$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: D8DDlDYLBS42OCsAO1ePyJrqtcX5mSASzuo5Vd8K72Q= Subject key identifier: 29:A4:4F:D8:FD:17:17:D5:29:CF:B0:96:52:11:6C:11:E4:F3:4C:5E Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 1282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 1276 Signing time: Tue 22 Sep 2026 17:00:33 +0000 Manifest this update: Tue 22 Sep 2026 17:00:33 +0000 Manifest next update: Tue 29 Sep 2026 17:00:33 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: uT5dBDwKdLxE+lJM0oNPV6XWFLX6MaeQhDSqdiDBf6Y=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4738 (0x1282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Sep 22 17:00:33 2026 GMT Not After : Sep 29 17:00:33 2026 GMT Subject: CN=6ab2b431-c96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:b8:85:ca:26:4b:42:61:c8:e0:f3:99:3c: 61:33:44:40:dc:02:7e:8a:7a:38:b8:65:48:0d:83: 8d:be:6d:65:e7:df:52:f2:1c:8f:c8:1e:1e:55:72: 6d:55:48:d4:7d:97:a4:f8:5a:8a:74:55:a1:c8:81: 06:7b:2d:ca:b4:b2:4c:1e:22:34:ee:a0:db:c9:96: 64:f6:c2:6d:55:ff:fc:1e:94:56:1b:5b:45:3e:e9: 46:a6:99:47:1d:75:26:a0:62:27:19:ff:52:77:cb: 49:b5:a8:00:ee:01:f7:cc:03:29:cc:b1:51:06:a1: 96:34:3c:e1:7b:6c:e6:b0:ff:5f:23:3e:a8:2a:e7: 71:06:68:bb:97:eb:ad:ee:04:45:f9:8d:8c:ff:ab: 0a:a2:f4:66:95:23:d3:c7:85:0c:ba:dd:e7:89:a3: 99:fe:ce:88:0e:9e:32:16:62:3f:4c:42:74:d6:a5: ce:d3:c5:f9:dc:e9:bb:c8:c3:65:82:9d:52:17:79: 4c:d4:14:54:46:0e:e6:cf:09:1e:c3:75:f0:a2:04: 82:a1:4d:ec:38:dc:b7:63:48:d8:a1:c6:73:30:80: dd:63:04:7f:15:e7:68:b4:c0:1e:4b:88:f2:05:19: 55:59:b7:3c:b9:ba:ed:6b:97:11:9d:a3:3a:f0:67: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:4F:D8:FD:17:17:D5:29:CF:B0:96:52:11:6C:11:E4:F3:4C:5E X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:31:bb:1f:63:67:77:ad:ec:7b:e0:ff:f2:f1:20:54:55:47: de:f7:35:9d:dd:6a:31:3b:45:58:39:0d:51:33:65:68:a6:66: 63:36:7e:02:7e:fc:37:cb:d7:9b:0e:bf:03:dd:8d:5a:ab:14: 53:45:b4:48:be:29:71:15:c4:0a:19:24:01:d1:bc:0d:a9:2a: ec:60:3a:00:97:57:26:9b:e4:ca:e7:7c:75:00:6a:ca:44:16: cd:6b:da:10:96:43:62:bf:63:5f:1f:c9:61:f3:97:a2:2b:7c: 26:95:16:a7:dc:d5:8a:00:13:57:6e:b2:1d:7b:66:37:a2:26: db:cb:8c:02:14:db:67:ee:86:1b:1a:ac:3a:7c:9a:ea:79:1d: 99:ef:f7:35:70:02:95:50:e4:6e:ae:e6:b2:af:1c:01:06:d0: 10:60:68:72:64:44:2a:37:75:fa:c7:f3:a0:a4:e8:a6:c6:a3: 95:58:47:01:67:80:4a:62:37:cd:10:c9:fe:1c:88:e1:f4:72: 6b:dd:94:84:92:18:f1:3a:a6:54:f8:af:8d:a1:fc:d4:87:81: a7:8c:e9:aa:44:96:4e:4d:cd:25:95:3d:4e:e1:02:d9:c0:84: ad:4a:ff:3e:ec:d4:b0:f3:ec:8b:5a:4e:7e:d3:34:4b:a7:09: 02:0a:51:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjYwOTIyMTcwMDMzWhcNMjYwOTI5MTcwMDMzWjAYMRYwFAYD VQQDEw02YWIyYjQzMS1jOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPq4hcomS0JhyODzmTxhM0RA3AJ+ino4uGVIDYONvm1l599S8hyPyB4eVXJt VUjUfZek+FqKdFWhyIEGey3KtLJMHiI07qDbyZZk9sJtVf/8HpRWG1tFPulGpplH HXUmoGInGf9Sd8tJtagA7gH3zAMpzLFRBqGWNDzhe2zmsP9fIz6oKudxBmi7l+ut 7gRF+Y2M/6sKovRmlSPTx4UMut3niaOZ/s6IDp4yFmI/TEJ01qXO08X53Om7yMNl gp1SF3lM1BRURg7mzwkew3XwogSCoU3sONy3Y0jYocZzMIDdYwR/FedotMAeS4jy BRlVWbc8ubrta5cRnaM68GedMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmkT9j9 FxfVKc+wllIRbBHk80xeMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlDG7H2Nnd63se+D/8vEgVFVH3vc1nd1qMTtFWDkNUTNlaKZmYzZ+An78N8vX mw6/A92NWqsUU0W0SL4pcRXEChkkAdG8Dakq7GA6AJdXJpvkyud8dQBqykQWzWva EJZDYr9jXx/JYfOXoit8JpUWp9zVigATV26yHXtmN6Im28uMAhTbZ+6GGxqsOnya 6nkdme/3NXAClVDkbq7msq8cAQbQEGBocmREKjd1+sfzoKTopsajlVhHAWeASmI3 zRDJ/hyI4fRya92UhJIY8TqmVPivjaH81IeBp4zpqkSWTk3NJZU9TuEC2cCErUr/ PuzUsPPsi1pOftM0S6cJAgpR6g== -----END CERTIFICATE-----Generated at Tue Sep 22 20:57:08 2026 by rpki-client