$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: TatQZ0FDK31z9Q3O1gJ50FTebUP3eyqonO8Nc1K1Rp8= Subject key identifier: 4E:8E:06:AA:9A:0F:63:8B:B2:B7:C7:1B:B6:F8:9A:17:23:80:EF:20 Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 02C6 Signing time: Fri 25 Sep 2026 01:19:52 +0000 Manifest this update: Fri 25 Sep 2026 01:19:52 +0000 Manifest next update: Fri 02 Oct 2026 01:19:52 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: pKtMHZGtAHbp4ZZ2Le4zA8Z55wlsnII/+u1+Mwv0Qzk=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: flivO9KZ3hNdVf6kTG0C2l09oeHTUSZTfnGjfG/rjIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Sep 25 01:19:52 2026 GMT Not After : Oct 2 01:19:52 2026 GMT Subject: CN=6ab5cc38-d867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:99:7b:72:02:ac:5d:d5:20:d4:35:97:4e: af:0b:62:18:cf:0f:77:7c:00:4a:fa:1c:0c:66:f9: d4:bb:af:46:98:0b:72:35:67:db:32:86:32:f2:7d: 3d:1e:d3:11:01:73:c4:b7:15:cc:8a:bc:9a:58:ab: 25:bc:29:54:ee:31:a5:52:a8:9d:ba:ea:b3:eb:93: 7d:b7:5c:ec:e2:6f:18:29:6d:78:5c:1f:c5:75:b0: 73:85:81:5b:e2:a8:71:e2:47:df:d5:74:d3:98:e4: 5d:7d:27:32:23:33:2c:4f:b3:46:eb:83:8f:b8:61: 3c:28:45:e9:65:b9:ad:d3:ac:ab:14:c5:8e:de:6a: e6:83:f8:d2:a1:99:74:cb:f2:27:97:3f:99:df:d8: ca:5d:0c:cc:e2:f1:64:cb:10:12:ee:33:b6:88:90: da:24:3b:3e:9c:52:0a:df:bd:f1:ba:c9:e2:f4:c9: ba:0c:8c:2c:d1:b5:74:91:e0:1a:2d:b5:ca:83:cd: af:90:7b:2a:37:5d:44:5d:7f:af:bd:10:9f:67:de: 86:f8:6b:c3:de:66:79:08:f1:0e:46:ae:13:4d:20: bd:d9:4c:6c:50:7a:07:65:43:26:a6:ca:bb:b4:f5: 65:0d:1c:a0:9a:27:67:11:a1:f9:ad:72:ae:1c:f7: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8E:06:AA:9A:0F:63:8B:B2:B7:C7:1B:B6:F8:9A:17:23:80:EF:20 X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:8a:ac:1e:a9:fa:d9:3c:f7:c6:be:7a:30:44:eb:d5:5f: 47:8b:6a:d4:27:7d:2d:81:6c:eb:da:b8:cc:fc:c8:68:3e:df: b2:46:ad:9b:ae:88:a4:03:43:da:c6:3b:cb:a6:6c:d5:4c:41: e3:b7:f9:ae:d8:06:fb:8d:c9:6e:3b:a9:51:28:5d:c4:8b:d0: 35:19:b0:a9:1c:98:f4:7e:69:ae:5a:b9:7c:4a:8b:cb:80:85: 11:32:b9:71:f2:d7:18:84:ec:59:82:e0:c9:79:71:4e:af:e1: ec:db:f9:a5:33:2b:ae:74:f4:4e:b9:bb:88:35:78:14:dc:13: 2d:49:99:8e:83:c6:3f:a4:15:92:0d:b8:b2:df:92:7d:a0:02: 12:b3:21:56:e5:de:77:46:cd:db:9a:e3:3b:d8:76:e2:b4:8c: 6d:35:e9:f7:ee:ff:22:77:a5:09:3d:99:68:0a:38:77:a8:88: 84:ee:a2:db:36:c8:f0:0a:a1:36:fe:49:8a:db:5d:c0:25:cf: 68:8e:78:84:50:30:5a:fc:93:ca:f1:cd:94:2d:75:53:92:4f: b9:e6:07:40:37:aa:53:a9:4d:8b:80:7b:68:43:dc:14:49:d3: 86:16:2e:9b:db:0e:c7:39:a7:c1:47:2d:25:ed:00:ae:fc:2f: 77:e8:25:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjYwOTI1MDExOTUyWhcNMjYxMDAyMDExOTUyWjAYMRYwFAYD VQQDEw02YWI1Y2MzOC1kODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDuZe3ICrF3VINQ1l06vC2IYzw93fABK+hwMZvnUu69GmAtyNWfbMoYy8n09 HtMRAXPEtxXMiryaWKslvClU7jGlUqiduuqz65N9t1zs4m8YKW14XB/FdbBzhYFb 4qhx4kff1XTTmORdfScyIzMsT7NG64OPuGE8KEXpZbmt06yrFMWO3mrmg/jSoZl0 y/Inlz+Z39jKXQzM4vFkyxAS7jO2iJDaJDs+nFIK373xusni9Mm6DIws0bV0keAa LbXKg82vkHsqN11EXX+vvRCfZ96G+GvD3mZ5CPEORq4TTSC92UxsUHoHZUMmpsq7 tPVlDRygmidnEaH5rXKuHPe7NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6OBqqa D2OLsrfHG7b4mhcjgO8gMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp3mKrB6p+tk898a+ejBE69VfR4tq1Cd9LYFs69q4zPzIaD7fskatm66IpAND 2sY7y6Zs1UxB47f5rtgG+43JbjupUShdxIvQNRmwqRyY9H5prlq5fEqLy4CFETK5 cfLXGITsWYLgyXlxTq/h7Nv5pTMrrnT0Trm7iDV4FNwTLUmZjoPGP6QVkg24st+S faACErMhVuXed0bN25rjO9h24rSMbTXp9+7/InelCT2ZaAo4d6iIhO6i2zbI8Aqh Nv5JittdwCXPaI54hFAwWvyTyvHNlC11U5JPueYHQDeqU6lNi4B7aEPcFEnThhYu m9sOxzmnwUctJe0Arvwvd+glqA== -----END CERTIFICATE-----Generated at Fri Sep 25 21:45:49 2026 by rpki-client