$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: cwNgInYVT74fenxExamxMBMbRPE63F9goUgRf2bJZSk= Subject key identifier: 57:F8:24:5B:DB:83:1C:01:E0:DE:05:32:E7:55:CC:24:85:02:13:E3 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 0158 Signing time: Tue 29 Sep 2026 05:41:31 +0000 Manifest this update: Tue 29 Sep 2026 05:41:31 +0000 Manifest next update: Tue 06 Oct 2026 05:41:31 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: 7yZKuoGVDUbDhblk/xtR/mHvgKZV8q65PDENbcSVAHA=) 2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y=) 3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 05:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Sep 29 05:41:31 2026 GMT Not After : Oct 6 05:41:31 2026 GMT Subject: CN=6abb4f8b-f33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:bf:ca:7e:d9:76:5a:b9:ce:de:57:08:de: 82:c6:3f:8c:60:e3:6a:9f:52:61:3a:73:03:ff:f0: 4f:ac:9a:6a:1c:16:2b:5b:40:c6:4a:02:c2:14:68: 7b:73:4d:f8:19:0d:6d:ec:59:49:8a:6a:66:b5:16: d1:66:50:ff:df:a4:27:e5:2b:af:2a:e0:87:76:fb: 52:a6:b1:a1:8a:8c:e2:05:2b:87:59:94:6c:56:e4: 92:63:f7:d6:7c:14:39:4c:28:a2:bd:4c:5e:e1:75: 30:94:96:c1:60:35:70:ab:55:09:f2:37:5c:01:7b: 0b:2b:a3:5d:44:97:c2:8a:24:2d:81:ca:aa:76:4c: d7:12:fb:b7:6a:ee:41:36:2a:44:cf:34:c1:60:a8: 0b:44:ef:87:85:00:92:bd:4c:1b:05:c0:9e:5a:29: c0:b3:04:d5:c3:d0:8d:4f:55:af:26:26:a8:fa:7e: 4d:c3:51:45:35:0a:7d:ac:ca:37:f8:2c:f2:7f:2a: d5:84:0e:3d:5c:2c:40:94:51:ee:21:61:e2:9c:33: 0d:22:74:bf:21:2c:1e:e6:d0:65:0b:d6:81:4a:5f: 2b:69:ca:b9:34:0c:82:ab:b4:8f:a7:95:60:03:63: bf:a9:13:24:7a:29:34:8f:e0:02:b5:98:77:3b:05: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F8:24:5B:DB:83:1C:01:E0:DE:05:32:E7:55:CC:24:85:02:13:E3 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cb:38:ff:8f:2e:e5:b4:c9:79:4e:f4:71:02:df:ba:dc:0d: df:52:ab:7e:73:b1:13:db:9f:28:4a:ca:ec:46:0d:78:fb:4a: cc:44:0f:31:0c:f0:14:ba:4e:54:87:89:46:66:cb:5c:65:74: 4f:f7:57:c9:1e:5d:cf:a6:d7:a9:d9:e2:71:32:5e:eb:1e:c3: c5:a3:2c:22:19:58:b2:c1:c5:9c:59:3f:b6:21:77:e7:37:4f: b5:36:f2:04:8b:60:67:6a:b3:a5:ff:61:ff:2e:1d:31:b5:f7: 84:51:25:dd:7f:d3:91:8d:59:26:5a:68:a3:75:fb:65:d1:83: 1a:28:47:8e:18:40:5d:ec:63:24:7b:e4:29:ee:78:7d:94:d1: eb:7d:28:df:90:f3:3d:64:e2:38:47:4b:ff:1f:3e:8b:68:50: c1:89:98:09:66:1a:fd:d5:e9:4c:72:15:fb:f3:41:e8:49:99: 86:32:62:5e:24:65:3c:0f:90:c4:a2:dc:f7:00:e4:0d:2f:e9: fd:a0:58:cd:05:c4:1b:42:f9:ed:ef:a3:2a:3d:f2:10:4c:b6: 04:15:ee:96:ac:3d:44:a3:3e:c8:b9:02:ca:e8:42:a7:14:f1: 06:87:87:ce:c1:8d:3a:71:07:dd:62:6d:3f:fd:e4:c6:a6:41: 1d:63:57:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYwOTI5MDU0MTMxWhcNMjYxMDA2MDU0MTMxWjAYMRYwFAYD VQQDEw02YWJiNGY4Yi1mMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFS/yn7Zdlq5zt5XCN6Cxj+MYONqn1JhOnMD//BPrJpqHBYrW0DGSgLCFGh7 c034GQ1t7FlJimpmtRbRZlD/36Qn5SuvKuCHdvtSprGhioziBSuHWZRsVuSSY/fW fBQ5TCiivUxe4XUwlJbBYDVwq1UJ8jdcAXsLK6NdRJfCiiQtgcqqdkzXEvu3au5B NipEzzTBYKgLRO+HhQCSvUwbBcCeWinAswTVw9CNT1WvJiao+n5Nw1FFNQp9rMo3 +CzyfyrVhA49XCxAlFHuIWHinDMNInS/ISwe5tBlC9aBSl8racq5NAyCq7SPp5Vg A2O/qRMkeik0j+ACtZh3OwXzIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFf4JFvb gxwB4N4FMudVzCSFAhPjMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATss4/48u5bTJeU70cQLfutwN31KrfnOxE9ufKErK7EYNePtKzEQPMQzwFLpO VIeJRmbLXGV0T/dXyR5dz6bXqdnicTJe6x7DxaMsIhlYssHFnFk/tiF35zdPtTby BItgZ2qzpf9h/y4dMbX3hFEl3X/TkY1ZJlpoo3X7ZdGDGihHjhhAXexjJHvkKe54 fZTR630o35DzPWTiOEdL/x8+i2hQwYmYCWYa/dXpTHIV+/NB6EmZhjJiXiRlPA+Q xKLc9wDkDS/p/aBYzQXEG0L57e+jKj3yEEy2BBXulqw9RKM+yLkCyuhCpxTxBoeH zsGNOnEH3WJtP/3kxqZBHWNXlQ== -----END CERTIFICATE-----Generated at Thu Oct 1 09:26:51 2026 by rpki-client