$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: ioinjbpibi/gVOnpSVU975w7B7+iOfODX4VLlun+aIQ= Subject key identifier: 1B:17:EE:FA:44:4B:66:6A:DD:B4:17:12:77:5A:34:58:CF:14:E7:3A Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 0217 Signing time: Fri 25 Sep 2026 02:58:59 +0000 Manifest this update: Fri 25 Sep 2026 02:58:59 +0000 Manifest next update: Fri 02 Oct 2026 02:58:59 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: iZSslEHsfbPG8wuVbIFRGvIQxnSqmZCpGZoS1+MZeKE=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: esJHSwP5qiLnITDA6HOx8pEFmC6BOBPZgF6kgLGLSk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Sep 25 02:58:59 2026 GMT Not After : Oct 2 02:58:59 2026 GMT Subject: CN=6ab5e373-d7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:fe:43:2e:18:2f:5d:9a:45:92:e9:31:8d: ee:b6:e6:ed:4a:7f:42:75:48:90:c6:5e:d8:fd:9b: 3c:19:97:5d:f8:2f:cd:07:a9:15:88:93:ec:7f:9c: 9f:25:18:1c:2a:e1:af:93:fc:6d:a7:86:3e:c0:3a: 98:c4:b9:dd:d7:af:da:db:ef:09:9a:0d:7d:20:21: d3:ba:cf:4a:bd:a0:df:df:ed:5d:4f:62:b0:8e:6b: 9f:4e:8e:6a:b5:9f:5c:1e:b6:d3:7f:73:44:31:aa: 3a:a3:fe:06:7c:87:49:e6:7d:ab:3c:bf:35:cd:62: 7e:1b:e5:ef:5d:65:fc:d8:4d:2a:55:ba:ca:5c:0e: cc:af:1b:fe:40:ee:0a:83:c1:f6:9a:52:30:f2:21: 5e:4c:aa:7a:49:a7:ee:c0:1c:cd:54:93:21:a2:71: 81:27:46:27:d4:71:28:e2:83:10:14:c7:47:12:f3: c4:56:56:16:f3:3d:3b:f2:df:9e:4a:83:c2:7b:8d: cb:13:e1:05:c3:33:7d:b7:cf:7f:55:29:a6:e2:73: 09:0c:36:13:98:56:26:b7:ca:8b:57:51:34:88:85: 8f:18:8e:c0:b6:17:8b:53:55:89:bd:6b:60:6b:84: ad:89:e8:27:71:ca:5f:a1:bc:82:63:2a:dc:23:70: 83:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:17:EE:FA:44:4B:66:6A:DD:B4:17:12:77:5A:34:58:CF:14:E7:3A X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:80:c2:8e:e2:7f:08:89:e4:f5:35:ee:51:a7:7d:0a:83:d9: 5f:ab:70:8f:45:d6:d0:92:f7:0d:e2:5d:5f:f5:08:fd:24:c2: 4f:33:5b:32:37:2e:9c:9a:fa:f9:9a:df:d5:27:d3:e9:29:68: b8:ae:63:e9:1d:20:f4:6c:69:ae:57:e0:a0:53:05:61:e1:3e: 86:27:24:73:9e:48:8f:5b:be:77:12:ea:f4:5a:1f:5e:34:a0: 9a:25:59:d8:36:f9:a2:c2:34:cd:b2:82:5e:09:37:2c:4d:0a: 51:0f:07:ca:40:78:c8:e2:c9:67:82:a6:a8:14:08:75:e4:2b: 83:ee:ad:78:45:84:2b:f6:62:dd:37:0a:c3:6e:7a:12:73:6a: ba:0d:66:25:a5:b6:21:cc:c3:ec:b9:f9:c7:3c:ce:cc:5e:21: c1:a9:d3:53:97:62:04:50:a2:65:c9:50:4c:7f:90:a2:37:3b: 24:28:ef:64:cf:19:79:f0:48:e8:25:98:46:b3:47:13:d9:64: 38:ce:c1:6a:31:17:5b:3b:2e:21:62:5b:73:4e:49:6d:03:e2: 76:f4:5e:67:04:3d:bc:e7:b1:93:b2:2d:de:a8:8f:c4:d2:23: ee:85:95:dc:27:85:1b:37:a5:f2:93:b5:6c:f6:d1:32:09:f1: d3:0c:96:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYwOTI1MDI1ODU5WhcNMjYxMDAyMDI1ODU5WjAYMRYwFAYD VQQDEw02YWI1ZTM3My1kN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2/+Qy4YL12aRZLpMY3utubtSn9CdUiQxl7Y/Zs8GZdd+C/NB6kViJPsf5yf JRgcKuGvk/xtp4Y+wDqYxLnd16/a2+8Jmg19ICHTus9KvaDf3+1dT2KwjmufTo5q tZ9cHrbTf3NEMao6o/4GfIdJ5n2rPL81zWJ+G+XvXWX82E0qVbrKXA7Mrxv+QO4K g8H2mlIw8iFeTKp6SafuwBzNVJMhonGBJ0Yn1HEo4oMQFMdHEvPEVlYW8z078t+e SoPCe43LE+EFwzN9t89/VSmm4nMJDDYTmFYmt8qLV1E0iIWPGI7AtheLU1WJvWtg a4StiegnccpfobyCYyrcI3CD/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsX7vpE S2Zq3bQXEndaNFjPFOc6MB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy4DCjuJ/CInk9TXuUad9CoPZX6twj0XW0JL3DeJdX/UI/STCTzNbMjcunJr6 +Zrf1SfT6SlouK5j6R0g9GxprlfgoFMFYeE+hickc55Ij1u+dxLq9FofXjSgmiVZ 2Db5osI0zbKCXgk3LE0KUQ8HykB4yOLJZ4KmqBQIdeQrg+6teEWEK/Zi3TcKw256 EnNqug1mJaW2IczD7Ln5xzzOzF4hwanTU5diBFCiZclQTH+Qojc7JCjvZM8ZefBI 6CWYRrNHE9lkOM7BajEXWzsuIWJbc05JbQPidvReZwQ9vOexk7It3qiPxNIj7oWV 3CeFGzel8pO1bPbRMgnx0wyWnQ== -----END CERTIFICATE-----Generated at Fri Sep 25 17:00:54 2026 by rpki-client