$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json) Hash identifier: ISA1mEjTI+N6OnGFTsRWu5Mv/Z4ee7mkHuUswYOyxv8= Subject key identifier: 28:95:5C:22:4E:F1:DF:CC:39:16:B4:7A:D2:D4:3A:07:14:C8:A0:90 Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft Manifest number: 0887 Signing time: Tue 22 Sep 2026 20:32:05 +0000 Manifest this update: Tue 22 Sep 2026 20:32:05 +0000 Manifest next update: Tue 29 Sep 2026 20:32:05 +0000 Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: aTXqb/YPLQ54b84HUY54/X5Fy+l6WZfuv+3EYfdIgxM=) 2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: ariwM0UNsN9RHsI11tEsRZAkUo+gH7DpYJGLIoLRlPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Validity Not Before: Sep 22 20:32:05 2026 GMT Not After : Sep 29 20:32:05 2026 GMT Subject: CN=6ab2e5c5-8603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:71:bc:1f:ee:20:1b:73:e1:15:e4:f6:86: 5c:2d:be:03:71:d1:74:8a:ba:67:27:58:b8:01:23: f1:d5:31:e4:d3:bf:b7:42:f1:f9:96:8e:36:b7:74: de:ef:32:b3:05:45:68:cb:4d:eb:64:f4:24:07:f7: 75:e2:dc:b0:bd:18:07:30:0f:f6:45:3c:de:5c:e3: 43:0e:ca:d4:bd:6b:36:f6:57:ff:32:04:77:1c:a9: ab:00:04:43:a5:49:5c:21:33:2d:44:31:b5:a6:8b: b8:79:6b:b8:7d:85:d7:51:7d:71:13:41:cb:30:21: bc:6f:6d:5b:70:72:80:f3:2f:98:f9:19:f5:cb:39: 43:5b:e3:a7:30:da:7e:5d:89:71:b7:7d:60:3f:da: 6b:8e:d5:8a:f6:57:b5:a5:92:aa:9c:ba:5a:87:91: 83:b0:b9:39:64:c0:31:3a:e9:b5:e9:ce:b9:8d:5b: 3f:00:d1:35:75:18:93:96:61:53:7b:41:96:37:da: eb:c4:2e:06:5f:db:19:ff:de:73:51:54:da:81:6b: 10:5d:7e:01:39:15:a5:6c:32:b2:42:94:d1:c7:b5: b4:bf:9d:4b:6b:f2:dc:ff:c6:2a:73:13:8f:b4:91: 82:2f:79:47:85:c9:c7:5f:40:99:be:8e:e7:16:ea: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:95:5C:22:4E:F1:DF:CC:39:16:B4:7A:D2:D4:3A:07:14:C8:A0:90 X509v3 Authority Key Identifier: keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:d8:ba:a3:3b:68:84:36:8a:14:aa:9b:59:8d:e9:25:10:d5: 7a:5d:bf:73:77:4e:fc:49:b0:ce:33:4f:fc:9f:53:32:01:85: 56:c0:95:d5:77:a4:19:53:c2:f2:80:ff:f6:3a:62:cc:49:ee: e7:2a:df:d1:e2:bd:56:04:de:63:09:f1:30:aa:58:cd:ea:3c: f3:64:c6:09:14:dc:71:bb:56:c7:7f:34:4f:74:0a:b3:b6:d1: e2:54:c4:12:03:87:bf:64:aa:a1:e6:77:c1:a9:07:d4:10:fd: 6b:57:04:1b:d5:1b:cd:0d:42:36:6d:23:17:bf:6d:50:4a:78: 36:66:d8:2c:74:9e:2b:aa:3b:4c:17:c7:0a:a0:ad:ac:de:cc: db:19:62:12:42:dd:1b:7f:fe:4f:64:af:4e:6b:54:5b:3a:8a: e0:9c:dc:7d:f7:ae:a1:f8:8d:8e:d5:02:64:10:f8:76:59:31: b9:2c:e5:c4:d0:d3:8f:c8:1b:de:1a:b8:f0:d7:97:5e:c6:d5: 40:2b:ef:0d:bc:29:1d:37:00:22:bb:39:be:6f:9c:c6:cf:01: 57:6f:cc:b8:3c:5f:3b:b8:ee:99:65:98:01:ac:b3:15:e5:f9: 9f:40:a3:d6:e8:d6:d2:50:85:ce:37:72:28:07:e1:cc:e5:b2: 94:d1:c4:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0MkUxMTAvBgNVBAUTKENBODVFMTMzQzFFMjM5NjE0QzlDNTc3ODAxMThCREIz MDk1MjhFNzYwHhcNMjYwOTIyMjAzMjA1WhcNMjYwOTI5MjAzMjA1WjAYMRYwFAYD VQQDEw02YWIyZTVjNS04NjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJ9xvB/uIBtz4RXk9oZcLb4DcdF0irpnJ1i4ASPx1THk07+3QvH5lo42t3Te 7zKzBUVoy03rZPQkB/d14tywvRgHMA/2RTzeXONDDsrUvWs29lf/MgR3HKmrAARD pUlcITMtRDG1pou4eWu4fYXXUX1xE0HLMCG8b21bcHKA8y+Y+Rn1yzlDW+OnMNp+ XYlxt31gP9prjtWK9le1pZKqnLpah5GDsLk5ZMAxOum16c65jVs/ANE1dRiTlmFT e0GWN9rrxC4GX9sZ/95zUVTagWsQXX4BORWlbDKyQpTRx7W0v51La/Lc/8YqcxOP tJGCL3lHhcnHX0CZvo7nFuo6PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiVXCJO 8d/MORa0etLUOgcUyKCQMB8GA1UdIwQYMBaAFMqF4TPB4jlhTJxXeAEYvbMJUo52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQyRS9ENkE3RkY0ODBE MTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9XRk1uRmQ0QVJpOXN3bFNq blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvWGhNOEhpT1dGTW5GZDRBUmk5c3dsU2puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQyRS9ENkE3RkY0ODBEMTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9X Rk1uRmQ0QVJpOXN3bFNqblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv9i6oztohDaKFKqbWY3pJRDVel2/c3dO/EmwzjNP/J9TMgGFVsCV1XekGVPC 8oD/9jpizEnu5yrf0eK9VgTeYwnxMKpYzeo882TGCRTccbtWx380T3QKs7bR4lTE EgOHv2SqoeZ3wakH1BD9a1cEG9UbzQ1CNm0jF79tUEp4NmbYLHSeK6o7TBfHCqCt rN7M2xliEkLdG3/+T2SvTmtUWzqK4JzcffeuofiNjtUCZBD4dlkxuSzlxNDTj8gb 3hq48NeXXsbVQCvvDbwpHTcAIrs5vm+cxs8BV2/MuDxfO7jumWWYAayzFeX5n0Cj 1ujW0lCFzjdyKAfhzOWylNHEPg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:22:27 2026 by rpki-client