$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: f/PiZ0dPe7dEIz2c0t47t3Tc/cGsXPZwTQuTbCKSMsA= Subject key identifier: D6:CE:42:FB:13:B5:07:96:F8:DD:0E:0C:4C:DB:82:D4:49:BA:DE:43 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0BE0 Signing time: Sat 14 Nov 2026 18:57:12 +0000 Manifest this update: Sat 14 Nov 2026 18:57:12 +0000 Manifest next update: Sat 21 Nov 2026 18:57:12 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: r93/nG1mSlrBfmeqYas3NGBy8xhGjRUd7bpPSDpeJ8o=) 2: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: dA8WSJq1wS5TUAMt+hrRScf4v1vU+W5XUs8HYTQW7HQ=) 3: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: o+USMWffpDwbInQJqCp3ro8kSyTil4hzeXgKMWYvLUI=) 4: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: aRpFqloIChxIm2KMDzfVRcTxsoJMpEJsH/knn6ztxZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 18:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Nov 14 18:57:12 2026 GMT Not After : Nov 21 18:57:12 2026 GMT Subject: CN=6af8af08-6936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:86:78:41:22:c1:4a:46:12:0e:8d:66:f5: 77:6e:f6:4f:42:16:87:0a:b2:4c:aa:d8:07:62:ae: 92:92:ac:fd:d7:b8:d5:33:89:60:9a:b5:80:d3:50: fd:36:7f:9d:9f:34:fd:0a:39:7b:0d:07:b6:70:68: 89:c6:a8:66:9c:c6:e5:33:53:42:55:e9:11:6c:97: 2f:bc:d4:c3:3b:71:64:b2:45:4c:f5:52:cf:ce:ab: 7c:01:c8:a9:68:35:e7:c6:b6:97:ed:d8:d7:6c:46: b5:bd:66:4c:c7:83:5d:22:1c:f5:41:34:9b:8a:d1: 6f:53:0e:dd:c4:e8:0c:f2:29:74:0c:5f:8a:ce:d0: 1b:c0:62:b1:32:03:0f:80:eb:f4:b8:75:74:41:d6: c5:7a:83:a6:d5:7f:bf:3c:7e:ee:f1:55:6f:94:1e: 3f:68:57:73:79:ee:16:cc:59:50:df:e7:7c:d6:d6: 27:38:de:6a:a1:4c:6b:5a:cd:da:c7:ba:c7:34:30: 9b:d9:5c:f6:f3:5b:a9:38:52:aa:af:d2:cd:38:e7: 43:6c:a3:7d:29:ad:33:bf:09:c5:c7:27:65:ff:f3: fc:7c:f4:d9:9d:20:34:3f:0a:0b:c8:7c:ad:93:53: cc:e9:8c:a5:04:d8:d4:18:b5:7a:82:72:8e:4f:97: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CE:42:FB:13:B5:07:96:F8:DD:0E:0C:4C:DB:82:D4:49:BA:DE:43 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:ed:a1:a1:14:7a:3f:d3:91:f5:9a:17:eb:33:bd:a1:ab: 16:8d:94:1b:01:13:49:5e:1d:75:66:d1:93:df:55:46:3e:ac: 0b:53:4e:ed:1e:f9:fc:27:dc:e6:20:2f:81:50:4d:2c:6a:07: 1c:f6:9e:d4:bc:89:e7:37:67:7b:d5:3b:8f:56:cb:ae:64:c7: 95:6f:9b:4d:c8:25:62:94:c1:3c:e0:14:bd:62:a6:0c:2c:d9: 65:f9:c5:fd:fe:c5:b2:d9:b8:be:1b:d0:9c:5b:d3:df:1d:11: af:12:9b:a6:be:1e:39:7c:a2:79:52:2d:9a:0c:9f:65:11:42: 4b:b4:c7:0b:b1:fa:d5:35:68:fc:35:a5:05:da:d4:5a:5c:b7: a5:7b:05:53:53:b7:37:18:cb:1c:10:a1:52:19:87:0c:f7:64: 80:7f:85:68:d1:78:04:51:ed:e6:ae:35:8d:82:3f:32:54:37: 6e:f8:f3:ec:42:3e:97:fc:10:80:85:28:73:da:de:83:68:96: 3d:52:0c:9a:f1:34:12:71:25:0d:db:a1:95:61:3b:97:21:c6: bf:56:ad:01:bb:a9:d5:fc:48:4e:ed:cd:4c:e7:b8:2e:13:16: 48:dd:e5:f2:cf:33:a4:34:26:d8:36:b9:bc:1f:95:ee:84:15: fa:43:c8:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYxMTE0MTg1NzEyWhcNMjYxMTIxMTg1NzEyWjAYMRYwFAYD VQQDEw02YWY4YWYwOC02OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+6GeEEiwUpGEg6NZvV3bvZPQhaHCrJMqtgHYq6Skqz917jVM4lgmrWA01D9 Nn+dnzT9Cjl7DQe2cGiJxqhmnMblM1NCVekRbJcvvNTDO3FkskVM9VLPzqt8Acip aDXnxraX7djXbEa1vWZMx4NdIhz1QTSbitFvUw7dxOgM8il0DF+KztAbwGKxMgMP gOv0uHV0QdbFeoOm1X+/PH7u8VVvlB4/aFdzee4WzFlQ3+d81tYnON5qoUxrWs3a x7rHNDCb2Vz281upOFKqr9LNOOdDbKN9Ka0zvwnFxydl//P8fPTZnSA0PwoLyHyt k1PM6YylBNjUGLV6gnKOT5dwaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbOQvsT tQeW+N0ODEzbgtRJut5DMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkAHtoaEUej/TkfWaF+szvaGrFo2UGwETSV4ddWbRk99VRj6sC1NO7R75/Cfc 5iAvgVBNLGoHHPae1LyJ5zdne9U7j1bLrmTHlW+bTcglYpTBPOAUvWKmDCzZZfnF /f7Fstm4vhvQnFvT3x0RrxKbpr4eOXyieVItmgyfZRFCS7THC7H61TVo/DWlBdrU Wly3pXsFU1O3NxjLHBChUhmHDPdkgH+FaNF4BFHt5q41jYI/MlQ3bvjz7EI+l/wQ gIUoc9reg2iWPVIMmvE0EnElDduhlWE7lyHGv1atAbup1fxITu3NTOe4LhMWSN3l 8s8zpDQm2Da5vB+V7oQV+kPIOA== -----END CERTIFICATE-----Generated at Sun Nov 15 08:02:51 2026 by rpki-client