$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: fCETQbXkobMh4M6meaNYH6IpljgbVXnEnxKcumjJrGw= Subject key identifier: E2:A1:75:22:68:0F:87:65:B3:C5:C0:AC:6C:19:34:48:FE:AD:15:F1 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 358E Signing time: Mon 12 Oct 2026 14:56:44 +0000 Manifest this update: Mon 12 Oct 2026 14:56:43 +0000 Manifest next update: Mon 19 Oct 2026 14:56:43 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: rhzWITgOPedtLrhRv2l3Zs2PFohlP0u2GX9yhzKf/xI=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 14:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13719 (0x3597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Oct 12 14:56:43 2026 GMT Not After : Oct 19 14:56:43 2026 GMT Subject: CN=6accf52c-0440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:f4:0f:da:3e:99:0f:b5:f2:35:b1:4f:54: eb:24:05:2f:32:f8:bd:e5:3e:ec:aa:98:9d:d9:eb: b0:2e:84:02:93:9b:2e:89:2d:32:55:3d:b0:d7:05: c2:fb:cd:06:72:62:c5:70:fd:0c:1a:8a:81:53:c4: 74:1f:77:95:55:e1:c9:0f:c0:c0:9e:e4:b3:76:4a: e1:a4:cb:ea:98:b7:9b:b7:d5:87:d8:04:04:8a:15: 12:82:2b:0a:cf:ae:13:09:c6:ea:25:2f:e3:3b:63: 7f:b2:b4:d4:2b:7f:3a:b0:60:f7:1d:b0:16:73:a9: 19:a8:1c:26:0f:02:32:e0:b8:d8:89:59:22:e9:7b: ab:cc:0f:46:44:2c:ef:5c:73:0a:2b:0e:59:06:d7: ef:12:44:e0:a0:6f:4d:e0:f1:c9:49:59:c4:d9:9a: 92:c6:84:33:26:36:1a:de:67:0c:90:2b:0c:3b:61: f8:f9:7e:84:d4:42:8a:0a:9e:81:b1:5e:97:22:91: e0:03:06:aa:76:15:5c:c2:21:04:26:54:1b:20:11: 8d:d0:19:6e:89:1a:0e:e5:99:8a:f9:e7:ce:77:78: 76:e6:07:42:c5:53:06:80:e3:5f:91:27:af:55:77: 6e:77:6d:53:6b:b8:72:1c:05:73:b3:ca:4d:d3:e0: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:75:22:68:0F:87:65:B3:C5:C0:AC:6C:19:34:48:FE:AD:15:F1 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:3f:09:0b:f2:50:82:96:e8:0c:44:d1:ae:ab:3d:72:14: eb:c8:b9:d5:12:74:85:b8:81:b3:6c:15:1d:b3:90:aa:24:8c: 75:90:64:e0:72:ec:a3:66:a8:82:5b:16:36:0c:8d:e0:6b:64: 48:a1:5a:51:e5:6b:4c:c9:4a:a4:96:11:5a:ae:21:86:81:bf: b3:20:96:fe:7f:b3:59:04:45:f8:08:0a:21:c8:b2:66:53:f1: 15:8e:b4:78:0a:71:03:fe:bb:5a:63:30:7e:0e:81:c1:18:67: cf:ff:52:2f:55:a5:a4:a2:eb:16:37:6d:01:5e:74:09:76:75: 50:79:4f:c6:52:32:42:61:ef:92:3f:43:18:a3:eb:97:b6:f0: 84:bf:bb:77:ce:1c:7e:d2:98:ea:1b:20:ee:86:fc:1b:a9:f1: 83:27:1c:fd:d1:60:51:63:6b:c3:49:73:a5:4b:87:b0:28:78: 14:37:48:82:e0:b5:a5:78:d3:a7:09:18:39:1e:e0:d1:9d:e7: 99:23:5f:1a:9e:04:fb:94:d9:a9:aa:8e:14:65:d8:18:bc:97: ac:70:fd:33:31:f4:86:63:cc:7e:ea:ed:f7:ef:12:bb:5e:14: 25:39:88:aa:70:5f:4a:ba:98:3d:a7:a9:02:aa:15:df:d7:60: 73:7e:81:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYxMDEyMTQ1NjQzWhcNMjYxMDE5MTQ1NjQzWjAYMRYwFAYD VQQDEw02YWNjZjUyYy0wNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfz0D9o+mQ+18jWxT1TrJAUvMvi95T7sqpid2euwLoQCk5suiS0yVT2w1wXC +80GcmLFcP0MGoqBU8R0H3eVVeHJD8DAnuSzdkrhpMvqmLebt9WH2AQEihUSgisK z64TCcbqJS/jO2N/srTUK386sGD3HbAWc6kZqBwmDwIy4LjYiVki6XurzA9GRCzv XHMKKw5ZBtfvEkTgoG9N4PHJSVnE2ZqSxoQzJjYa3mcMkCsMO2H4+X6E1EKKCp6B sV6XIpHgAwaqdhVcwiEEJlQbIBGN0BluiRoO5ZmK+efOd3h25gdCxVMGgONfkSev VXdud21Ta7hyHAVzs8pN0+CwxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKhdSJo D4dls8XArGwZNEj+rRXxMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkSM/CQvyUIKW6AxE0a6rPXIU68i51RJ0hbiBs2wVHbOQqiSMdZBk4HLso2ao glsWNgyN4GtkSKFaUeVrTMlKpJYRWq4hhoG/syCW/n+zWQRF+AgKIciyZlPxFY60 eApxA/67WmMwfg6BwRhnz/9SL1WlpKLrFjdtAV50CXZ1UHlPxlIyQmHvkj9DGKPr l7bwhL+7d84cftKY6hsg7ob8G6nxgycc/dFgUWNrw0lzpUuHsCh4FDdIguC1pXjT pwkYOR7g0Z3nmSNfGp4E+5TZqaqOFGXYGLyXrHD9MzH0hmPMfurt9+8Su14UJTmI qnBfSrqYPaepAqoV39dgc36BhA== -----END CERTIFICATE-----Generated at Tue Oct 13 04:24:39 2026 by rpki-client