$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: IOJN2cUPBvmHftQKrXDqskpGp6hDS4C7r9DdF13+qGo= Subject key identifier: ED:16:2B:66:78:4F:D4:23:22:EC:EC:19:15:F2:E5:D8:AA:06:68:C4 Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: DA Signing time: Wed 23 Sep 2026 06:26:30 +0000 Manifest this update: Wed 23 Sep 2026 06:26:29 +0000 Manifest next update: Wed 30 Sep 2026 06:26:29 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: nNO4QaTz4VHGsL9S2PPDhnK5dQigrmbdXVj5qFUp4WI=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: q6w/n00PdZjJkqVXecEqO9H7uXsW/x2wJfIgbUL2NNk=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: 7SJ1ORslsA+v/W3McAZxGP+GfP6rTmlULhaLVUpn64U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Sep 23 06:26:29 2026 GMT Not After : Sep 30 06:26:29 2026 GMT Subject: CN=6ab37115-d172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:4d:e8:5b:26:0b:06:ed:bf:ef:71:5d:e0: 81:95:30:e4:04:9b:33:d5:cc:25:11:e8:e6:67:bf: 95:ee:72:ff:e9:ac:76:93:58:05:23:d3:75:85:21: 3c:34:49:32:02:7f:79:28:f0:34:99:57:59:c1:af: 3d:66:a8:f4:73:37:2f:86:87:f6:ed:4b:6a:8a:26: 04:35:08:f2:a3:c7:18:5b:eb:bb:09:64:54:99:e0: 30:06:08:d9:62:0f:da:17:36:c4:2b:57:e0:84:a5: a2:25:ab:2e:0e:ca:c3:60:a8:16:dd:7a:2e:98:11: ab:2a:94:31:2a:20:a9:ab:69:c4:9f:9b:a4:7b:9f: bd:c6:c3:2a:ef:3b:bf:32:07:28:ba:a0:52:d8:5e: 2f:60:3e:c6:5c:70:a2:85:d4:3c:e1:81:8e:ce:ea: b4:79:ca:86:62:54:51:36:17:34:03:73:06:de:8d: c1:dd:3a:6f:20:ef:04:4e:82:ab:26:8c:72:65:aa: ae:84:a0:43:08:76:30:bc:ee:8d:3b:b5:21:8c:a7: ae:0d:62:43:cc:a1:64:86:9e:31:fe:d1:8f:ea:05: 92:42:0a:60:0e:54:74:60:c0:e5:ad:58:d4:11:83: 3b:ed:8c:c2:26:e0:e1:52:8d:44:aa:0d:77:40:dd: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:2B:66:78:4F:D4:23:22:EC:EC:19:15:F2:E5:D8:AA:06:68:C4 X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:56:f5:06:d5:f0:c5:fd:b5:93:47:4e:17:58:4e:5c:27:2b: 94:c3:bc:4a:5c:b7:22:21:9d:57:7d:e1:84:98:d5:74:5b:5c: d8:5a:c6:9c:12:1b:26:14:71:57:7e:e7:05:2c:6e:0f:c1:43: a7:29:3a:df:7b:03:5d:b3:28:76:0d:d2:8a:39:56:35:5e:bf: 4e:90:4f:c1:0d:23:85:65:4e:0b:20:4a:3c:73:bb:4e:71:2b: 25:99:f9:73:f3:cd:24:72:9e:6a:a1:e1:af:d0:a1:e9:bc:8a: c6:c9:73:90:59:49:6a:ad:72:2b:3a:ae:02:60:04:93:be:82: d8:ae:23:d7:d2:40:cf:51:ca:f7:a7:dc:f4:d6:da:5b:62:5d: 1a:e7:64:1f:bb:58:fe:00:a2:13:b1:46:76:4a:cb:07:f4:b0: 0a:c3:1a:af:f9:8b:65:5a:a9:a9:3a:37:37:b5:2c:6b:f7:a5: 8a:ab:b8:ec:d6:73:db:91:6b:f8:95:97:da:da:c5:ae:19:de: 2f:28:1d:20:5f:eb:b5:f0:38:c1:3a:96:45:30:b5:e8:34:f6: 2b:8f:ef:a0:e1:6e:6d:cd:42:5e:bc:93:55:18:ad:65:99:8d: f1:a7:b5:b9:f0:da:5b:0f:21:cf:b8:65:57:fb:7d:7d:84:3d: d5:a7:5e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2QTAxMTAvBgNVBAUTKEQxOEQ0NDVEMjY1N0VBRkRENEE2NkU3NUIwRkJENjAz MDNGMDI1RkMwHhcNMjYwOTIzMDYyNjI5WhcNMjYwOTMwMDYyNjI5WjAYMRYwFAYD VQQDEw02YWIzNzExNS1kMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5lN6FsmCwbtv+9xXeCBlTDkBJsz1cwlEejmZ7+V7nL/6ax2k1gFI9N1hSE8 NEkyAn95KPA0mVdZwa89Zqj0czcvhof27UtqiiYENQjyo8cYW+u7CWRUmeAwBgjZ Yg/aFzbEK1fghKWiJasuDsrDYKgW3XoumBGrKpQxKiCpq2nEn5uke5+9xsMq7zu/ MgcouqBS2F4vYD7GXHCihdQ84YGOzuq0ecqGYlRRNhc0A3MG3o3B3TpvIO8EToKr JoxyZaquhKBDCHYwvO6NO7UhjKeuDWJDzKFkhp4x/tGP6gWSQgpgDlR0YMDlrVjU EYM77YzCJuDhUo1Eqg13QN04JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0WK2Z4 T9QjIuzsGRXy5diqBmjEMB8GA1UdIwQYMBaAFNGNRF0mV+r91KZudbD71gMD8CX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZBMC83OERGNjA3QzZE QjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2M1VwbTUxc1B2V0F3UHdK ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZBMC83OERGNjA3QzZEQjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2 M1VwbTUxc1B2V0F3UHdKZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMVb1BtXwxf21k0dOF1hOXCcrlMO8Sly3IiGdV33hhJjVdFtc2FrGnBIbJhRx V37nBSxuD8FDpyk633sDXbModg3SijlWNV6/TpBPwQ0jhWVOCyBKPHO7TnErJZn5 c/PNJHKeaqHhr9Ch6byKxslzkFlJaq1yKzquAmAEk76C2K4j19JAz1HK96fc9Nba W2JdGudkH7tY/gCiE7FGdkrLB/SwCsMar/mLZVqpqTo3N7Usa/eliqu47NZz25Fr +JWX2trFrhneLygdIF/rtfA4wTqWRTC16DT2K4/voOFubc1CXryTVRitZZmN8ae1 ufDaWw8hz7hlV/t9fYQ91adeyA== -----END CERTIFICATE-----Generated at Wed Sep 23 23:49:03 2026 by rpki-client