$ rpki-client -vvvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json) Hash identifier: pwqVOQ/r5Itd9suYiZkdI8mI134Op66KbZMbo9LHmOo= Subject key identifier: A0:19:A7:C8:B8:8B:2D:DB:D2:BD:47:C2:30:47:46:32:96:A5:9D:DB Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft Manifest number: 0147 Signing time: Sun 11 Oct 2026 06:01:40 +0000 Manifest this update: Sun 11 Oct 2026 06:01:39 +0000 Manifest next update: Sun 18 Oct 2026 06:01:39 +0000 Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: kKyFq6rS0fsjHGyUB8QO7SZhE8qDcBWacb7GkzDnBPs=) 2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Validity Not Before: Oct 11 06:01:39 2026 GMT Not After : Oct 18 06:01:39 2026 GMT Subject: CN=6acb2644-6c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:19:ef:d1:1d:58:46:81:b3:e3:e1:43:af: 21:69:cb:7a:bb:c3:1f:1b:36:ec:2b:d8:fc:34:86: 15:48:69:ed:38:a2:5f:eb:9c:0f:d7:05:55:05:47: 25:08:5c:42:94:11:31:e7:9a:34:1e:b4:b6:a8:b3: b5:29:0a:22:2e:6a:bb:21:74:be:f5:02:6e:f0:d0: 2d:1c:94:57:65:74:61:56:d1:e7:ac:43:27:4b:e7: a2:7c:b3:93:67:e0:a7:aa:a0:7e:b8:76:ab:60:82: 98:a4:c0:82:85:66:07:67:b0:0d:97:37:18:cf:c0: 70:e0:93:80:a0:77:ec:83:b4:f5:25:36:66:f0:76: b1:ce:5b:be:60:f2:7c:80:28:64:91:6e:82:2b:68: 41:13:1c:a8:4d:7c:c2:8e:81:7e:93:fa:56:98:a8: 0c:b2:84:35:2b:fd:14:36:0f:f4:ee:86:45:c6:6b: cc:8b:cd:89:68:6d:ed:04:89:1e:17:58:5f:64:e5: e5:ef:a3:61:ad:49:c8:ab:46:cc:cf:24:0d:49:dc: 85:09:d5:a4:39:6b:1e:e6:d8:39:9c:1e:6a:7d:e4: 96:18:db:77:64:3a:5a:64:eb:40:a5:60:12:33:b6: 12:0c:50:a7:6e:ec:73:19:bb:08:92:55:39:15:9e: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:A7:C8:B8:8B:2D:DB:D2:BD:47:C2:30:47:46:32:96:A5:9D:DB X509v3 Authority Key Identifier: keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d9:88:18:48:20:d6:55:71:98:9d:a6:63:c8:ca:4a:05:84: 24:ac:6d:b5:82:4f:e9:97:d3:a2:f0:60:7b:53:56:8b:bb:e2: 28:ff:26:d1:66:3d:97:3e:c6:18:9f:7c:b2:34:4f:68:0b:61: 3b:fb:55:0c:ba:dd:1b:44:a9:d3:4b:d6:d4:b5:26:c7:4a:13: 91:d2:e9:ff:e8:81:35:ca:86:4f:e8:f5:5f:a1:b6:97:17:75: 60:10:97:30:21:a3:a5:7e:96:63:ca:33:2b:68:e9:79:69:18: 15:6f:db:38:c7:bc:56:1d:b0:bd:63:59:b4:66:53:36:6e:9d: ff:c4:e9:0b:2a:19:e6:70:5b:74:bf:ee:1f:13:b9:00:a7:2c: 15:15:f0:b8:91:ff:d9:e3:81:04:32:60:1a:e2:e0:7f:fe:89: 8b:7e:ab:a2:ea:94:a8:00:1b:e0:d1:78:88:bf:34:55:fd:ae: 90:78:c0:a0:23:e4:14:35:ea:b0:3c:d2:bf:6c:71:14:fa:ad: 6b:57:89:b5:9a:7f:9e:1d:65:65:30:7d:87:9a:82:f9:c4:28: 56:e4:82:5e:da:fd:29:c6:04:81:5b:7b:fe:dd:d0:0e:17:85: 1d:73:2a:ff:01:d3:b9:c2:b4:13:7c:2c:4a:83:57:c4:54:fd: 9f:b3:bd:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3QjAxMTAvBgNVBAUTKENBMjk3NzQ3NDMwQTFCRUIzNDBCQ0EzOUQ2MjIyRkQy NjQxOUI3REIwHhcNMjYxMDExMDYwMTM5WhcNMjYxMDE4MDYwMTM5WjAYMRYwFAYD VQQDEw02YWNiMjY0NC02YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0C8Z79EdWEaBs+PhQ68hact6u8MfGzbsK9j8NIYVSGntOKJf65wP1wVVBUcl CFxClBEx55o0HrS2qLO1KQoiLmq7IXS+9QJu8NAtHJRXZXRhVtHnrEMnS+eifLOT Z+CnqqB+uHarYIKYpMCChWYHZ7ANlzcYz8Bw4JOAoHfsg7T1JTZm8Haxzlu+YPJ8 gChkkW6CK2hBExyoTXzCjoF+k/pWmKgMsoQ1K/0UNg/07oZFxmvMi82JaG3tBIke F1hfZOXl76NhrUnIq0bMzyQNSdyFCdWkOWse5tg5nB5qfeSWGNt3ZDpaZOtApWAS M7YSDFCnbuxzGbsIklU5FZ6HewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAZp8i4 iy3b0r1HwjBHRjKWpZ3bMB8GA1UdIwQYMBaAFMopd0dDChvrNAvKOdYiL9JkGbfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTdCMC9FMUFDODIxMEQ4 ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ctczBDOG81MWlJdjBtUVp0 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTdCMC9FMUFDODIxMEQ4ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ct czBDOG81MWlJdjBtUVp0OXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAItmIGEgg1lVxmJ2mY8jKSgWEJKxttYJP6ZfTovBge1NWi7viKP8m0WY9lz7G GJ98sjRPaAthO/tVDLrdG0Sp00vW1LUmx0oTkdLp/+iBNcqGT+j1X6G2lxd1YBCX MCGjpX6WY8ozK2jpeWkYFW/bOMe8Vh2wvWNZtGZTNm6d/8TpCyoZ5nBbdL/uHxO5 AKcsFRXwuJH/2eOBBDJgGuLgf/6Ji36rouqUqAAb4NF4iL80Vf2ukHjAoCPkFDXq sDzSv2xxFPqta1eJtZp/nh1lZTB9h5qC+cQoVuSCXtr9KcYEgVt7/t3QDheFHXMq /wHTucK0E3wsSoNXxFT9n7O9Zw== -----END CERTIFICATE-----Generated at Mon Oct 12 18:38:07 2026 by rpki-client