$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft File: y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft (raw, json) Hash identifier: 6Ormz6Zk6SQi+VbiNpihyow1zj3XxHAfma1nJLE01Cc= Subject key identifier: E0:FE:8D:E9:3B:69:92:F8:95:F3:28:28:D9:B2:FF:59:99:F9:95:E3 Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64 Certificate issuer: /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft Manifest number: 2F Signing time: Wed 23 Sep 2026 08:29:22 +0000 Manifest this update: Wed 23 Sep 2026 08:29:21 +0000 Manifest next update: Wed 30 Sep 2026 08:29:21 +0000 Files and hashes: 1: y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl (hash: pivKSxuq4SCIw5GCtGzX72QUnQZPT+26eCK5vfzED7I=) 2: 5958BB9C794811F1AAEBC54078A30FBC.roa (hash: TuJjYxvjs+S72EJKI50mOSLZsks+omAAzCh4dv+qAnY=) 3: 58704E16794811F1AAEBC54078A30FBC.roa (hash: Km7e1KI0bVjT2Vh8k/KxoUV9U/mE9RQGwRbSbVtmpII=) 4: D9B1050C794711F18C3268FE77A30FBC.roa (hash: MZj0KWbRgcpAkQHNAEsOeyaAYyuXdWg3Z7/YmLPlVvg=) 5: 57845FE2794811F1AAEBC54078A30FBC.roa (hash: w1yghT1rOxwGO8/T6GJUmND+ehogxUkK8p0zMCmeKII=) 6: 57254472794711F1832D99FC77A30FBC.roa (hash: v65T9nnV5djYR187TPvpWjpUtCbMgF/t1xM2ojHyBBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64 Validity Not Before: Sep 23 08:29:21 2026 GMT Not After : Sep 30 08:29:21 2026 GMT Subject: CN=6ab38de2-5d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:b0:e3:0e:13:66:d0:9d:1f:bf:93:a7:1f: 32:2f:1b:66:61:e5:72:3d:44:66:b5:5c:05:c6:0f: d0:85:cf:28:f0:2d:3f:67:db:77:0e:40:69:e3:ee: a5:7f:ee:24:13:49:2d:a5:33:8b:6f:63:d6:53:63: 17:66:35:99:5a:da:a3:39:cd:d6:a2:fe:78:a3:7b: 20:81:b7:01:a5:7a:a1:08:c6:df:12:bb:72:f9:b4: c9:a6:1f:73:b6:b2:d0:98:50:21:9f:a4:cd:14:b8: b0:3e:19:61:44:9a:10:73:77:4f:cc:9d:cd:18:dc: f7:f5:32:ff:5a:5b:61:4e:06:1d:d0:5a:91:e4:60: 6d:62:6a:cf:31:fd:ca:62:87:99:c7:57:9e:b7:00: 79:d5:ed:0f:1f:8b:74:84:35:cc:e0:30:0e:0b:1d: fa:6c:50:97:22:3b:40:b9:6c:fe:02:6a:2c:28:97: 2c:cf:e2:e1:c4:72:11:38:7c:1b:d2:03:65:6f:8f: b7:27:c9:ce:f9:3d:f5:7d:49:28:f7:17:f2:92:8e: 70:73:c0:f0:fa:74:38:3b:63:e9:42:bb:9d:e0:8d: 9a:79:87:8a:7e:be:02:29:26:0f:08:85:89:56:c1: bc:25:39:93:35:fe:cd:f1:7f:ef:27:50:c6:40:a7: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FE:8D:E9:3B:69:92:F8:95:F3:28:28:D9:B2:FF:59:99:F9:95:E3 X509v3 Authority Key Identifier: keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:81:be:95:4a:6c:22:8b:30:55:86:8a:5d:19:f9:98:ff: