$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json) Hash identifier: MSgES5HVtvIlI+bXcB+HZ11Ke5VXZdZxDFa2eUY3X5U= Subject key identifier: C3:91:70:68:66:EF:DA:1A:D7:20:73:FB:35:78:AC:8A:FB:70:D4:DB Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft Manifest number: 0886 Signing time: Sat 26 Sep 2026 20:57:44 +0000 Manifest this update: Sat 26 Sep 2026 20:57:43 +0000 Manifest next update: Sat 03 Oct 2026 20:57:43 +0000 Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: qhrVVRx+ApU15I4k95RMuG20Ppzvmo5+81JwkG1k4Kw=) 2: 24311E00963F11F1A090EC316A11F970.roa (hash: l2rcv0HSQlVYyr85ROaGDaPUC259tv2OzWgdl8mnirQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Validity Not Before: Sep 26 20:57:43 2026 GMT Not After : Oct 3 20:57:43 2026 GMT Subject: CN=6ab831c8-ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:ad:3d:96:50:4a:81:f0:6c:05:b0:ba:01: b4:2d:7b:85:d4:0f:ec:ee:38:c7:31:88:62:be:25: 14:fd:79:77:c7:a1:16:53:6c:47:49:4e:9a:7d:8e: ca:b9:6f:84:48:60:82:de:bb:3a:49:4e:3f:53:c9: b8:55:34:a2:36:fc:72:e0:78:6a:ab:b1:8c:cf:1a: e2:f2:4d:82:1c:7e:32:77:3a:64:d4:0c:cd:66:5d: a7:c5:a6:dc:10:b3:4e:ea:09:4d:43:75:82:e0:be: 35:37:65:07:76:da:dd:0a:d3:54:89:c5:a0:02:27: f1:41:70:a1:58:84:3b:b0:24:a0:87:3c:86:98:f7: 86:af:03:e6:cb:12:6c:bc:ce:bd:65:85:23:d4:38: 90:d4:0e:65:9b:33:ef:6d:f5:97:7f:f4:e7:af:44: 0f:aa:0f:73:4f:57:c2:3c:dd:1d:37:60:67:93:a9: b0:8f:66:ee:64:94:b7:37:cb:de:b6:8b:75:e8:42: 07:63:d7:23:69:d0:b5:b8:f6:2a:70:e3:8e:21:57: b4:9d:e4:f3:99:a9:81:af:a5:cc:0f:9c:04:92:14: f4:eb:90:85:80:96:98:74:cf:64:3f:76:8f:96:4f: 53:1c:cd:0d:cd:dc:08:b6:ef:eb:ef:fa:fb:a3:1a: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:91:70:68:66:EF:DA:1A:D7:20:73:FB:35:78:AC:8A:FB:70:D4:DB X509v3 Authority Key Identifier: keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ec:5b:6b:d4:66:e6:a7:01:9a:5b:0e:10:7c:d9:9e:c3:14: 32:8a:f1:ed:7a:22:6a:71:90:32:44:47:a5:6f:75:8e:9a:0e: 0a:ab:a9:4c:42:bb:ef:04:1f:90:2c:07:44:39:45:32:43:2e: 3d:b0:5b:33:74:99:09:95:61:a1:61:cf:03:12:35:68:58:3f: c2:47:d1:52:cd:1f:21:8f:04:4f:c4:5b:6c:1a:68:90:94:1e: a3:05:65:be:31:0f:5f:01:e3:a2:90:dd:56:c9:60:a1:d6:ed: 20:23:9c:17:1a:6d:d3:c3:dc:b8:2b:96:74:7e:c7:e5:5f:54: 91:c6:85:e0:68:8e:bf:06:4e:b3:82:c4:2f:65:05:a3:34:f1: 8b:db:b8:9c:65:b9:87:a7:46:38:e7:d8:0d:80:7d:71:6c:fa: 04:3c:20:c6:78:b8:4e:b1:81:8e:3d:09:13:eb:e1:b3:29:b3: 01:4d:19:1b:45:e1:70:48:49:94:b2:83:8a:c0:d6:b6:fc:f7: cb:ca:79:7c:c6:29:0a:7c:e5:81:cc:fc:4a:1f:02:aa:5c:be: ef:75:1f:8a:64:48:c9:49:fc:2a:fb:e0:3e:e2:df:95:fb:4b: c9:d1:1c:e5:65:a8:a8:09:85:97:23:22:3e:22:65:c2:a5:7e: 51:5c:a5:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0 RkU1QjU2NEEwHhcNMjYwOTI2MjA1NzQzWhcNMjYxMDAzMjA1NzQzWjAYMRYwFAYD VQQDEw02YWI4MzFjOC1lZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmmtPZZQSoHwbAWwugG0LXuF1A/s7jjHMYhiviUU/Xl3x6EWU2xHSU6afY7K uW+ESGCC3rs6SU4/U8m4VTSiNvxy4Hhqq7GMzxri8k2CHH4ydzpk1AzNZl2nxabc ELNO6glNQ3WC4L41N2UHdtrdCtNUicWgAifxQXChWIQ7sCSghzyGmPeGrwPmyxJs vM69ZYUj1DiQ1A5lmzPvbfWXf/Tnr0QPqg9zT1fCPN0dN2Bnk6mwj2buZJS3N8ve tot16EIHY9cjadC1uPYqcOOOIVe0neTzmamBr6XMD5wEkhT065CFgJaYdM9kP3aP lk9THM0NzdwItu/r7/r7oxpwCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMORcGhm 79oa1yBz+zV4rIr7cNTbMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3 N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0UyMi8xMkZBODExQTE3N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9Q bzQzYTlPLVFUN0JQNWJWa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC+xba9Rm5qcBmlsOEHzZnsMUMorx7XoianGQMkRHpW91jpoOCqupTEK77wQf kCwHRDlFMkMuPbBbM3SZCZVhoWHPAxI1aFg/wkfRUs0fIY8ET8RbbBpokJQeowVl vjEPXwHjopDdVslgodbtICOcFxpt08PcuCuWdH7H5V9UkcaF4GiOvwZOs4LEL2UF ozTxi9u4nGW5h6dGOOfYDYB9cWz6BDwgxni4TrGBjj0JE+vhsymzAU0ZG0XhcEhJ lLKDisDWtvz3y8p5fMYpCnzlgcz8Sh8Cqly+73UfimRIyUn8KvvgPuLflftLydEc 5WWoqAmFlyMiPiJlwqV+UVyldQ== -----END CERTIFICATE-----Generated at Sun Sep 27 17:27:06 2026 by rpki-client