$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json) Hash identifier: 4ePDy7aIPx/qXPAIzK5ZXmA2LqA+fWW7sjW6+eY0GC0= Subject key identifier: 3B:4D:4B:8B:D7:C8:D4:2A:83:D2:F7:21:7F:EC:D4:14:AD:47:77:D4 Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft Manifest number: 42 Signing time: Fri 25 Sep 2026 08:38:08 +0000 Manifest this update: Fri 25 Sep 2026 08:38:07 +0000 Manifest next update: Fri 02 Oct 2026 08:38:07 +0000 Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: 0pyHOdCLTT1Oy9AjENrLlwR2eUtvB1+Qoa/5r1C/I6M=) 2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Validity Not Before: Sep 25 08:38:07 2026 GMT Not After : Oct 2 08:38:07 2026 GMT Subject: CN=6ab632ef-6f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:a8:65:5d:5b:f3:ce:6b:23:1d:5f:48:da: 04:cf:95:1c:81:b0:cf:da:8b:ed:43:f9:a6:f1:ae: 7c:21:d1:10:68:a7:ca:2a:9f:0d:4d:5a:aa:5a:21: 35:1c:db:a6:d2:de:b9:62:09:53:7b:d8:e0:99:b5: b2:71:30:e0:de:53:a8:f2:c9:f8:a9:fa:1c:0f:4c: a9:3b:45:fd:fb:b8:1d:be:a4:40:59:5a:44:dc:6e: 0a:16:36:ee:2f:01:39:00:39:b9:03:10:b0:50:99: c2:6b:f3:78:d9:9d:74:63:80:12:8a:95:54:3d:70: 88:06:70:7a:c5:4f:7a:2b:36:56:4b:79:c2:76:cf: 7a:0a:53:7e:9c:ce:0d:45:a2:98:9c:86:2e:d0:ce: 18:6a:2e:ed:26:09:f9:91:af:64:ad:3e:94:06:e6: 9d:6d:1f:5d:0f:92:8b:20:51:29:f7:48:3d:72:05: 00:d6:0a:2f:4b:f0:12:d2:a4:eb:2a:42:be:e0:4c: 06:d9:01:fc:4c:e0:b0:1c:6c:00:35:b5:a1:69:5b: 0d:32:5b:24:72:16:e7:34:ed:55:25:5b:e8:b9:33: 45:f8:60:7f:8c:58:79:c3:47:6b:0a:72:33:99:cb: 6f:68:a9:9e:21:91:f8:b8:8d:30:ab:54:c0:02:e1: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:4B:8B:D7:C8:D4:2A:83:D2:F7:21:7F:EC:D4:14:AD:47:77:D4 X509v3 Authority Key Identifier: keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:68:be:53:ed:37:ed:be:f6:ad:c1:93:44:2e:10:90:37: e2:90:30:65:f1:2a:13:f8:84:a0:c4:db:f0:7d:5d:54:67:c3: 29:24:bd:16:23:69:8a:cb:de:ac:b4:b2:e8:df:f7:13:46:ce: a2:dd:7e:78:60:fa:34:5b:26:51:85:f3:3d:77:18:aa:42:0e: 5a:f0:98:83:0d:d0:50:7b:2f:ad:56:35:86:a9:23:0c:79:13: fc:d7:10:db:bb:5a:d5:5b:5f:e4:08:2e:38:76:10:1f:90:e0: dc:d4:f8:07:13:3b:d3:d3:0d:f8:3e:b7:7b:43:80:f4:e3:14: 5b:c2:d5:47:f3:05:cc:2a:7e:75:b4:a6:79:bd:2d:5d:ff:ad: 4d:a0:22:17:28:18:9a:97:46:35:f7:66:81:72:53:df:39:35: 82:17:73:5e:a8:dd:b3:3f:66:12:c6:59:17:6c:61:f3:27:70: 42:42:19:34:7b:d7:aa:e8:f7:14:49:51:f4:be:02:e3:3f:75: 04:c7:ee:b2:69:c8:39:fe:b9:4c:5f:e3:86:af:2e:6b:1d:59: 3a:23:5c:24:53:a5:bb:fe:14:51:d1:99:c3:25:4a:db:54:18: 5b:6e:c7:61:67:71:4d:35:da:72:1c:2e:3d:b8:07:b6:61:a3: 65:d6:aa:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG MkFEQzExMzAeFw0yNjA5MjUwODM4MDdaFw0yNjEwMDIwODM4MDdaMBgxFjAUBgNV BAMTDTZhYjYzMmVmLTZmMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPtKhlXVvzzmsjHV9I2gTPlRyBsM/ai+1D+abxrnwh0RBop8oqnw1NWqpaITUc 26bS3rliCVN72OCZtbJxMODeU6jyyfip+hwPTKk7Rf37uB2+pEBZWkTcbgoWNu4v ATkAObkDELBQmcJr83jZnXRjgBKKlVQ9cIgGcHrFT3orNlZLecJ2z3oKU36czg1F opichi7QzhhqLu0mCfmRr2StPpQG5p1tH10PkosgUSn3SD1yBQDWCi9L8BLSpOsq Qr7gTAbZAfxM4LAcbAA1taFpWw0yWyRyFuc07VUlW+i5M0X4YH+MWHnDR2sKcjOZ y29oqZ4hkfi4jTCrVMAC4eCfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO01Li9fI 1CqD0vchf+zUFK1Hd9QwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZiGi+U+037b72rcGTRC4QkDfikDBl8SoT+ISgxNvwfV1UZ8MpJL0WI2mKy96s tLLo3/cTRs6i3X54YPo0WyZRhfM9dxiqQg5a8JiDDdBQey+tVjWGqSMMeRP81xDb u1rVW1/kCC44dhAfkODc1PgHEzvT0w34Prd7Q4D04xRbwtVH8wXMKn51tKZ5vS1d /61NoCIXKBial0Y192aBclPfOTWCF3NeqN2zP2YSxlkXbGHzJ3BCQhk0e9eq6PcU SVH0vgLjP3UEx+6yacg5/rlMX+OGry5rHVk6I1wkU6W7/hRR0ZnDJUrbVBhbbsdh Z3FNNdpyHC49uAe2YaNl1qpM -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:47 2026 by rpki-client