$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: kV6REe9NjabYV75gWB7q9j1wtluRe/2D08Q7P1TrPm4= Subject key identifier: D8:55:F0:26:3B:06:42:C8:A4:F3:96:0C:97:12:27:B6:67:AB:35:EF Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0F94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0F74 Signing time: Tue 22 Sep 2026 17:26:20 +0000 Manifest this update: Tue 22 Sep 2026 17:26:19 +0000 Manifest next update: Tue 29 Sep 2026 17:26:19 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: sPIw4TgMKj9TJBnmhMqxzzpTWzFzKZUFeiLhiaC0tFY=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3988 (0xf94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Sep 22 17:26:19 2026 GMT Not After : Sep 29 17:26:19 2026 GMT Subject: CN=6ab2ba3b-0a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:e2:0b:11:b6:ef:a6:e6:03:fc:de:a5:16: e1:93:f3:a5:06:bf:65:cc:07:7e:11:dd:12:8a:68: b2:fb:80:3d:2b:e9:16:70:0a:c6:b7:ca:ae:72:b4: 7d:d1:80:e6:9d:14:c3:5b:b9:d8:1d:f7:cf:d8:06: 17:9d:c3:c5:d1:2e:2c:24:75:3b:26:af:3d:a5:41: 23:17:f0:df:64:b5:c1:c0:df:db:c2:06:a5:9a:7b: 0c:35:af:59:3b:35:e9:1f:7b:88:02:2a:9d:a4:db: 88:f3:ff:f4:2f:ba:8f:d1:c6:c0:92:e7:39:75:66: 4b:23:b5:b4:f2:c9:e6:e1:0d:b2:6f:6e:ee:4a:0e: eb:e5:06:14:95:6c:31:b5:7e:43:ba:de:a1:b6:a0: 0f:c9:9e:8e:c3:cb:b5:29:23:2a:88:e4:6c:aa:8d: eb:7a:fe:98:4c:17:1e:7a:27:a8:5b:71:1c:e2:5b: 16:66:48:26:19:01:f3:b3:d3:5a:5c:2a:00:67:bd: ec:22:e0:de:74:dc:3c:e4:85:29:a4:4d:b2:e9:36: b1:4a:fb:11:9f:48:ef:8a:5c:26:d1:9e:d2:ac:2e: 02:0c:bd:ea:77:0d:a6:d3:f8:8b:4f:25:99:cf:15: 00:1b:b0:dc:fd:ed:b8:2a:54:61:4a:ce:d0:d1:ac: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:55:F0:26:3B:06:42:C8:A4:F3:96:0C:97:12:27:B6:67:AB:35:EF X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:1c:c8:bc:e3:71:03:06:34:aa:58:55:6d:03:b2:bc:d8:7a: 69:dd:41:28:41:79:33:7b:24:e9:6c:ae:cd:ff:7f:9f:1b:90: 8a:9a:b5:de:e3:33:81:86:e8:39:c8:22:b4:3d:5b:2b:6e:2e: c6:4d:e7:a6:bd:07:3c:71:e9:e6:92:42:2a:55:6f:d4:71:c2: a5:97:b4:e1:25:c0:52:4f:44:95:fc:9f:56:ed:f7:2b:ce:49: 60:1e:57:87:89:78:ce:46:25:47:8d:5a:40:07:3e:7d:40:a9: a7:70:3f:b5:c0:96:71:b0:ff:a8:99:53:ca:24:59:f6:6a:1f: 65:9b:2d:88:6e:dd:2f:dd:2c:ac:52:18:98:1d:60:07:63:10: c8:62:e9:73:56:61:51:25:9a:45:f1:9b:ab:b0:a2:3f:90:96: 79:21:23:fa:81:63:ae:ed:6a:19:56:af:55:e0:68:cd:a5:86: b7:4d:af:85:bc:6f:46:ee:6c:72:fb:b9:25:2b:d9:79:21:de: b3:61:f0:e4:25:92:e7:fa:12:42:e3:f2:b0:97:28:67:a0:2b: e9:5c:64:f4:6c:a2:29:ce:33:fb:b9:f5:e8:23:05:1d:ee:63: bd:b0:d4:9a:35:5d:55:35:73:d9:83:d4:24:31:8f:7f:90:28: ed:4a:a1:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjYwOTIyMTcyNjE5WhcNMjYwOTI5MTcyNjE5WjAYMRYwFAYD VQQDEw02YWIyYmEzYi0wYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdjiCxG276bmA/zepRbhk/OlBr9lzAd+Ed0Simiy+4A9K+kWcArGt8qucrR9 0YDmnRTDW7nYHffP2AYXncPF0S4sJHU7Jq89pUEjF/DfZLXBwN/bwgalmnsMNa9Z OzXpH3uIAiqdpNuI8//0L7qP0cbAkuc5dWZLI7W08snm4Q2yb27uSg7r5QYUlWwx tX5Dut6htqAPyZ6Ow8u1KSMqiORsqo3rev6YTBceeieoW3Ec4lsWZkgmGQHzs9Na XCoAZ73sIuDedNw85IUppE2y6TaxSvsRn0jvilwm0Z7SrC4CDL3qdw2m0/iLTyWZ zxUAG7Dc/e24KlRhSs7Q0axFrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhV8CY7 BkLIpPOWDJcSJ7ZnqzXvMB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRzIvONxAwY0qlhVbQOyvNh6ad1BKEF5M3sk6Wyuzf9/nxuQipq13uMzgYbo OcgitD1bK24uxk3npr0HPHHp5pJCKlVv1HHCpZe04SXAUk9ElfyfVu33K85JYB5X h4l4zkYlR41aQAc+fUCpp3A/tcCWcbD/qJlTyiRZ9mofZZstiG7dL90srFIYmB1g B2MQyGLpc1ZhUSWaRfGbq7CiP5CWeSEj+oFjru1qGVavVeBozaWGt02vhbxvRu5s cvu5JSvZeSHes2Hw5CWS5/oSQuPysJcoZ6Ar6Vxk9GyiKc4z+7n16CMFHe5jvbDU mjVdVTVz2YPUJDGPf5Ao7Uqhyg== -----END CERTIFICATE-----Generated at Thu Sep 24 12:01:21 2026 by rpki-client