$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json) Hash identifier: Mn4PNsY8BbNTXB13LyE/fh62nEsFhtirYq/JcWybJF0= Subject key identifier: C8:C7:5B:CF:E9:BD:11:1A:6D:31:64:27:5A:7C:9C:12:06:7A:5A:C1 Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft Manifest number: 0166 Signing time: Thu 01 Oct 2026 06:09:42 +0000 Manifest this update: Thu 01 Oct 2026 06:09:42 +0000 Manifest next update: Thu 08 Oct 2026 06:09:42 +0000 Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: nQmSzPKVshX8vvhyXy1tIfNrFquhUdt/ZCEj4HSXpbw=) 2: 17CE8226BA8211F198D0A4F93811F970.roa (hash: 5A2uxW9yni9/PalNJlLvBLx5M9eCnCn+mF9OihXJN3A=) 3: 186DFCCABA8211F198D0A4F93811F970.roa (hash: 4ZIixXdvG3KYmU6SNe16q5BU1y1T2x6Uxw8VNDU+Jig=) 4: C74734B6BCCE11F1983EB77C3311F970.roa (hash: hZuMKp+WjoByqqRloDkIK97D/CXqLhxo7Gt3Z3ZU9YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 06:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Validity Not Before: Oct 1 06:09:42 2026 GMT Not After : Oct 8 06:09:42 2026 GMT Subject: CN=6abdf926-cbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:fe:c0:10:27:36:d4:da:72:c6:bf:38:67: 17:e4:bc:59:5a:2d:2c:28:6c:4f:09:6f:f3:e1:f2: c8:81:86:ee:55:ab:ed:82:ea:7b:3e:3a:10:28:f8: a0:ad:4b:b9:4f:6a:31:96:e6:7c:78:a4:18:5b:47: de:86:36:32:4f:df:1b:98:98:4a:a0:b4:c9:16:bc: d1:1c:6f:f5:54:d9:60:dd:88:6f:b5:18:06:a5:8f: 1e:03:c4:40:e7:7b:c4:df:4a:9b:30:73:80:5d:1c: 1a:ed:bc:da:2e:55:64:eb:ee:59:52:e9:0b:b0:b3: 5b:ce:dd:dd:71:a8:28:7b:51:2e:dc:23:af:87:4e: d7:29:53:43:2a:33:f9:fc:ee:94:c2:02:9e:f2:c7: b3:1a:08:33:6f:13:68:cb:c7:b6:17:11:37:4c:c7: 74:ca:ef:61:e4:4d:e3:23:06:07:58:f9:bd:be:ee: 5b:70:ca:42:d9:6d:8e:f2:4d:88:2d:b1:02:5e:04: ca:69:d9:66:74:79:58:28:7a:41:be:96:47:7f:4d: c1:41:70:4c:32:c6:a5:3a:3f:09:a4:45:2e:28:e6: a8:88:d4:3b:16:8f:30:a3:34:43:75:f9:35:24:c8: d2:81:6c:96:fd:a0:2f:92:e5:e4:7d:51:ae:69:4a: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:5B:CF:E9:BD:11:1A:6D:31:64:27:5A:7C:9C:12:06:7A:5A:C1 X509v3 Authority Key Identifier: keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:47:dd:48:f4:f8:6a:ac:29:8c:d4:ac:d5:d4:c9:50:28:29: 06:24:4d:f0:29:5c:cf:2e:53:e8:a4:50:61:c9:2c:27:aa:0b: 69:32:c1:6f:5b:b1:e1:a3:7b:4d:0e:9e:e7:8e:d0:1d:51:31: f3:90:31:77:3c:15:44:fc:16:e1:88:87:8a:db:4d:cf:b1:31: 8d:66:b6:24:e8:c4:63:de:fa:4e:23:34:0d:a1:02:6b:74:f0: a2:23:20:0b:1c:24:57:96:db:53:88:ca:7e:35:4b:5f:29:0a: c7:9c:5f:c0:0c:e7:0b:f1:76:cd:90:73:ab:60:cd:2b:a5:66: dd:e8:59:fc:f5:01:04:d1:2c:0c:15:3c:25:89:97:58:97:85: 8e:6e:65:61:17:80:b8:eb:51:21:49:d2:63:8d:2c:3f:46:de: d3:4f:f8:e1:a5:63:c8:dd:ea:5f:a7:16:b4:6a:9a:ef:7b:bd: 78:81:35:0a:1a:85:bb:7d:47:ba:d4:6e:21:be:d7:b9:44:a4: cf:1c:f8:39:ce:e3:d4:9c:4c:fe:c5:b3:c6:89:81:03:d8:00: 0e:8d:0a:e5:64:06:bd:2f:15:f6:ff:5c:57:e8:41:b1:4a:20: d4:c7:0a:07:48:dc:6e:fc:57:c8:52:93:08:d2:8a:d9:64:0a: d0:ef:5a:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDYwNkVCMjk1ODI1NEFDOThCNjMzNkVBQTQxQUM4MEIy RENCMTlDNkUwHhcNMjYxMDAxMDYwOTQyWhcNMjYxMDA4MDYwOTQyWjAYMRYwFAYD VQQDEw02YWJkZjkyNi1jYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ej+wBAnNtTacsa/OGcX5LxZWi0sKGxPCW/z4fLIgYbuVavtgup7PjoQKPig rUu5T2oxluZ8eKQYW0fehjYyT98bmJhKoLTJFrzRHG/1VNlg3YhvtRgGpY8eA8RA 53vE30qbMHOAXRwa7bzaLlVk6+5ZUukLsLNbzt3dcagoe1Eu3COvh07XKVNDKjP5 /O6UwgKe8sezGggzbxNoy8e2FxE3TMd0yu9h5E3jIwYHWPm9vu5bcMpC2W2O8k2I LbECXgTKadlmdHlYKHpBvpZHf03BQXBMMsalOj8JpEUuKOaoiNQ7Fo8wozRDdfk1 JMjSgWyW/aAvkuXkfVGuaUqeyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjHW8/p vREabTFkJ1p8nBIGelrBMB8GA1UdIwQYMBaAFGBuspWCVKyYtjNuqkGsgLLcsZxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CNURGQzhDMDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJKaTJNMjZxUWF5QXN0eXhu RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lHNnlsWUpVckppMk0yNnFRYXlBc3R5eG5HNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CNURGQzhDMDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJK aTJNMjZxUWF5QXN0eXhuRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYUfdSPT4aqwpjNSs1dTJUCgpBiRN8Clczy5T6KRQYcksJ6oLaTLBb1ux4aN7 TQ6e547QHVEx85AxdzwVRPwW4YiHittNz7ExjWa2JOjEY976TiM0DaECa3TwoiMg CxwkV5bbU4jKfjVLXykKx5xfwAznC/F2zZBzq2DNK6Vm3ehZ/PUBBNEsDBU8JYmX WJeFjm5lYReAuOtRIUnSY40sP0be00/44aVjyN3qX6cWtGqa73u9eIE1ChqFu31H utRuIb7XuUSkzxz4Oc7j1JxM/sWzxomBA9gADo0K5WQGvS8V9v9cV+hBsUog1McK B0jcbvxXyFKTCNKK2WQK0O9anA== -----END CERTIFICATE-----Generated at Thu Oct 1 13:28:55 2026 by rpki-client