$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: OCx9yrFRcgTTGPZkHMZ085byy+VlrN4xFafImkU/tPw= Subject key identifier: F5:59:AD:7A:26:EE:4E:B2:41:5B:C1:2B:C7:EA:BB:1F:90:56:DF:D3 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 08DC Signing time: Tue 22 Sep 2026 20:16:53 +0000 Manifest this update: Tue 22 Sep 2026 20:16:52 +0000 Manifest next update: Tue 29 Sep 2026 20:16:52 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: o5OjftTFdVsh9NxIRT63kOQTRzTF1u5rDoiAQibRA00=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: d3gEiVUqUws+0A/GhooCgjNpu9i7U506wCE8JKmKXtk=) 3: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: hxEYoEMqj4BpXAJVc6GCqQHmmq9QFwmOlIQ9koH/Ilc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Sep 22 20:16:52 2026 GMT Not After : Sep 29 20:16:52 2026 GMT Subject: CN=6ab2e234-b946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:df:75:85:10:0b:26:41:88:db:c3:b1:e0: c8:6d:0f:6d:aa:ea:f3:af:2c:07:fc:43:3d:24:2e: bf:af:23:55:99:20:f7:ff:c6:3d:e2:87:c4:9c:f5: 79:a5:68:d7:ca:f2:dd:27:5f:c3:41:d7:0f:26:b4: 27:4b:90:8d:0c:36:59:86:da:50:82:d0:42:0b:17: e5:5c:1f:51:c2:51:45:97:a1:66:65:74:1d:2a:6e: bc:7e:a9:76:a8:6c:e1:4e:b3:f9:44:18:b6:3b:0f: c5:22:e4:41:6d:60:1f:e3:18:43:33:0d:d0:de:f9: 39:04:90:67:14:2b:c2:8d:6b:d8:36:cd:e4:67:f8: 1c:5b:0e:15:d7:09:89:cd:7c:b1:7a:49:af:46:ea: 1f:29:dd:7e:3d:f3:49:a2:46:43:78:ee:b1:b1:63: 07:1c:d6:b7:35:12:bc:0d:f8:6c:ab:a5:fe:18:0e: 2f:3c:f9:0d:25:4a:85:c9:fc:9b:1e:f2:ec:07:4b: d1:a9:1e:5e:95:78:d5:21:d9:46:5a:23:be:16:1c: 37:a5:90:24:87:1c:84:db:f7:e3:93:9d:db:10:de: bb:86:98:8b:8f:91:31:49:51:29:2b:b0:cd:c3:39: 3c:2c:74:22:d9:08:70:2d:bb:1a:2b:07:8d:7b:8a: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:AD:7A:26:EE:4E:B2:41:5B:C1:2B:C7:EA:BB:1F:90:56:DF:D3 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:5d:ba:65:cb:cc:7a:47:a7:a3:fe:5c:83:df:da:02:44:73: 18:9c:88:44:c6:59:7d:d4:f0:65:d8:5c:30:37:54:6f:5b:66: d6:b4:ee:a3:2e:ef:75:d6:24:1e:26:72:e3:ad:5a:f0:75:8b: 1e:a2:d1:c7:c6:cb:89:d0:8b:f9:d1:83:bd:ae:3e:3f:43:7e: 6f:cd:43:04:fe:af:aa:34:ca:63:c5:61:fa:9d:a5:4b:6e:3c: c0:d0:d7:e2:c1:d5:21:c1:15:2e:20:bb:f3:4e:b2:f0:18:bf: ec:4a:1b:1a:25:4b:b8:2f:fe:0f:26:13:f0:1a:b0:06:44:30: 3b:e6:82:04:cc:6c:5d:32:1e:70:64:f3:41:a8:9d:32:25:89: d0:89:8a:6d:14:1c:fd:69:9e:65:dc:be:bf:d6:b0:37:3e:c1: d8:5d:1b:36:28:c6:96:ff:ba:ae:37:1f:3c:15:13:c2:a2:15: d8:c7:f7:9a:03:d7:57:1e:32:d0:9f:54:60:eb:9b:eb:48:3f: 50:94:b1:af:64:db:a1:f9:bc:ce:32:02:72:d1:ca:8d:67:88: 5a:51:66:a6:40:a1:dc:19:c8:fe:99:b0:1c:c4:50:15:ee:b1: 1a:e8:99:b4:0a:3a:44:32:ab:3b:3b:87:eb:42:5b:ba:f3:86: 09:b7:54:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwOTIyMjAxNjUyWhcNMjYwOTI5MjAxNjUyWjAYMRYwFAYD VQQDEw02YWIyZTIzNC1iOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAibTfdYUQCyZBiNvDseDIbQ9tqurzrywH/EM9JC6/ryNVmSD3/8Y94ofEnPV5 pWjXyvLdJ1/DQdcPJrQnS5CNDDZZhtpQgtBCCxflXB9RwlFFl6FmZXQdKm68fql2 qGzhTrP5RBi2Ow/FIuRBbWAf4xhDMw3Q3vk5BJBnFCvCjWvYNs3kZ/gcWw4V1wmJ zXyxekmvRuofKd1+PfNJokZDeO6xsWMHHNa3NRK8Dfhsq6X+GA4vPPkNJUqFyfyb HvLsB0vRqR5elXjVIdlGWiO+Fhw3pZAkhxyE2/fjk53bEN67hpiLj5ExSVEpK7DN wzk8LHQi2QhwLbsaKweNe4rsXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVZrXom 7k6yQVvBK8fqux+QVt/TMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJV26ZcvMekeno/5cg9/aAkRzGJyIRMZZfdTwZdhcMDdUb1tm1rTuoy7vddYk HiZy461a8HWLHqLRx8bLidCL+dGDva4+P0N+b81DBP6vqjTKY8Vh+p2lS248wNDX 4sHVIcEVLiC7806y8Bi/7EobGiVLuC/+DyYT8BqwBkQwO+aCBMxsXTIecGTzQaid MiWJ0ImKbRQc/WmeZdy+v9awNz7B2F0bNijGlv+6rjcfPBUTwqIV2Mf3mgPXVx4y 0J9UYOub60g/UJSxr2Tbofm8zjICctHKjWeIWlFmpkCh3BnI/pmwHMRQFe6xGuiZ tAo6RDKrOzuH60JbuvOGCbdUew== -----END CERTIFICATE-----Generated at Wed Sep 23 10:17:12 2026 by rpki-client