$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: G7TAXzdCla6rpd1y/qh6NF93oeQfOys4FLKZaU0MCzw= Subject key identifier: F3:DE:6B:20:06:B2:F1:17:7F:B7:F0:59:2A:83:8F:F4:72:CD:7D:81 Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 35D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 35AF Signing time: Mon 12 Oct 2026 15:02:18 +0000 Manifest this update: Mon 12 Oct 2026 15:02:18 +0000 Manifest next update: Mon 19 Oct 2026 15:02:18 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: gMIL1MKRLT1zIEwQympug5wp7sNoEof7rv7UG6cLqt0=) 2: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: 24VUnNW+IwALD6fth9CM1bbdRgcY8qK4/vGIkj8WWe4=) 3: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: 5+kHlPMY1vlmnCm2khEV4Cm9ZkyzeUnR4wfzGT1Bqgo=) 4: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: AqP5pcAaJH32TYuGX0fOzFQdp/XSO4T3mcIC6gFmJ5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13784 (0x35d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Oct 12 15:02:18 2026 GMT Not After : Oct 19 15:02:18 2026 GMT Subject: CN=6accf67a-bd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:e1:be:62:b2:bd:cd:2a:fe:f7:2a:f5:04: eb:9f:d8:5b:ed:3f:ad:e4:90:94:d6:f1:63:0e:b7: 33:ba:c0:c7:0d:8b:5f:be:d7:b4:50:43:0f:37:96: e9:15:7b:e3:81:70:22:73:e5:98:8e:5c:10:f7:0d: dd:cb:65:bc:6b:73:61:2e:11:4e:ab:f8:c9:12:20: 55:0a:a7:01:79:66:ac:7d:a0:c0:aa:31:4d:28:4a: 2f:b1:e0:ef:87:93:d4:3b:31:57:9b:2f:d8:67:44: 56:44:e3:34:b3:e6:81:4c:a6:f1:56:e8:7d:c0:62: 5a:5b:3f:12:84:c8:be:89:66:36:05:e1:73:94:62: 28:26:b2:ae:ee:3e:29:53:66:12:41:60:72:10:a8: 57:d5:d0:cb:c5:48:ca:62:e9:6a:b3:60:28:05:48: 3f:16:4f:bf:9c:f6:f7:b8:cd:10:a8:bd:fa:e0:01: d8:d3:19:8d:38:c8:89:c3:77:36:94:e5:12:49:46: fa:a4:d6:a5:40:6a:ef:52:4d:80:e2:95:08:49:21: 3b:5e:d5:b6:cb:53:5f:c1:10:7d:4a:cc:8c:12:b9: 6f:9c:06:5d:31:e2:6c:47:83:a3:79:77:39:e1:e7: b6:db:72:92:ed:cc:1b:18:76:fd:a5:d2:f9:b8:08: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DE:6B:20:06:B2:F1:17:7F:B7:F0:59:2A:83:8F:F4:72:CD:7D:81 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b0:05:00:99:7b:bd:be:e2:f2:b2:11:91:44:43:82:40:9a: f1:dc:ef:59:3c:58:7b:34:6d:49:f3:ca:21:a6:2d:37:68:33: 65:67:50:19:a8:c8:47:de:43:70:f5:54:37:4e:70:88:27:1e: d5:f4:60:a6:1f:d7:6f:35:46:77:b9:02:47:e4:34:c3:59:34: 65:c9:3f:70:19:91:f9:05:4f:8f:28:e5:2b:d2:e1:7e:29:af: 7b:b3:b9:26:3b:c9:26:12:bf:a9:09:29:62:0b:0e:8b:64:44: 92:0d:10:36:ff:e3:ca:96:ba:d9:a5:99:db:7a:e4:38:67:18: 70:9e:97:cb:65:ee:b0:53:92:9b:08:3f:82:04:eb:f2:48:6f: b5:41:97:8c:e0:b5:ad:d8:b5:bd:c3:ba:e4:44:0e:b2:4d:18: d7:a7:8a:7b:66:91:18:b0:f5:00:ba:ae:e1:6a:a6:10:5d:3f: 75:15:53:fd:f3:66:d7:44:0c:c8:bb:85:c4:f7:9b:8a:f2:74: 73:2a:95:ab:76:c0:f1:c5:bf:0d:e5:de:34:12:48:ff:5c:d9: 73:66:f3:68:73:9c:05:09:7d:b1:42:d8:f9:e3:91:b0:d2:e5: a8:1b:01:55:7b:0f:5e:f4:82:89:0e:7e:4a:4c:6d:cc:f9:da: 14:fa:31:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYxMDEyMTUwMjE4WhcNMjYxMDE5MTUwMjE4WjAYMRYwFAYD VQQDEw02YWNjZjY3YS1iZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviPhvmKyvc0q/vcq9QTrn9hb7T+t5JCU1vFjDrczusDHDYtfvte0UEMPN5bp FXvjgXAic+WYjlwQ9w3dy2W8a3NhLhFOq/jJEiBVCqcBeWasfaDAqjFNKEovseDv h5PUOzFXmy/YZ0RWROM0s+aBTKbxVuh9wGJaWz8ShMi+iWY2BeFzlGIoJrKu7j4p U2YSQWByEKhX1dDLxUjKYulqs2AoBUg/Fk+/nPb3uM0QqL364AHY0xmNOMiJw3c2 lOUSSUb6pNalQGrvUk2A4pUISSE7XtW2y1NfwRB9SsyMErlvnAZdMeJsR4OjeXc5 4ee223KS7cwbGHb9pdL5uAiRCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPeayAG svEXf7fwWSqDj/RyzX2BMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACbAFAJl7vb7i8rIRkURDgkCa8dzvWTxYezRtSfPKIaYtN2gzZWdQGajIR95D cPVUN05wiCce1fRgph/XbzVGd7kCR+Q0w1k0Zck/cBmR+QVPjyjlK9Lhfimve7O5 JjvJJhK/qQkpYgsOi2REkg0QNv/jypa62aWZ23rkOGcYcJ6Xy2XusFOSmwg/ggTr 8khvtUGXjOC1rdi1vcO65EQOsk0Y16eKe2aRGLD1ALqu4WqmEF0/dRVT/fNm10QM yLuFxPebivJ0cyqVq3bA8cW/DeXeNBJI/1zZc2bzaHOcBQl9sULY+eORsNLlqBsB VXsPXvSCiQ5+SkxtzPnaFPoxow== -----END CERTIFICATE-----Generated at Wed Oct 14 04:09:39 2026 by rpki-client