$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: DChii5F+PFzTNhrLVdM/TpBeJCv9lWeZnzy5I+taIOM= Subject key identifier: 13:3C:BA:E0:8F:DE:CD:D0:1A:2E:78:B1:4A:45:C8:0A:43:F0:DB:46 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 0850 Signing time: Tue 22 Sep 2026 20:46:41 +0000 Manifest this update: Tue 22 Sep 2026 20:46:40 +0000 Manifest next update: Tue 29 Sep 2026 20:46:40 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: +SUASPbTVmAErYr4sxJwjVTlJUNL1ZMdu7dvKvPy1po=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: zGjBv3KjTdJ9K8ezQZ4lGTuieMHEGvxttP2L5olrWPo=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: Bjs5lfBqpZzgmWDJV0Xu1gn8UB3T2IWjUyjfP7AxZYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Sep 22 20:46:40 2026 GMT Not After : Sep 29 20:46:40 2026 GMT Subject: CN=6ab2e930-3f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:b6:6a:ab:d9:84:d3:c4:9e:f4:e5:b5:2c: 82:d7:e9:2b:d1:c3:b1:76:a2:0c:59:bb:e5:ac:94: 42:fd:af:3f:f2:3b:7a:57:f9:d5:1b:1b:e5:fe:ae: 38:cd:4b:64:f1:4a:7a:9d:4e:d1:31:40:5a:76:49: 98:c5:ba:9a:c2:7e:93:ce:ba:92:73:15:6e:74:4f: 3b:dc:92:21:f1:a3:b5:8f:98:33:58:0a:8e:06:c7: 2e:ce:a2:d4:d8:6c:84:47:ed:2f:9e:b5:bb:8c:a2: 7a:4f:7a:4b:f2:41:32:06:77:95:e8:4a:22:18:97: ef:85:f0:f8:0b:9f:b3:72:38:97:78:d1:73:16:e6: 67:ff:cb:9b:4b:4c:68:b9:2c:de:12:1c:d2:bd:c6: f0:7f:e5:29:fc:c8:0b:1b:65:8b:e6:63:72:3e:50: 69:5b:20:52:fb:b3:ee:c6:f7:e5:9f:7a:01:d3:25: 2d:f6:0a:70:39:c3:37:9c:a2:fc:07:cf:df:44:91: fe:da:44:e8:11:a7:58:27:ef:30:bc:ce:e2:c9:d9: ce:ce:d4:84:f0:51:eb:a2:3a:c6:e4:9f:cc:f3:8a: ac:ec:77:56:0c:11:09:58:34:36:dd:dd:85:78:4b: 87:38:a7:84:6f:24:47:28:e1:c4:f6:ef:63:fb:d2: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3C:BA:E0:8F:DE:CD:D0:1A:2E:78:B1:4A:45:C8:0A:43:F0:DB:46 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:39:bf:d9:9c:5d:c4:c7:e9:c6:f1:8c:ef:5a:e8:eb:cd:0b: e1:c4:f0:17:4d:6d:8e:f3:9d:d0:5a:0f:aa:6c:9a:0f:04:58: b0:cf:b0:9e:22:c7:d2:2e:18:00:9b:7c:52:f6:79:13:ea:9b: 7b:20:77:71:78:f2:a5:7e:c8:30:ca:d9:9e:3f:51:c7:68:83: 07:42:8e:9b:ea:ad:13:ee:c8:13:c4:e5:b4:76:c0:e7:a9:42: ca:b9:a8:62:27:cc:0a:34:86:49:d7:07:05:78:79:48:4d:50: fe:da:54:4a:d4:3b:c2:13:dc:72:89:d4:85:4c:71:f9:19:d7: 83:44:31:ce:44:d6:2c:1a:07:57:a1:ff:b9:31:02:93:5e:2b: 1f:47:91:ac:bb:1e:3d:c6:3f:92:ef:70:45:08:c5:30:4f:72: c0:76:18:07:08:fc:1e:e6:ba:7e:a1:e8:01:74:fe:f6:4c:bb: ce:ad:67:10:61:38:f4:86:48:32:d4:86:3e:6f:29:bd:d9:05: c8:11:e1:13:71:57:45:f1:22:48:8c:a0:5c:58:8b:aa:cf:52: e3:bf:23:b3:01:e4:73:b4:45:39:38:d8:07:d8:36:25:d2:ce: 0c:82:70:35:d0:fd:0a:6b:3c:50:29:c4:bb:91:06:69:fb:bf: 61:6a:e3:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjYwOTIyMjA0NjQwWhcNMjYwOTI5MjA0NjQwWjAYMRYwFAYD VQQDEw02YWIyZTkzMC0zZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VC2aqvZhNPEnvTltSyC1+kr0cOxdqIMWbvlrJRC/a8/8jt6V/nVGxvl/q44 zUtk8Up6nU7RMUBadkmYxbqawn6TzrqScxVudE873JIh8aO1j5gzWAqOBscuzqLU 2GyER+0vnrW7jKJ6T3pL8kEyBneV6EoiGJfvhfD4C5+zcjiXeNFzFuZn/8ubS0xo uSzeEhzSvcbwf+Up/MgLG2WL5mNyPlBpWyBS+7Puxvfln3oB0yUt9gpwOcM3nKL8 B8/fRJH+2kToEadYJ+8wvM7iydnOztSE8FHrojrG5J/M84qs7HdWDBEJWDQ23d2F eEuHOKeEbyRHKOHE9u9j+9KpcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBM8uuCP 3s3QGi54sUpFyApD8NtGMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHDm/2ZxdxMfpxvGM71ro680L4cTwF01tjvOd0FoPqmyaDwRYsM+wniLH0i4Y AJt8UvZ5E+qbeyB3cXjypX7IMMrZnj9Rx2iDB0KOm+qtE+7IE8TltHbA56lCyrmo YifMCjSGSdcHBXh5SE1Q/tpUStQ7whPcconUhUxx+RnXg0QxzkTWLBoHV6H/uTEC k14rH0eRrLsePcY/ku9wRQjFME9ywHYYBwj8Hua6fqHoAXT+9ky7zq1nEGE49IZI MtSGPm8pvdkFyBHhE3FXRfEiSIygXFiLqs9S478jswHkc7RFOTjYB9g2JdLODIJw NdD9Cms8UCnEu5EGafu/YWrjfA== -----END CERTIFICATE-----Generated at Wed Sep 23 07:21:57 2026 by rpki-client