$ rpki-client -vvvf rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft File: rYQ8jfSRtv8A6PnztRksOZYqSM8.mft (raw, json) Hash identifier: wdNuppNoK97NWhhGA0f8yfWGNV4JeeeEEv3g46t4k4M= Subject key identifier: 3B:3D:0D:1A:19:38:D9:11:29:E8:F2:35:AB:31:FE:FC:1C:95:71:F9 Authority key identifier: AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF Certificate issuer: /CN=A911583F/serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft Manifest number: 29 Signing time: Mon 19 Oct 2026 09:31:27 +0000 Manifest this update: Mon 19 Oct 2026 09:31:26 +0000 Manifest next update: Mon 26 Oct 2026 09:31:26 +0000 Files and hashes: 1: rYQ8jfSRtv8A6PnztRksOZYqSM8.crl (hash: 77lkW7BUO5izA50yBVA50wD0HlU+TesbEYh3jaIgQCY=) 2: 72D413B290EC11F1A202C1754A11F970.roa (hash: Arcy6owVvYDgskgZwg06kTzf4YUjIwfvXCvbOmqa3OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911583F, serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF Validity Not Before: Oct 19 09:31:26 2026 GMT Not After : Oct 26 09:31:26 2026 GMT Subject: CN=6ad5e36f-635d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:b8:f4:d7:30:a0:19:05:1a:ff:2a:ad:f7: 25:98:18:ab:c8:53:2f:66:9d:6f:c9:8b:aa:3f:a1: 3a:2f:de:8c:8b:13:73:cc:5a:0c:05:5b:18:aa:fa: e9:7d:91:1d:b3:5c:34:9c:6d:49:6a:cf:ef:3c:ef: 7b:2b:76:33:b5:f1:26:68:d6:35:67:49:72:f8:28: 61:5b:c9:2e:0b:93:d7:ae:09:0c:d0:93:0f:d3:df: 63:3e:71:a3:a9:11:94:ee:c4:3e:e6:2d:2d:7c:c5: 9d:b9:54:1b:d7:8d:51:4b:0b:49:22:cd:c9:f5:ec: 99:2a:98:4e:11:b2:48:5e:bc:48:fa:3b:ca:cd:31: b4:bc:5b:0b:12:c0:fa:cf:73:bd:4d:7c:0c:e1:1f: c8:5e:a9:01:55:d3:85:38:1b:35:69:45:81:1f:d1: b8:3e:ee:bb:4a:2e:6c:08:4b:b5:dc:74:50:63:c9: 06:a5:dc:21:30:e2:2d:c0:f1:2c:b6:d7:26:e3:9e: cb:6a:03:0c:24:25:19:a7:78:61:ea:5c:29:c9:9d: cd:b9:ac:b6:da:9a:fb:a4:f5:05:07:56:a3:61:42: ae:ac:3f:aa:af:83:1a:94:81:50:7a:a7:75:b7:32: 47:14:3b:0f:13:1b:1f:29:8d:bf:f1:9a:05:13:cb: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3D:0D:1A:19:38:D9:11:29:E8:F2:35:AB:31:FE:FC:1C:95:71:F9 X509v3 Authority Key Identifier: keyid:AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f8:95:d6:3f:de:05:88:18:fa:ab:ad:36:15:9b:3e:3f:c1: 87:13:45:e3:e7:47:fa:b6:25:46:4a:59:95:8c:22:30:60:d7: 6d:0f:52:9f:01:fb:bb:69:81:e9:a9:f2:dd:fc:ba:45:81:d5: 79:03:3e:3b:4b:bd:8c:cd:9a:f2:a2:00:13:95:b0:09:d0:39: 01:04:59:3b:f6:93:bd:23:d2:eb:bb:e3:b9:07:01:24:68:c5: fb:56:d5:8d:91:c2:00:fe:dc:34:1e:b2:c6:a0:0e:39:79:29: b0:0d:4b:a8:a5:6a:41:12:aa:1c:37:9e:3a:f8:e3:01:ea:cf: c3:ee:31:84:9a:2c:39:7e:b3:1a:0b:2d:b9:3d:ea:87:6d:4e: 89:24:2f:e3:39:6b:2b:88:29:00:d9:32:97:97:02:c8:33:50: 4a:75:9f:f5:01:2c:c5:52:81:8e:13:ec:94:40:37:98:c1:37: 3d:a9:59:3a:6e:37:af:57:28:b3:82:70:51:d6:b5:e6:95:d6: 44:28:c8:0b:60:c2:a2:3c:77:9d:61:6d:6d:2b:09:78:52:25: 27:6d:60:92:55:57:4f:01:17:0c:53:98:3d:f5:88:a7:be:44: 5f:7d:da:ad:ba:bf:6a:7c:c0:1e:b8:0b:28:36:b2:f0:3a:34: 65:a4:6e:22 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NTgzRjExMC8GA1UEBRMoQUQ4NDNDOERGNDkxQjZGRjAwRThGOUYzQjUxOTJDMzk5 NjJBNDhDRjAeFw0yNjEwMTkwOTMxMjZaFw0yNjEwMjYwOTMxMjZaMBgxFjAUBgNV BAMTDTZhZDVlMzZmLTYzNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf97j01zCgGQUa/yqt9yWYGKvIUy9mnW/Ji6o/oTov3oyLE3PMWgwFWxiq+ul9 kR2zXDScbUlqz+8873srdjO18SZo1jVnSXL4KGFbyS4Lk9euCQzQkw/T32M+caOp EZTuxD7mLS18xZ25VBvXjVFLC0kizcn17JkqmE4RskhevEj6O8rNMbS8WwsSwPrP c71NfAzhH8heqQFV04U4GzVpRYEf0bg+7rtKLmwIS7XcdFBjyQal3CEw4i3A8Sy2 1ybjnstqAwwkJRmneGHqXCnJnc25rLbamvuk9QUHVqNhQq6sP6qvgxqUgVB6p3W3 MkcUOw8TGx8pjb/xmgUTy02bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOz0NGhk4 2REp6PI1qzH+/ByVcfkwHwYDVR0jBBgwFoAUrYQ8jfSRtv8A6PnztRksOZYqSM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1ODNGLzY5ODc3MzBFOTBF QjExRjE5NTI0NUM4MjQ5MTFGOTcwL3JZUThqZlNSdHY4QTZQbnp0UmtzT1pZcVNN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcllROGpmU1J0djhBNlBuenRSa3NPWllxU004LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1 ODNGLzY5ODc3MzBFOTBFQjExRjE5NTI0NUM4MjQ5MTFGOTcwL3JZUThqZlNSdHY4 QTZQbnp0UmtzT1pZcVNNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBR+JXWP94FiBj6q602FZs+P8GHE0Xj50f6tiVGSlmVjCIwYNdtD1KfAfu7aYHp qfLd/LpFgdV5Az47S72MzZryogATlbAJ0DkBBFk79pO9I9Lru+O5BwEkaMX7VtWN kcIA/tw0HrLGoA45eSmwDUuopWpBEqocN546+OMB6s/D7jGEmiw5frMaCy25PeqH bU6JJC/jOWsriCkA2TKXlwLIM1BKdZ/1ASzFUoGOE+yUQDeYwTc9qVk6bjevVyiz gnBR1rXmldZEKMgLYMKiPHedYW1tKwl4UiUnbWCSVVdPARcMU5g99YinvkRffdqt ur9qfMAeuAsoNrLwOjRlpG4i -----END CERTIFICATE-----Generated at Tue Oct 20 02:31:37 2026 by rpki-client