$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: a0So7e++hgYIxgA88hSxLS7h8AjdA/9vmAplNhlltZw= Subject key identifier: 04:51:7C:2A:75:E8:D8:AF:14:CE:88:E5:0F:40:AE:C6:7C:DA:99:DF Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 021E Signing time: Tue 13 Oct 2026 03:31:35 +0000 Manifest this update: Tue 13 Oct 2026 03:31:34 +0000 Manifest next update: Tue 20 Oct 2026 03:31:34 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: Z7J20SRrp7zuxeRLMeCuipO3BlJsCxiZlAb7ze6vh4E=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: nhipcqCRahKjZ7pabpVlQXPUYNPrNjWPoR5hykm0s/Q=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: EnDDWuZHL62S0BPn5UnWaSBwzsCmr35SdWgaj/fTSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 03:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Oct 13 03:31:34 2026 GMT Not After : Oct 20 03:31:34 2026 GMT Subject: CN=6acda616-b507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:32:4a:11:5d:17:eb:c0:d7:53:2e:9c:4c: 18:6d:d1:dc:a4:21:31:78:2b:44:cd:7a:b4:6f:97: 90:10:9c:8b:0b:da:c6:42:14:7b:23:6e:f0:2c:e0: 78:c9:07:9e:8e:76:06:ac:2b:a9:70:43:49:e8:2c: 15:ef:38:71:24:e7:7e:42:71:b9:2f:4d:29:02:cc: 8e:71:9c:dc:61:71:1b:50:90:29:4f:a2:3e:9a:ae: 63:9e:4e:86:c2:2c:3b:48:0b:a7:bf:56:94:33:08: 34:8d:e5:40:d9:e1:38:dc:e6:a8:fc:5c:a8:d1:5d: b8:74:ee:fc:b0:68:98:d0:8b:0c:33:d7:eb:b2:94: 99:23:f6:16:66:e7:5f:f7:f7:82:25:3a:b4:74:4f: b2:0e:09:ac:17:f6:7b:ad:e0:93:62:99:7a:5b:89: 80:41:76:b7:fd:00:aa:72:11:ab:17:61:b5:8e:4e: b1:2e:94:ca:17:73:df:8e:aa:38:1b:a3:59:46:97: 94:5d:92:20:a3:b5:1c:f8:91:fd:56:f8:bc:d8:b8: 44:6f:1f:83:8f:9c:00:d8:f7:5a:03:bc:32:37:64: fd:d4:c0:a7:6c:ee:3e:6c:ba:06:bf:db:af:1f:31: 6a:e6:04:d1:82:bc:20:a1:19:52:79:f7:21:c9:b3: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:51:7C:2A:75:E8:D8:AF:14:CE:88:E5:0F:40:AE:C6:7C:DA:99:DF X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:89:06:65:9e:be:27:b4:c5:89:13:9f:29:5f:89:9e:c4:ea: 10:94:e8:fd:76:7e:b2:fd:b7:aa:07:cc:d9:15:ad:3b:45:17: c8:e5:99:db:ba:3a:20:b2:e8:73:66:37:47:56:3b:6d:cd:fc: 34:7f:dc:cb:74:55:fa:35:9a:2b:0c:15:ed:24:5d:a5:2d:ab: e9:09:bd:a1:60:b6:c7:b5:f0:c1:04:21:21:d3:ac:cd:b8:5d: 5a:ed:31:99:d5:e2:6a:57:c5:e0:31:e4:cf:68:76:6e:88:04: f4:4c:92:45:ae:59:c9:87:c8:c1:a4:a5:aa:fb:6d:20:d3:7a: 7a:ea:4e:77:0d:91:59:b4:b6:5c:ea:40:e0:50:16:db:c1:a1: c0:26:6f:6e:02:e1:f1:aa:67:86:53:c8:6c:f8:40:bf:11:1c: 97:5d:ad:cb:7f:af:c4:27:4d:f0:c9:24:45:48:98:73:e3:2f: dd:d5:d5:cf:66:2c:d3:74:cb:66:57:65:d0:b8:f4:96:86:06: 55:0f:09:20:e0:36:b2:eb:0d:6a:f5:6e:d4:b7:ff:63:a3:f0: ec:ab:fe:ae:42:54:f8:22:c9:76:23:9d:1b:25:90:9f:d1:cb: ea:f1:24:31:fd:26:1d:6f:97:53:81:b9:34:04:9f:6d:c3:0c: 33:bc:9e:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjYxMDEzMDMzMTM0WhcNMjYxMDIwMDMzMTM0WjAYMRYwFAYD VQQDEw02YWNkYTYxNi1iNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TkyShFdF+vA11MunEwYbdHcpCExeCtEzXq0b5eQEJyLC9rGQhR7I27wLOB4 yQeejnYGrCupcENJ6CwV7zhxJOd+QnG5L00pAsyOcZzcYXEbUJApT6I+mq5jnk6G wiw7SAunv1aUMwg0jeVA2eE43Oao/Fyo0V24dO78sGiY0IsMM9frspSZI/YWZudf 9/eCJTq0dE+yDgmsF/Z7reCTYpl6W4mAQXa3/QCqchGrF2G1jk6xLpTKF3Pfjqo4 G6NZRpeUXZIgo7Uc+JH9Vvi82LhEbx+Dj5wA2PdaA7wyN2T91MCnbO4+bLoGv9uv HzFq5gTRgrwgoRlSefchybO2wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARRfCp1 6NivFM6I5Q9ArsZ82pnfMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHokGZZ6+J7TFiROfKV+JnsTqEJTo/XZ+sv23qgfM2RWtO0UXyOWZ27o6ILLo c2Y3R1Y7bc38NH/cy3RV+jWaKwwV7SRdpS2r6Qm9oWC2x7XwwQQhIdOszbhdWu0x mdXialfF4DHkz2h2bogE9EySRa5ZyYfIwaSlqvttINN6eupOdw2RWbS2XOpA4FAW 28GhwCZvbgLh8apnhlPIbPhAvxEcl12ty3+vxCdN8MkkRUiYc+Mv3dXVz2Ys03TL Zldl0Lj0loYGVQ8JIOA2susNavVu1Lf/Y6Pw7Kv+rkJU+CLJdiOdGyWQn9HL6vEk Mf0mHW+XU4G5NASfbcMMM7yeRg== -----END CERTIFICATE-----Generated at Tue Oct 13 23:50:34 2026 by rpki-client