$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: O8wqSuCh+fVqDj5mQ7cDS2F9HDNqy+DvY2AT4mv49FE= Subject key identifier: 7B:88:38:F7:7B:18:E7:A7:15:73:20:E7:EA:77:A1:18:89:B7:3C:75 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0CEB Signing time: Tue 22 Sep 2026 18:19:32 +0000 Manifest this update: Tue 22 Sep 2026 18:19:32 +0000 Manifest next update: Tue 29 Sep 2026 18:19:32 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: O2tkizXPsaH2YSvMMgYknLTnKw2fhCZFqJ5188JvCGc=) 2: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=) 3: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Sep 22 18:19:32 2026 GMT Not After : Sep 29 18:19:32 2026 GMT Subject: CN=6ab2c6b4-df95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:26:1b:2e:a2:51:09:35:1e:f9:28:da:dd: 60:11:f6:19:a9:f8:54:89:06:9d:d4:35:fa:d9:07: be:36:fd:d1:d5:c8:9d:f1:52:45:6a:ce:92:0f:fb: df:5a:5d:4a:72:7f:b3:32:2e:ef:84:e6:36:20:25: aa:09:65:81:8b:ce:18:83:16:fe:4b:52:93:be:29: 6f:89:89:f5:a2:f5:e4:b6:11:44:3e:d6:11:1e:06: 5a:a0:b4:59:39:c6:c7:f6:4d:58:b9:95:41:d4:f0: ca:0a:a8:b2:63:22:5b:c2:e7:22:27:8f:d1:d4:f3: 9b:13:97:bb:9c:c1:9b:f2:c6:c2:90:8f:8e:46:4b: 2c:eb:66:25:60:a1:4d:57:24:d8:d7:cd:5b:a2:87: 6c:41:c7:bc:65:d4:45:34:66:c8:8b:df:fe:5d:eb: 76:13:f7:c3:51:d7:41:ba:07:85:4e:61:92:c8:76: 03:38:ba:3e:bf:74:51:84:0d:95:02:e6:d2:95:f7: 04:7f:2d:b8:6f:35:ee:b1:a1:35:fd:0b:b6:dc:71: 71:7b:87:ea:72:29:84:2a:54:b8:f7:f6:a3:05:5b: 21:8e:36:41:82:3d:2a:9f:9a:b4:82:82:df:ae:38: eb:b4:66:c4:cb:de:d2:c7:6b:d7:8e:e8:16:3c:24: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:88:38:F7:7B:18:E7:A7:15:73:20:E7:EA:77:A1:18:89:B7:3C:75 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:fa:b8:ef:ff:dc:c3:fc:f2:24:0b:1d:22:69:27:d7:44: 7c:ae:ad:75:17:19:d3:a5:75:a7:de:02:05:79:47:f3:b3:04: 27:15:e3:d4:61:c9:06:7d:c2:33:9f:f5:4e:00:70:ad:65:3d: 2d:73:7d:ea:83:8a:09:90:ec:76:ff:83:9b:9e:a3:f1:af:ee: 00:ef:4e:60:cf:89:5c:d1:c2:26:25:59:2e:75:3b:6a:ae:58: 03:b9:50:be:c0:58:c8:70:bd:35:66:f7:9b:ac:4c:d8:63:3d: d6:42:c8:e2:93:94:88:86:a8:02:a8:38:e8:9d:a3:8d:a0:e6: ce:53:34:4d:61:14:32:ed:32:ab:7c:97:38:3b:cf:44:39:31: 42:a2:e1:dd:19:23:e7:84:1f:df:f9:59:4d:eb:eb:e1:a6:8a: 1a:fc:89:fe:4f:a9:d1:3c:f6:c7:07:a4:be:46:37:48:7b:bb: 05:3a:03:7d:ad:93:a7:85:c8:77:9c:b5:70:67:01:17:f0:98: cb:07:86:8c:cf:83:d8:28:d0:aa:53:3d:46:b3:16:73:69:3f: 6b:4e:98:a5:8c:ad:b4:d0:27:b9:19:90:9e:9e:a5:5e:c6:f3: f3:ea:2b:b8:54:f6:47:5f:44:51:a2:23:72:4c:ff:43:3b:66: e8:23:64:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjYwOTIyMTgxOTMyWhcNMjYwOTI5MTgxOTMyWjAYMRYwFAYD VQQDEw02YWIyYzZiNC1kZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE0mGy6iUQk1Hvko2t1gEfYZqfhUiQad1DX62Qe+Nv3R1cid8VJFas6SD/vf Wl1Kcn+zMi7vhOY2ICWqCWWBi84Ygxb+S1KTvilviYn1ovXkthFEPtYRHgZaoLRZ OcbH9k1YuZVB1PDKCqiyYyJbwuciJ4/R1PObE5e7nMGb8sbCkI+ORkss62YlYKFN VyTY181boodsQce8ZdRFNGbIi9/+Xet2E/fDUddBugeFTmGSyHYDOLo+v3RRhA2V AubSlfcEfy24bzXusaE1/Qu23HFxe4fqcimEKlS49/ajBVshjjZBgj0qn5q0goLf rjjrtGbEy97Sx2vXjugWPCRtlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuIOPd7 GOenFXMg5+p3oRiJtzx1MB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIyH6uO//3MP88iQLHSJpJ9dEfK6tdRcZ06V1p94CBXlH87MEJxXj1GHJBn3C M5/1TgBwrWU9LXN96oOKCZDsdv+Dm56j8a/uAO9OYM+JXNHCJiVZLnU7aq5YA7lQ vsBYyHC9NWb3m6xM2GM91kLI4pOUiIaoAqg46J2jjaDmzlM0TWEUMu0yq3yXODvP RDkxQqLh3Rkj54Qf3/lZTevr4aaKGvyJ/k+p0Tz2xwekvkY3SHu7BToDfa2Tp4XI d5y1cGcBF/CYyweGjM+D2CjQqlM9RrMWc2k/a06YpYyttNAnuRmQnp6lXsbz8+or uFT2R19EUaIjckz/Qztm6CNkyg== -----END CERTIFICATE-----Generated at Wed Sep 23 11:43:44 2026 by rpki-client