$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: 7zcVuSuRbtrQTo6YCfR25gh21Z19YPaiY5bry/xUD9E= Subject key identifier: BE:16:0A:06:EE:F1:70:29:21:21:5A:1D:A7:C7:90:50:5E:38:7B:AF Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 35FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 35A6 Signing time: Thu 24 Sep 2026 14:49:30 +0000 Manifest this update: Thu 24 Sep 2026 14:49:30 +0000 Manifest next update: Thu 01 Oct 2026 14:49:30 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: 8HUcP6YJ6Ihz1guEMdFyM829S1Q9/Cl6MDSDfcyIG4o=) 2: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=) 3: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=) 4: 78B9569EB33711F19DE78FDE6D11F970.roa (hash: C0/nryBG+LkmWz6cZbkZcEYqysNpXiFU08p//7bHVZo=) 5: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=) 6: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=) 7: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=) 8: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13823 (0x35ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Sep 24 14:49:30 2026 GMT Not After : Oct 1 14:49:30 2026 GMT Subject: CN=6ab5387a-b0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:68:6c:6d:69:74:e4:c0:22:fd:da:7a:44:2e: 3c:bc:1c:51:5b:d0:92:8b:0b:2a:87:ef:f8:67:25: 24:de:11:9d:56:63:78:73:6a:54:63:c0:67:03:1b: 61:f8:6c:a6:76:b8:76:a5:ea:e9:36:71:ae:c6:c4: 4a:1b:c3:06:aa:5b:64:91:3c:5f:8a:f8:19:f7:e2: 55:b5:2f:a8:28:20:25:38:9a:34:57:b0:c1:2e:9a: b5:23:b1:e0:07:4c:99:7c:70:77:f3:fd:87:2a:20: 34:e6:60:08:c6:23:55:01:cd:4a:61:2a:c5:09:63: e3:4f:6b:de:fc:56:74:d5:96:ca:51:d9:cb:a6:c7: 4e:75:09:ff:25:a6:c3:dd:f5:b1:14:ee:d7:5a:cd: 4d:f0:79:43:3b:6b:f0:d1:9e:74:bf:be:ac:a2:65: b0:7a:a1:4a:ec:08:76:a7:b0:df:45:77:9b:c1:cc: bc:74:0a:0c:f0:0d:d1:88:e1:a9:a1:52:60:fe:a9: 5b:7f:cc:da:25:6d:2b:bd:b5:82:31:26:dd:50:17: 8a:3a:c1:ce:f4:d2:96:8f:dd:3d:9c:0d:b0:99:d4: a9:51:84:60:6b:f9:2a:07:63:82:f0:a3:d5:f8:ce: 06:c0:fc:0c:4c:c6:23:07:2e:48:93:3d:bd:c0:41: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:0A:06:EE:F1:70:29:21:21:5A:1D:A7:C7:90:50:5E:38:7B:AF X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d2:77:1f:2e:f2:dd:50:86:9c:d4:15:0e:a9:df:5a:17:f9: 7a:86:9c:57:58:e5:4a:46:40:26:2e:c3:e2:38:c5:8a:aa:91: 99:c9:c3:62:45:f7:64:78:e9:e8:3d:00:d1:1e:2d:ab:64:89: 63:fa:e3:a4:15:b9:81:a8:4a:6c:e3:f0:26:3f:ed:3a:a0:6a: d0:ee:c5:bd:e3:14:fb:60:e4:6f:13:68:59:9f:fa:33:8d:fe: 49:75:62:b6:42:43:7d:fb:06:4a:18:4d:ba:e8:7b:bf:bc:f7: b7:ad:8b:b4:4f:9a:00:7c:e4:2e:4e:ec:69:76:74:09:89:91: 12:39:6a:e0:42:b4:95:6c:bf:14:e6:2a:ce:0c:73:16:6f:8a: 21:da:d5:8c:33:26:7c:de:bd:9a:25:c5:32:1a:c6:3a:4f:40: 03:3f:ab:71:78:bb:ae:41:85:7b:d8:fe:57:c2:28:d2:4c:9e: 67:47:30:39:a7:42:68:74:ac:fb:fb:24:a9:28:c6:0b:38:65: 92:40:ef:c6:0e:b8:0b:c4:d0:c7:ae:ba:75:8a:28:99:82:a7: 6e:04:24:7f:64:81:04:1e:e3:d0:da:79:f1:60:28:d8:28:f9: f3:cb:a1:cd:b5:e8:b0:3c:f4:23:ab:fb:bf:3b:6b:d6:76:b1: e6:8e:fd:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYwOTI0MTQ0OTMwWhcNMjYxMDAxMTQ0OTMwWjAYMRYwFAYD VQQDEw02YWI1Mzg3YS1iMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2hsbWl05MAi/dp6RC48vBxRW9CSiwsqh+/4ZyUk3hGdVmN4c2pUY8BnAxth +Gymdrh2perpNnGuxsRKG8MGqltkkTxfivgZ9+JVtS+oKCAlOJo0V7DBLpq1I7Hg B0yZfHB38/2HKiA05mAIxiNVAc1KYSrFCWPjT2ve/FZ01ZbKUdnLpsdOdQn/JabD 3fWxFO7XWs1N8HlDO2vw0Z50v76somWweqFK7Ah2p7DfRXebwcy8dAoM8A3RiOGp oVJg/qlbf8zaJW0rvbWCMSbdUBeKOsHO9NKWj909nA2wmdSpUYRga/kqB2OC8KPV +M4GwPwMTMYjBy5Ikz29wEFkOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4WCgbu 8XApISFaHafHkFBeOHuvMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAytJ3Hy7y3VCGnNQVDqnfWhf5eoacV1jlSkZAJi7D4jjFiqqRmcnDYkX3ZHjp 6D0A0R4tq2SJY/rjpBW5gahKbOPwJj/tOqBq0O7FveMU+2DkbxNoWZ/6M43+SXVi tkJDffsGShhNuuh7v7z3t62LtE+aAHzkLk7saXZ0CYmREjlq4EK0lWy/FOYqzgxz Fm+KIdrVjDMmfN69miXFMhrGOk9AAz+rcXi7rkGFe9j+V8Io0kyeZ0cwOadCaHSs +/skqSjGCzhlkkDvxg64C8TQx666dYoomYKnbgQkf2SBBB7j0Np58WAo2Cj588uh zbXosDz0I6v7vztr1nax5o79PA== -----END CERTIFICATE-----Generated at Fri Sep 25 04:40:21 2026 by rpki-client