f7:58:e9:75:19:df:7b:fa:97:7e:c8:1c:e0:3a:a7:58:85:77: a3:d5:b6:14:97:15:c7:f9:fd:9d:83:9f:89:cc:86:70:62:07: 9e:94:c1:08:4e:dc:10:b6:ed:ae:73:3d:4d:bf:81:04:50:9a: 1d:e0:1f:eb:56:99:46:df:cb:20:66:73:0f:04:7a:f9:6a:05: 36:aa:0e:55:40:9a:57:d5:d0:1d:d8:c4:ae:6e:62:77:01:b4: 34:d4:c0:4b:38:47:8a:28:a7:35:13:a3:62:01:c4:b3:0a:c0: 24:9a:8f:0f:0c:10:71:40:64:5a:9f:80:9c:6e:e7:ae:a6:cf: 69:2d:3b:db:86:08:3a:92:45:f8:f7:91:f5:fb:77:6b:30:b6: fd:65:74:ea:14:00:2d:5b:fc:50:f9:8a:6e:f4:68:37:16:4f: 80:4a:da:a2:3e:42:bb:2e:14:75:2b:e4:d7:fe:ad:a9:5b:14: 85:25:d2:25:fb:6c:10:21:c3:ea:6d:bb:ee:3e:9c:53:31:58: 44:a8:ab:fe:47:c1:4f:c4:77:aa:82:11:3e:c3:a2:19:dc:b6: ca:11:34:cd:02:e4:b1:aa:aa:2a:2c:f5:45:c1:88:d7:6e:2f: 67:39:90:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEY5NzExMC8GA1UEBRMoQ0JCRDVCMUMzMUMxNjEyRTE1QUNFQzQ3MjU0RkQyRjMz RUM2OUM2NDAeFw0yNjA5MjMwODI5MjFaFw0yNjA5MzAwODI5MjFaMBgxFjAUBgNV BAMTDTZhYjM4ZGUyLTVkOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClR7DjDhNm0J0fv5OnHzIvG2Zh5XI9RGa1XAXGD9CFzyjwLT9n23cOQGnj7qV/ 7iQTSS2lM4tvY9ZTYxdmNZla2qM5zdai/nijeyCBtwGleqEIxt8Su3L5tMmmH3O2 stCYUCGfpM0UuLA+GWFEmhBzd0/Mnc0Y3Pf1Mv9aW2FOBh3QWpHkYG1ias8x/cpi h5nHV563AHnV7Q8fi3SENczgMA4LHfpsUJciO0C5bP4CaiwolyzP4uHEchE4fBvS A2Vvj7cnyc75PfV9SSj3F/KSjnBzwPD6dDg7Y+lCu53gjZp5h4p+vgIpJg8IhYlW wbwlOZM1/s3xf+8nUMZAp8kZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4P6N6Ttp kviV8ygo2bL/WZn5leMwHwYDVR0jBBgwFoAUy71bHDHBYS4VrOxHJU/S8z7GnGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRjk3L0QwRkUwMEFBNzk0 NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0VnJPeEhKVV9TOHo3R25H US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTcxYkhESEJZUzRWck94SEpVX1M4ejdHbkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw Rjk3L0QwRkUwMEFBNzk0NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0 VnJPeEhKVV9TOHo3R25HUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaYYG+lUpsIoswVYaKXRn5mP/3WOl1Gd97+pd+yBzgOqdYhXej1bYUlxXH+f2d g5+JzIZwYgeelMEITtwQtu2ucz1Nv4EEUJod4B/rVplG38sgZnMPBHr5agU2qg5V QJpX1dAd2MSubmJ3AbQ01MBLOEeKKKc1E6NiAcSzCsAkmo8PDBBxQGRan4Ccbueu ps9pLTvbhgg6kkX495H1+3drMLb9ZXTqFAAtW/xQ+Ypu9Gg3Fk+AStqiPkK7LhR1 K+TX/q2pWxSFJdIl+2wQIcPqbbvuPpxTMVhEqKv+R8FPxHeqghE+w6IZ3LbKETTN AuSxqqoqLPVFwYjXbi9nOZD4 -----END CERTIFICATE-----Generated at Thu Sep 24 10:59:18 2026 by rpki-client