$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: +XZ47Agjm1qkPt0qW+O+e7YS2CyJf735gzxOSzjdhVo= Subject key identifier: 99:FF:99:77:9E:68:3C:58:D4:4B:F9:78:8A:C3:5E:71:60:1C:9F:72 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0F34 Signing time: Tue 22 Sep 2026 17:30:43 +0000 Manifest this update: Tue 22 Sep 2026 17:30:42 +0000 Manifest next update: Tue 29 Sep 2026 17:30:42 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: o8ednIDjH7vl8pSliRO1DgHxqp+2V4h4G6fJKuf4aYI=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: CWOtv6B0fcU2IHlDgJ0/Gmijxbm6pcAfTDFP/NJ9B84=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 8V5IGc+b8pozEC7iweD4rYatcy+0UmpTtV2caoxfDNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3920 (0xf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Sep 22 17:30:42 2026 GMT Not After : Sep 29 17:30:42 2026 GMT Subject: CN=6ab2bb42-7611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:cd:90:02:25:b7:8a:aa:c8:e1:2a:83:e4: 9d:de:da:b2:16:03:0f:3c:da:df:48:79:4c:4e:e4: db:e1:9b:82:80:2b:bd:d4:51:6a:0c:d2:b9:d7:02: 5d:6b:d5:dc:c1:34:d5:b3:f5:37:dd:41:c4:c7:3c: a7:b0:ca:a8:9e:da:94:07:3a:8c:3c:bd:47:f7:7f: 82:18:87:4c:22:07:b7:18:92:0a:2f:ad:cf:bb:f3: 7e:17:0c:bc:27:8e:f4:a0:1f:11:63:4e:ef:e3:f7: c4:09:b4:11:f3:5e:31:2c:e1:e0:f4:18:d5:48:1d: db:e6:34:4c:1b:cd:80:ad:e4:51:fa:a9:f3:ed:fc: 7d:36:2a:ea:07:8c:2b:67:0f:db:7a:b2:7a:43:6c: 47:c1:55:ee:5b:2d:e9:c2:4b:62:6d:d4:78:91:c7: 88:e8:db:a1:e2:b0:d4:fb:39:03:bd:36:56:0a:dd: 50:39:3e:a9:66:fd:d2:3a:41:f7:09:ed:68:16:5a: 45:94:ca:d7:20:ae:69:aa:d7:24:77:90:72:27:5b: b3:c0:a3:c7:32:0d:91:bf:2b:da:ab:38:61:00:9c: 03:d6:5a:5b:04:20:76:92:14:f2:3c:c9:bd:b2:3e: 8c:de:58:0a:c2:c6:a9:82:e6:60:d7:68:24:9e:aa: 05:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:99:77:9E:68:3C:58:D4:4B:F9:78:8A:C3:5E:71:60:1C:9F:72 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fb:89:83:ef:04:77:be:e8:06:21:71:d9:5a:da:e9:5a:f7: a9:00:af:b9:df:4c:28:70:3a:b7:18:08:2e:a1:ba:26:82:45: dd:35:70:3c:09:cd:df:ab:d5:ad:95:e7:4b:8a:04:2d:e5:61: 0a:e9:35:96:8b:62:a4:57:28:20:47:93:78:a8:a7:06:48:3f: 52:04:bb:96:23:03:96:bd:8e:a5:75:65:2a:36:b8:8a:72:84: 42:2f:bb:88:e4:d9:c9:48:b9:42:77:f0:f9:47:04:f2:fa:a5: 05:08:d2:a4:dd:7a:64:c7:4f:0d:da:7b:a3:d2:dc:80:f9:dc: d5:53:ab:6b:30:d4:16:01:d5:6c:e8:31:c3:99:3f:b3:f4:fb: 2a:33:4f:16:2d:dd:11:b9:50:e3:a3:2b:39:f6:fb:5d:ef:f7: fa:74:39:e5:0c:f6:e6:fc:c7:2f:35:5f:98:f4:e4:cc:7c:20: 1b:a7:3c:8c:b1:41:77:f3:c6:14:f6:be:05:34:64:22:02:ad: 91:f7:e7:7e:1b:69:e1:cf:0f:bf:c5:f9:68:93:57:94:c8:e8: be:c8:0b:4e:ef:54:0a:74:8b:f4:35:d1:83:2a:85:5e:f9:56: d6:54:82:c2:a2:c0:96:cf:d7:0c:59:32:71:c5:b1:eb:f0:28: 7e:4d:48:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjYwOTIyMTczMDQyWhcNMjYwOTI5MTczMDQyWjAYMRYwFAYD VQQDEw02YWIyYmI0Mi03NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9nNkAIlt4qqyOEqg+Sd3tqyFgMPPNrfSHlMTuTb4ZuCgCu91FFqDNK51wJd a9XcwTTVs/U33UHExzynsMqontqUBzqMPL1H93+CGIdMIge3GJIKL63Pu/N+Fwy8 J470oB8RY07v4/fECbQR814xLOHg9BjVSB3b5jRMG82AreRR+qnz7fx9NirqB4wr Zw/berJ6Q2xHwVXuWy3pwktibdR4kceI6Nuh4rDU+zkDvTZWCt1QOT6pZv3SOkH3 Ce1oFlpFlMrXIK5pqtckd5ByJ1uzwKPHMg2RvyvaqzhhAJwD1lpbBCB2khTyPMm9 sj6M3lgKwsapguZg12gknqoFCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJn/mXee aDxY1Ev5eIrDXnFgHJ9yMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC/uJg+8Ed77oBiFx2Vra6Vr3qQCvud9MKHA6txgILqG6JoJF3TVwPAnN36vV rZXnS4oELeVhCuk1lotipFcoIEeTeKinBkg/UgS7liMDlr2OpXVlKja4inKEQi+7 iOTZyUi5Qnfw+UcE8vqlBQjSpN16ZMdPDdp7o9LcgPnc1VOrazDUFgHVbOgxw5k/ s/T7KjNPFi3dEblQ46MrOfb7Xe/3+nQ55Qz25vzHLzVfmPTkzHwgG6c8jLFBd/PG FPa+BTRkIgKtkffnfhtp4c8Pv8X5aJNXlMjovsgLTu9UCnSL9DXRgyqFXvlW1lSC wqLAls/XDFkyccWx6/Aofk1Ijg== -----END CERTIFICATE-----Generated at Wed Sep 23 22:00:12 2026 by rpki-client