$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft File: 0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json) Hash identifier: GymsU9PNqwSoh3V3xA+VrFucJ38AVi4yiQAF1ieZiTY= Subject key identifier: 41:A7:05:AB:60:A9:27:38:AC:D6:FB:71:E3:D4:FC:F7:70:91:4A:CE Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft Manifest number: 01B2 Signing time: Wed 23 Sep 2026 04:06:32 +0000 Manifest this update: Wed 23 Sep 2026 04:06:32 +0000 Manifest next update: Wed 30 Sep 2026 04:06:32 +0000 Files and hashes: 1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: UMPxMVvrOa2K0D6HDy/wTUPCF3np2iKXqVnXpXE0D4w=) 2: D525D9EE7E9311F19E24FC4D5FA30FBC.roa (hash: /+XJwpoYaaPxuUpocTQ1TOPsH5/A3dpDpHYUXNcoxEY=) 3: C07DC8947E9311F185EA92095FA30FBC.roa (hash: qRg84y5kVRE7bRiBaS6MkjPVv43I0mEppMl+KIu+SBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Validity Not Before: Sep 23 04:06:32 2026 GMT Not After : Sep 30 04:06:32 2026 GMT Subject: CN=6ab35048-db6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c5:a7:ef:a1:b2:56:ad:be:44:45:3f:81:8b: 60:67:73:74:a7:6c:1a:94:e8:71:a8:7f:11:1f:91: 6c:67:d9:60:b4:52:15:4d:18:c9:7c:00:ab:cc:a5: d3:f2:64:39:ef:db:6a:6a:3e:4e:4b:f5:65:13:4b: f8:7c:ff:ce:cc:9d:3c:e4:26:78:22:53:2f:d5:c5: c2:40:5d:d6:f0:22:55:d7:01:a2:60:d8:75:b9:a2: 29:4a:61:09:c2:1e:72:9d:4f:1d:1e:98:8c:60:39: af:27:85:91:7c:9c:8f:1f:1c:f6:86:63:89:2c:2e: c0:35:2c:4a:0d:d8:bd:4e:f3:91:47:60:98:9b:98: fb:71:c0:2a:0a:31:6c:5e:f5:07:75:57:f8:30:c2: f6:49:5b:e8:c2:0a:88:1e:28:63:24:08:58:b9:af: ac:6c:01:42:e5:6d:10:42:b3:4c:6a:2d:e8:98:f9: bb:1b:09:67:a1:1a:f1:1e:cf:e5:e3:c5:4f:76:22: 98:ab:3f:15:7c:40:8f:a4:ed:53:aa:fa:59:ee:ae: 37:02:2d:e7:9c:18:81:96:4f:0f:c8:4c:e3:3c:e7: 95:97:b2:d5:f5:3b:fc:8c:c3:9b:fa:63:82:40:fe: 4e:22:de:f0:6c:07:7a:4d:bc:53:f2:ee:a1:b5:f1: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:05:AB:60:A9:27:38:AC:D6:FB:71:E3:D4:FC:F7:70:91:4A:CE X509v3 Authority Key Identifier: keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a3:8a:c6:e3:57:01:47:44:98:4b:c4:6a:5d:52:d1:ee:2c: ec:05:20:19:e9:c9:b0:c7:34:93:60:de:cc:83:55:96:b9:d1: b3:15:b9:7b:09:92:c2:96:22:8d:a3:0f:16:f8:d8:bd:60:3e: 78:28:9a:14:67:67:1f:d7:38:b0:72:3d:d4:6c:b5:dd:ce:1f: 24:ef:f6:46:cc:50:6e:9f:35:e5:5f:7c:59:8b:16:ee:d9:de: d0:8a:49:6e:97:0d:3c:ac:98:56:1d:02:f5:66:7b:d6:d7:c6: d2:6d:fa:d2:ba:d8:29:71:7a:8b:9d:0e:7b:a7:92:23:a6:e7: 4f:14:dd:0e:4d:43:d1:9d:79:a9:7f:0c:b1:0f:89:04:50:5a: d7:37:54:77:92:1f:42:d0:6f:8b:18:e9:5c:a2:db:87:36:55: 5c:e6:cd:54:85:04:cf:7d:bd:8e:31:1a:be:55:2b:ac:a0:c4: e1:29:57:78:66:00:9d:dd:a3:19:ed:43:c4:2b:72:c6:86:24: a0:b3:02:d0:47:6c:58:f6:1b:dd:67:77:6b:f6:35:42:93:77: b8:cf:82:bd:96:93:7d:6a:6a:8c:fb:15:66:7d:4a:f0:7a:5f: d3:c6:24:b8:04:0e:59:1d:ed:6a:e1:9b:61:35:99:80:7b:40: c7:5c:61:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4 NjlEMTc4OTcwHhcNMjYwOTIzMDQwNjMyWhcNMjYwOTMwMDQwNjMyWjAYMRYwFAYD VQQDEw02YWIzNTA0OC1kYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj8Wn76GyVq2+REU/gYtgZ3N0p2walOhxqH8RH5FsZ9lgtFIVTRjJfACrzKXT 8mQ579tqaj5OS/VlE0v4fP/OzJ085CZ4IlMv1cXCQF3W8CJV1wGiYNh1uaIpSmEJ wh5ynU8dHpiMYDmvJ4WRfJyPHxz2hmOJLC7ANSxKDdi9TvORR2CYm5j7ccAqCjFs XvUHdVf4MML2SVvowgqIHihjJAhYua+sbAFC5W0QQrNMai3omPm7GwlnoRrxHs/l 48VPdiKYqz8VfECPpO1TqvpZ7q43Ai3nnBiBlk8PyEzjPOeVl7LV9Tv8jMOb+mOC QP5OIt7wbAd6TbxT8u6htfGeawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGnBatg qSc4rNb7cePU/PdwkUrOMB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0 OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS81MDRDRkZFMjQ0OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1 Z1h3Z0stYTNLQjZHblJlSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb6OKxuNXAUdEmEvEal1S0e4s7AUgGenJsMc0k2DezINVlrnRsxW5ewmSwpYi jaMPFvjYvWA+eCiaFGdnH9c4sHI91Gy13c4fJO/2RsxQbp815V98WYsW7tne0IpJ bpcNPKyYVh0C9WZ71tfG0m360rrYKXF6i50Oe6eSI6bnTxTdDk1D0Z15qX8MsQ+J BFBa1zdUd5IfQtBvixjpXKLbhzZVXObNVIUEz329jjEavlUrrKDE4SlXeGYAnd2j Ge1DxCtyxoYkoLMC0EdsWPYb3Wd3a/Y1QpN3uM+CvZaTfWpqjPsVZn1K8Hpf08Yk uAQOWR3tauGbYTWZgHtAx1xhWA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:49:37 2026 by rpki-client