$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: 8xq359WOCfMCpFVVEJiMGoHmQL4P5BjrpP125TRMSzU= Subject key identifier: 91:53:69:74:15:30:61:1D:BB:36:DA:D9:E2:1C:B8:E0:13:13:28:CD Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0B07 Signing time: Thu 24 Sep 2026 19:16:55 +0000 Manifest this update: Thu 24 Sep 2026 19:16:54 +0000 Manifest next update: Thu 01 Oct 2026 19:16:54 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: qNeYjcmnYWE1vcL0uzHHmPrc1xrfvPccnwwwgpiIYOo=) 2: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: 1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=) 3: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: 9jHgiW6B1sqLvSJnd17xl6prg5mUxXRdfL0P2w6JRHY=) 4: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: B7PIpT06o5yz5X0ICfGhNE1RjQ8ofk6sdiEjNK1EArU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Sep 24 19:16:54 2026 GMT Not After : Oct 1 19:16:54 2026 GMT Subject: CN=6ab57727-f13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:4b:eb:14:a1:14:03:6d:46:84:82:93:10: 78:3b:66:7c:0f:60:8f:69:38:85:3b:77:af:03:fb: a5:b7:f2:93:6d:d5:94:73:8b:58:1a:49:47:4d:68: ef:c4:3e:ba:00:c9:34:2d:43:76:aa:a6:7f:88:bc: 57:03:d1:ed:c2:a5:00:7c:13:66:f4:2a:a0:a7:12: f6:1c:72:a3:08:87:a0:c0:7d:73:7b:f8:55:51:62: dd:ce:ec:b7:bd:ac:58:11:e4:bc:9e:e8:97:48:6a: fb:32:eb:4b:90:bf:c5:70:74:2c:b2:31:46:d6:ff: 19:ae:ad:0b:9b:2d:b1:2d:d0:2a:ff:b5:07:f2:0f: 4f:4f:75:ae:8d:1c:27:71:fe:69:a4:5a:0e:16:e5: 8c:5d:df:b0:e8:48:07:14:44:52:6a:0d:1b:f6:fa: a3:6a:23:be:68:d3:95:6c:45:97:1b:c3:9a:58:77: bf:32:9c:be:58:5f:a1:89:f5:ff:a0:3d:ea:ef:a4: 31:ac:22:1e:4c:70:42:d1:f9:4a:a7:68:e0:b9:c4: 86:81:de:7d:62:6e:06:b9:9b:98:70:1b:30:99:c1: ad:49:a7:7d:6c:e6:c1:82:05:6d:6e:17:e1:c9:ae: 4c:61:b6:5e:06:cb:c2:98:8f:dc:3b:02:b6:72:95: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:53:69:74:15:30:61:1D:BB:36:DA:D9:E2:1C:B8:E0:13:13:28:CD X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:0c:7e:37:6d:66:b0:38:65:58:d5:1c:3c:d7:e7:94:73: cc:35:1a:02:a7:ec:d4:40:1f:0f:16:a7:95:9e:75:ca:5d:42: 4c:30:32:5f:f4:1c:f3:3d:e9:b6:83:f9:59:c4:43:18:7c:54: 63:0e:0e:1f:3c:5e:a2:e8:26:7c:cb:2f:fe:95:93:ba:45:4a: 36:d2:5f:f9:eb:47:c3:7b:24:38:2f:34:cb:dd:54:0a:cc:c7: b2:09:71:d0:da:5e:20:e6:af:d8:9e:19:ac:9a:12:28:c7:b8: ed:cc:51:6c:1f:05:c3:1c:5a:27:85:fe:e3:fd:c5:21:8a:c4: a0:c5:78:54:6d:b0:8c:d9:84:01:8b:4c:21:c8:4d:a9:0b:19: 6d:cf:0d:06:32:05:54:db:b2:a5:57:e8:29:82:70:bf:09:04: aa:7a:33:42:75:86:09:3d:73:22:6c:89:93:58:86:6b:25:a4: 67:22:99:2b:68:11:df:a0:12:c7:be:dc:f2:2b:c4:cd:b1:49: 0a:b2:90:5a:60:2b:00:9c:c1:01:12:e2:9e:f8:84:78:cf:8c: ab:64:c8:81:56:4e:29:6a:3d:21:df:f3:30:cc:ad:15:79:d0: 25:59:8e:e7:10:05:4b:cc:ce:8b:73:aa:3c:4c:93:10:10:dd: 60:2f:a2:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYwOTI0MTkxNjU0WhcNMjYxMDAxMTkxNjU0WjAYMRYwFAYD VQQDEw02YWI1NzcyNy1mMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqpL6xShFANtRoSCkxB4O2Z8D2CPaTiFO3evA/ult/KTbdWUc4tYGklHTWjv xD66AMk0LUN2qqZ/iLxXA9HtwqUAfBNm9CqgpxL2HHKjCIegwH1ze/hVUWLdzuy3 vaxYEeS8nuiXSGr7MutLkL/FcHQssjFG1v8Zrq0Lmy2xLdAq/7UH8g9PT3WujRwn cf5ppFoOFuWMXd+w6EgHFERSag0b9vqjaiO+aNOVbEWXG8OaWHe/Mpy+WF+hifX/ oD3q76QxrCIeTHBC0flKp2jgucSGgd59Ym4GuZuYcBswmcGtSad9bObBggVtbhfh ya5MYbZeBsvCmI/cOwK2cpVEsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFTaXQV MGEduzba2eIcuOATEyjNMB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/8MfjdtZrA4ZVjVHDzX55RzzDUaAqfs1EAfDxanlZ51yl1CTDAyX/Qc8z3p toP5WcRDGHxUYw4OHzxeougmfMsv/pWTukVKNtJf+etHw3skOC80y91UCszHsglx 0NpeIOav2J4ZrJoSKMe47cxRbB8FwxxaJ4X+4/3FIYrEoMV4VG2wjNmEAYtMIchN qQsZbc8NBjIFVNuypVfoKYJwvwkEqnozQnWGCT1zImyJk1iGayWkZyKZK2gR36AS x77c8ivEzbFJCrKQWmArAJzBARLinviEeM+Mq2TIgVZOKWo9Id/zMMytFXnQJVmO 5xAFS8zOi3OqPEyTEBDdYC+iTQ== -----END CERTIFICATE-----Generated at Fri Sep 25 19:07:45 2026 by rpki-client