$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft File: ypAQR86iWPy4s5sDZNpIokZit00.mft (raw, json) Hash identifier: UfImJ2PS8tqxBwYhUhMJSHe6NCpThE8La3hma6/gSWA= Subject key identifier: 4A:FB:D7:AD:B0:28:21:1B:F9:91:B0:A4:7B:05:5E:5C:56:25:70:72 Authority key identifier: CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D Certificate issuer: /CN=A91C987A/serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft Manifest number: 25 Signing time: Wed 23 Sep 2026 08:38:03 +0000 Manifest this update: Wed 23 Sep 2026 08:38:03 +0000 Manifest next update: Wed 30 Sep 2026 08:38:03 +0000 Files and hashes: 1: ypAQR86iWPy4s5sDZNpIokZit00.crl (hash: YDokahFSb0l0+lsoZTqHpUoKRrlimBOQAQJ988xBa38=) 2: BD79B614915611F18490ADCA6911F970.roa (hash: QYVNcxQHFREpP33/6Uxpf9LJcni4eo476dd+VvhSGPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C987A, serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Validity Not Before: Sep 23 08:38:03 2026 GMT Not After : Sep 30 08:38:03 2026 GMT Subject: CN=6ab38feb-87b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:be:93:3c:7a:bc:b8:e1:8b:60:06:4a:20: 77:09:41:51:8f:8f:e3:e4:cc:e6:26:8b:21:f8:01: a8:7e:ee:5f:fa:92:74:49:39:6e:6b:81:f3:3b:6e: be:3e:9b:9d:6d:3a:b5:f4:87:91:50:c0:db:eb:ab: 63:97:95:ad:62:72:4d:1a:3f:10:1a:88:2b:78:35: 63:09:33:3b:19:cc:69:76:6d:e4:9b:aa:70:71:d2: 35:68:d7:c2:d1:5a:89:9a:d2:cc:74:e7:d1:44:26: 2c:33:7e:46:18:35:28:fa:5b:54:00:c0:8a:fc:b4: 25:b6:4e:43:c4:5c:64:c1:d8:e8:c7:90:83:d2:c2: 6e:0e:11:0a:4a:9f:2f:43:aa:b2:0a:77:26:3d:f7: 4a:50:67:fa:b5:99:4d:11:b7:9e:93:f2:e1:3d:32: 6a:02:d8:ea:a8:bd:b2:b8:9d:f1:e1:96:ac:e8:b5: e0:e7:ca:d7:03:93:e7:e2:eb:d6:4b:43:2d:42:ee: e4:bb:99:c8:66:1e:e5:df:7c:cd:dc:60:3b:41:85: 48:5f:8d:cd:55:2e:2d:32:25:31:21:f8:a6:e3:d7: 55:8f:e2:00:81:0c:e6:1b:1f:45:3b:2a:4f:3b:ae: d4:05:ec:98:ae:6e:46:ca:8b:c1:6a:40:a4:e8:db: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FB:D7:AD:B0:28:21:1B:F9:91:B0:A4:7B:05:5E:5C:56:25:70:72 X509v3 Authority Key Identifier: keyid:CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6c:c8:4b:39:16:fa:7e:cb:a1:52:38:21:2f:e5:80:1f:0c: a0:bb:8a:96:19:6f:7e:cb:f7:c3:1c:39:f4:44:7c:f0:2d:ee: 90:69:25:1f:7b:a3:8d:31:89:73:f8:04:e1:d8:a7:68:b8:c6: 00:f9:59:80:78:4c:38:b1:22:47:ac:79:2f:bd:19:d7:1a:76: 62:4d:3b:8c:f4:c3:fc:ca:51:49:f0:c7:af:05:2e:20:98:fa: 8e:69:0d:52:5d:68:57:f7:bb:f9:34:c1:bd:98:70:3a:22:57: 96:8a:8e:53:0b:f3:f8:2c:56:29:82:f6:8a:47:6e:bc:c0:fd: 87:53:de:e9:2a:e3:f4:96:ef:21:f7:2e:4f:dd:37:27:ac:ed: bc:d2:34:5f:cd:9e:dc:68:2b:c7:f3:58:45:f2:8f:23:1b:f2: 21:20:f1:10:60:c3:e9:3d:eb:eb:7e:65:ba:84:c0:82:4d:16: 42:fd:b9:52:f4:1f:08:7f:01:8e:5f:be:c0:6b:77:9c:a8:09: 5c:a9:ae:0b:d5:64:6a:ef:db:12:cd:91:dc:6d:ae:25:4a:cc: 58:fa:d9:e1:8f:08:11:40:f3:6a:76:d9:5c:f4:9a:cb:a6:2a: 4b:32:ff:b9:76:c0:33:34:cf:b0:67:7d:15:05:d3:f9:e4:75: 8d:3e:23:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTg3QTExMC8GA1UEBRMoQ0E5MDEwNDdDRUEyNThGQ0I4QjM5QjAzNjREQTQ4QTI0 NjYyQjc0RDAeFw0yNjA5MjMwODM4MDNaFw0yNjA5MzAwODM4MDNaMBgxFjAUBgNV BAMTDTZhYjM4ZmViLTg3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWGr6TPHq8uOGLYAZKIHcJQVGPj+PkzOYmiyH4Aah+7l/6knRJOW5rgfM7br4+ m51tOrX0h5FQwNvrq2OXla1ick0aPxAaiCt4NWMJMzsZzGl2beSbqnBx0jVo18LR Woma0sx059FEJiwzfkYYNSj6W1QAwIr8tCW2TkPEXGTB2OjHkIPSwm4OEQpKny9D qrIKdyY990pQZ/q1mU0Rt56T8uE9MmoC2OqovbK4nfHhlqzoteDnytcDk+fi69ZL Qy1C7uS7mchmHuXffM3cYDtBhUhfjc1VLi0yJTEh+Kbj11WP4gCBDOYbH0U7Kk87 rtQF7JiubkbKi8FqQKTo2/gvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSvvXrbAo IRv5kbCkewVeXFYlcHIwHwYDVR0jBBgwFoAUypAQR86iWPy4s5sDZNpIokZit00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5ODdBLzIwOEM2QTc2OEIw ODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5NHM1c0RaTnBJb2taaXQw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXBBUVI4NmlXUHk0czVzRFpOcElva1ppdDAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 ODdBLzIwOEM2QTc2OEIwODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5 NHM1c0RaTnBJb2taaXQwMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApbMhLORb6fsuhUjghL+WAHwygu4qWGW9+y/fDHDn0RHzwLe6QaSUfe6ONMYlz +ATh2KdouMYA+VmAeEw4sSJHrHkvvRnXGnZiTTuM9MP8ylFJ8MevBS4gmPqOaQ1S XWhX97v5NMG9mHA6IleWio5TC/P4LFYpgvaKR268wP2HU97pKuP0lu8h9y5P3Tcn rO280jRfzZ7caCvH81hF8o8jG/IhIPEQYMPpPevrfmW6hMCCTRZC/blS9B8IfwGO X77Aa3ecqAlcqa4L1WRq79sSzZHcba4lSsxY+tnhjwgRQPNqdtlc9JrLpipLMv+5 dsAzNM+wZ30VBdP55HWNPiM/ -----END CERTIFICATE-----Generated at Fri Sep 25 03:47:35 2026 by rpki-client