$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json) Hash identifier: OdcNItb4UW+rT3DWs649CI10+rg03TsVBK8JR0mhPyE= Subject key identifier: A9:F6:E0:DF:11:AE:F8:8C:5E:4B:F0:F3:76:03:6D:CC:85:0A:21:81 Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft Manifest number: 01A0 Signing time: Sat 26 Sep 2026 21:14:34 +0000 Manifest this update: Sat 26 Sep 2026 21:14:34 +0000 Manifest next update: Sat 03 Oct 2026 21:14:34 +0000 Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: FKZP0TQYbd2jb/4cZIeP8HrANERR1fSLCCQMPQBkeoM=) 2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Validity Not Before: Sep 26 21:14:34 2026 GMT Not After : Oct 3 21:14:34 2026 GMT Subject: CN=6ab835ba-b68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:8f:d8:d7:c0:46:81:74:ff:0b:62:4d:de: 99:22:e2:47:a0:7b:30:dd:7f:3a:bf:98:7d:04:88: f4:44:e4:81:f4:4b:d0:e5:0f:86:05:2e:f7:48:a1: a4:33:71:54:78:4a:0a:2d:4a:13:9f:76:f6:0c:13: db:3c:b7:79:47:bf:53:d0:72:1b:e6:81:6f:1b:ff: a9:69:dd:f8:ea:68:2a:5d:2c:10:74:21:d5:ff:be: a1:0c:97:ff:7a:aa:40:d8:fa:53:05:0e:24:52:be: 57:1c:9d:f8:64:86:74:0d:b9:09:37:2c:0d:91:04: 8a:bf:b1:40:10:ae:6b:1b:80:d5:17:0d:be:22:f6: 96:51:cf:82:4d:e8:61:53:b4:60:8a:2b:ea:de:fb: 0b:bd:27:6a:3c:df:c9:2b:54:99:56:ba:56:4f:63: 08:70:9f:ee:a2:f4:80:e5:26:0b:d7:a9:0d:72:67: 33:b1:47:28:39:97:75:5b:cb:a4:23:4b:7a:be:99: cb:61:2c:76:a0:7a:c8:61:89:86:8c:7d:14:83:db: 42:24:f0:76:6b:86:8f:7d:2f:08:61:a9:4a:81:b1: 24:13:a2:6f:0b:ba:04:b4:54:23:3a:93:a4:9c:69: fc:15:e0:f1:b7:69:39:72:ba:6a:ca:0b:fa:94:1d: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:E0:DF:11:AE:F8:8C:5E:4B:F0:F3:76:03:6D:CC:85:0A:21:81 X509v3 Authority Key Identifier: keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a3:16:cd:d1:bd:1a:ff:06:7d:ed:a0:e2:cd:e4:25:0a:7c: c0:57:7f:e4:ad:f8:68:34:0d:88:df:f8:6f:5d:f9:18:f1:e1: 3c:a3:e9:35:a7:a8:0e:b9:6a:9f:32:bf:f8:d2:f3:29:4d:df: d9:b2:fa:aa:7e:46:ab:7c:ff:9a:52:a9:21:74:e2:f8:00:d4: 39:8c:bb:2f:ee:d6:20:b2:c5:d3:00:29:14:ed:18:b2:8d:1e: 28:c8:1e:63:f1:90:4a:f1:ef:10:0c:b7:41:ff:e1:75:d1:5f: d2:98:dc:b7:2f:f8:93:bb:8b:f5:1d:fd:f9:3a:1f:f7:aa:67: 0a:00:d8:f5:63:15:10:9f:21:c5:40:86:6e:06:7b:24:68:d4: 8d:0a:f0:ee:e1:fb:6b:9f:e8:4b:46:07:64:50:b3:bf:a8:63: bf:cb:cc:cc:c0:81:41:da:db:9c:ac:18:e2:2d:f8:ff:f4:e8: 8d:cd:07:ef:94:0d:79:9b:3e:28:c2:5d:21:01:83:bd:8a:37: 35:27:49:d9:36:6d:ad:63:51:f3:ea:31:66:ad:2f:51:51:46: 79:64:a5:72:87:9c:12:d4:ed:cb:64:e7:32:88:a9:fc:e9:de: 9f:91:1f:eb:b3:66:48:07:52:fa:5f:b2:11:db:61:5c:b4:26: 1a:20:b4:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2 Mzc1NDFFNUQwHhcNMjYwOTI2MjExNDM0WhcNMjYxMDAzMjExNDM0WjAYMRYwFAYD VQQDEw02YWI4MzViYS1iNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDOP2NfARoF0/wtiTd6ZIuJHoHsw3X86v5h9BIj0ROSB9EvQ5Q+GBS73SKGk M3FUeEoKLUoTn3b2DBPbPLd5R79T0HIb5oFvG/+pad346mgqXSwQdCHV/76hDJf/ eqpA2PpTBQ4kUr5XHJ34ZIZ0DbkJNywNkQSKv7FAEK5rG4DVFw2+IvaWUc+CTehh U7Rgiivq3vsLvSdqPN/JK1SZVrpWT2MIcJ/uovSA5SYL16kNcmczsUcoOZd1W8uk I0t6vpnLYSx2oHrIYYmGjH0Ug9tCJPB2a4aPfS8IYalKgbEkE6JvC7oEtFQjOpOk nGn8FeDxt2k5crpqygv6lB1wiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKn24N8R rviMXkvw83YDbcyFCiGBMB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0 OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3 UldTSDloX3VhWk5qZFVIbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF6MWzdG9Gv8Gfe2g4s3kJQp8wFd/5K34aDQNiN/4b135GPHhPKPpNaeoDrlq nzK/+NLzKU3f2bL6qn5Gq3z/mlKpIXTi+ADUOYy7L+7WILLF0wApFO0Yso0eKMge Y/GQSvHvEAy3Qf/hddFf0pjcty/4k7uL9R39+Tof96pnCgDY9WMVEJ8hxUCGbgZ7 JGjUjQrw7uH7a5/oS0YHZFCzv6hjv8vMzMCBQdrbnKwY4i34//Tojc0H75QNeZs+ KMJdIQGDvYo3NSdJ2TZtrWNR8+oxZq0vUVFGeWSlcoecEtTty2TnMoip/Onen5Ef 67NmSAdS+l+yEdthXLQmGiC0gw== -----END CERTIFICATE-----Generated at Sun Sep 27 00:54:24 2026 by rpki-client