AyKu//1BE3Z7t4bcp+5kh4qE33VX660O38ed3RKKwReNQ98fWn4B MDXGs9uki/dbM7qY1h5sf8r9TQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:49:47 2026 by rpki-client