$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: oMZTMSRxTS/FxU5xgne4CkQM0KmZu6QMzV7cR3b5xiM= Subject key identifier: D2:2E:C5:86:9E:8B:59:EB:8D:33:B1:90:92:E0:29:DB:9B:14:B9:EA Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0E65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0E4A Signing time: Tue 22 Sep 2026 17:40:28 +0000 Manifest this update: Tue 22 Sep 2026 17:40:28 +0000 Manifest next update: Tue 29 Sep 2026 17:40:28 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: d2Nd4lB6SWoDoKWoVsp/6F6HfG6ODSNdqwGtsJuvABw=) 2: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: YHt1SbNsyMG4Q62rnhZuMa3T8SKHY5G8WGqZLcUa22M=) 3: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE=) 4: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: nT2sh7uqTi1U5cwmoFpAbizu4Ra0Y+5JbyS+sH+1hZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Sep 22 17:40:28 2026 GMT Not After : Sep 29 17:40:28 2026 GMT Subject: CN=6ab2bd8c-0cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:13:0d:9a:67:5c:af:4e:13:ff:fe:7e:7e: ee:54:ee:8d:19:ef:b1:9a:f8:73:6d:bd:02:f1:a8: 54:18:1a:61:ff:5d:9d:75:67:0a:90:7a:5b:63:f5: 6d:6d:f1:be:85:6a:6d:f2:ba:6a:fc:b3:de:8a:2b: c1:29:74:e4:4d:4e:ba:b9:88:e6:0c:a2:36:17:1d: 3a:0d:05:9e:68:12:a3:85:33:63:b7:4d:81:dc:13: c0:0c:cf:f0:af:32:3c:44:13:43:6b:59:ee:2e:c3: dc:00:24:6a:c6:5c:89:d3:9f:1c:2d:98:45:3e:74: 66:8e:51:bb:c7:26:d5:41:fc:94:15:7b:77:bb:ff: 7c:0d:57:18:8c:92:74:70:06:2f:8c:55:27:4b:c5: 12:6e:64:19:54:bf:91:10:cf:15:60:72:89:92:b7: 3e:1b:59:40:6b:d6:43:a6:fe:7f:5f:53:9f:bb:27: 2c:07:d4:b7:9e:8d:35:7f:54:15:ae:cf:e1:6e:71: 47:5d:d0:d2:fe:d8:21:bb:0b:c6:d2:d2:79:a1:10: d7:38:f0:66:0e:7b:31:fa:df:76:a5:1e:1f:f6:ef: ce:85:c6:93:d8:ff:cf:ce:99:29:6f:82:6e:35:29: b0:97:da:d3:75:11:76:ed:f7:a0:f9:43:00:45:6f: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:C5:86:9E:8B:59:EB:8D:33:B1:90:92:E0:29:DB:9B:14:B9:EA X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a3:3a:ee:33:a2:2c:78:de:a0:6f:da:01:2b:70:57:7b:ab: 73:bb:06:b4:1a:fb:97:82:35:03:c0:f4:bd:f9:57:a6:c2:38: ae:46:05:4a:a4:fe:0f:c6:ca:03:44:54:3f:7f:59:1b:52:73: d2:52:48:1c:9d:7a:7f:7f:db:93:8b:b4:b4:2b:19:c5:fe:b7: 3c:10:5e:f5:40:ce:9f:a7:e8:24:d9:ce:24:a4:0a:04:fd:b4: bc:24:57:a5:a3:9b:22:b7:af:e9:a5:e1:bd:f7:b0:e5:a5:59: 79:a2:99:48:77:67:e9:24:64:c9:ac:76:42:26:6d:69:af:60: eb:69:6d:f4:61:ce:f5:c9:29:62:7a:7f:ff:0c:02:9a:c8:5a: 79:c1:c4:1d:c4:4d:8a:46:97:8d:36:c4:15:ef:66:3a:2e:c0: a4:45:db:22:c2:b9:f0:64:92:67:e7:3e:f4:c1:9f:d0:4f:03: d7:bb:22:ec:e0:e3:e3:64:c6:45:bb:77:30:12:e9:9b:9a:c5: ee:88:62:1a:06:ea:d5:45:5f:49:95:fd:e9:3e:c3:43:1d:41: 0d:1b:51:0a:b2:be:eb:a7:85:cd:42:23:d0:ba:cc:91:5e:08: 47:e0:c3:76:40:cf:6d:55:7c:f3:78:a1:39:cf:da:08:98:e5: 7d:7e:41:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjYwOTIyMTc0MDI4WhcNMjYwOTI5MTc0MDI4WjAYMRYwFAYD VQQDEw02YWIyYmQ4Yy0wY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHsTDZpnXK9OE//+fn7uVO6NGe+xmvhzbb0C8ahUGBph/12ddWcKkHpbY/Vt bfG+hWpt8rpq/LPeiivBKXTkTU66uYjmDKI2Fx06DQWeaBKjhTNjt02B3BPADM/w rzI8RBNDa1nuLsPcACRqxlyJ058cLZhFPnRmjlG7xybVQfyUFXt3u/98DVcYjJJ0 cAYvjFUnS8USbmQZVL+REM8VYHKJkrc+G1lAa9ZDpv5/X1OfuycsB9S3no01f1QV rs/hbnFHXdDS/tghuwvG0tJ5oRDXOPBmDnsx+t92pR4f9u/OhcaT2P/Pzpkpb4Ju NSmwl9rTdRF27feg+UMARW/w8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIuxYae i1nrjTOxkJLgKdubFLnqMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt6M67jOiLHjeoG/aAStwV3urc7sGtBr7l4I1A8D0vflXpsI4rkYFSqT+D8bK A0RUP39ZG1Jz0lJIHJ16f3/bk4u0tCsZxf63PBBe9UDOn6foJNnOJKQKBP20vCRX paObIrev6aXhvfew5aVZeaKZSHdn6SRkyax2QiZtaa9g62lt9GHO9ckpYnp//wwC mshaecHEHcRNikaXjTbEFe9mOi7ApEXbIsK58GSSZ+c+9MGf0E8D17si7ODj42TG Rbt3MBLpm5rF7ohiGgbq1UVfSZX96T7DQx1BDRtRCrK+66eFzUIj0LrMkV4IR+DD dkDPbVV883ihOc/aCJjlfX5BmA== -----END CERTIFICATE-----Generated at Thu Sep 24 04:23:55 2026 by rpki-client