$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: R3FBhoa7Tw4MGE28kwHuM6a8nC8BZapie7YjrS8O/jQ= Subject key identifier: 73:58:7E:41:BD:C8:49:98:C7:89:36:B6:4B:D4:32:83:17:76:8E:65 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 023C Signing time: Fri 25 Sep 2026 02:40:26 +0000 Manifest this update: Fri 25 Sep 2026 02:40:26 +0000 Manifest next update: Fri 02 Oct 2026 02:40:26 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: k9Gr+AUT/lYUXowKyGc05JGgvUaXGul/FkCwTTUWo3A=) 2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 3: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=) 4: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Sep 25 02:40:26 2026 GMT Not After : Oct 2 02:40:26 2026 GMT Subject: CN=6ab5df1a-5f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:65:de:c9:77:55:e0:a3:74:51:55:bf:83: 0f:51:78:76:84:a2:75:b9:cc:db:e2:0a:9c:99:f2: 73:bc:ec:a6:d8:1a:66:12:30:6a:44:fd:fc:b4:93: fe:41:24:55:33:91:d2:d7:9e:67:13:83:c3:fa:97: 7f:d4:91:57:ac:97:33:fd:38:0b:04:a0:cf:ec:e0: 53:4b:59:6b:75:e2:e1:de:1a:2f:b8:54:41:d1:96: 8a:67:47:be:c6:fe:03:79:78:8e:e1:e9:15:dd:a5: 6d:60:b3:e4:f0:33:23:72:b4:5c:cb:60:d2:49:44: c1:d4:49:82:a6:0c:cd:95:03:08:93:88:35:cd:9f: 36:db:4d:31:28:41:0b:e4:89:be:5e:54:99:70:53: 4a:18:c9:bf:27:c6:a4:e4:3b:ec:50:a1:32:20:a2: a3:3b:89:c0:a1:c1:cb:48:07:d0:90:cb:c6:31:7a: 0b:27:c4:0d:c7:dd:13:75:07:d2:1b:32:f4:ba:3f: 48:57:5d:57:86:19:5b:c5:79:f4:9d:e1:0e:99:79: d8:93:f8:c9:ac:8e:e9:15:e2:a7:6a:56:22:15:d3: 96:41:a1:0e:cc:f6:df:89:e5:c6:e0:4a:61:f2:0e: fb:e2:63:18:9d:c5:42:ea:1c:c6:05:12:07:f4:c0: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:7E:41:BD:C8:49:98:C7:89:36:B6:4B:D4:32:83:17:76:8E:65 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:ed:69:b3:fa:18:38:d6:68:aa:a5:5f:8b:01:07:ab:92:fc: 67:de:4b:f6:db:97:b5:c3:48:f1:cc:37:16:0a:56:97:0f:9e: cc:b4:9d:7b:a2:4b:4c:4e:06:9d:e4:cc:e1:d2:53:0d:6c:79: 46:de:60:2c:45:c2:2f:36:a1:23:a9:e8:50:21:09:04:46:fc: ce:5b:a0:25:77:ed:f2:bf:48:d5:2a:2d:31:77:e2:43:58:1a: cb:59:2a:47:24:dc:b5:e6:5e:93:55:ef:61:89:d8:fa:44:aa: aa:4a:d7:6c:ab:b2:b3:e4:ee:c1:26:e7:b3:32:d3:0e:07:58: f6:93:f5:54:3a:76:5a:ce:41:5c:2e:4a:f0:7c:e8:66:67:78: b1:d8:e7:23:6c:03:19:ff:fe:8f:88:ab:99:90:ba:f5:07:d0: 1d:69:86:4f:e7:40:0d:a1:c7:06:f7:44:3b:a2:5e:1c:10:b7: 3c:8d:8b:f0:e4:8b:ba:9c:38:f1:a7:dd:6c:87:2d:f3:7c:e1: 77:de:be:49:1f:73:50:19:2e:dc:61:3b:3c:17:11:9e:7b:af: 9a:1c:0d:c1:e1:1c:e1:5b:c4:55:43:1e:7e:8c:b8:6c:3f:ea: 25:97:4e:23:6a:1a:44:90:dd:54:47:a0:72:2b:e5:ac:7d:04: 04:08:55:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwOTI1MDI0MDI2WhcNMjYxMDAyMDI0MDI2WjAYMRYwFAYD VQQDEw02YWI1ZGYxYS01ZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni5l3sl3VeCjdFFVv4MPUXh2hKJ1uczb4gqcmfJzvOym2BpmEjBqRP38tJP+ QSRVM5HS155nE4PD+pd/1JFXrJcz/TgLBKDP7OBTS1lrdeLh3hovuFRB0ZaKZ0e+ xv4DeXiO4ekV3aVtYLPk8DMjcrRcy2DSSUTB1EmCpgzNlQMIk4g1zZ82200xKEEL 5Im+XlSZcFNKGMm/J8ak5DvsUKEyIKKjO4nAocHLSAfQkMvGMXoLJ8QNx90TdQfS GzL0uj9IV11XhhlbxXn0neEOmXnYk/jJrI7pFeKnalYiFdOWQaEOzPbfieXG4Eph 8g774mMYncVC6hzGBRIH9MC5BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNYfkG9 yEmYx4k2tkvUMoMXdo5lMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5e1ps/oYONZoqqVfiwEHq5L8Z95L9tuXtcNI8cw3FgpWlw+ezLSde6JLTE4G neTM4dJTDWx5Rt5gLEXCLzahI6noUCEJBEb8zlugJXft8r9I1SotMXfiQ1gay1kq RyTcteZek1XvYYnY+kSqqkrXbKuys+TuwSbnszLTDgdY9pP1VDp2Ws5BXC5K8Hzo Zmd4sdjnI2wDGf/+j4irmZC69QfQHWmGT+dADaHHBvdEO6JeHBC3PI2L8OSLupw4 8afdbIct83zhd96+SR9zUBku3GE7PBcRnnuvmhwNweEc4VvEVUMefoy4bD/qJZdO I2oaRJDdVEegcivlrH0EBAhVhQ== -----END CERTIFICATE-----Generated at Fri Sep 25 07:00:58 2026 by rpki-client