$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json) Hash identifier: kVfgAALOjZ0OqWedvBsCSy2/O2xCwKwEPHNbK/eofVA= Subject key identifier: B7:D0:35:BB:89:D9:65:36:67:BF:7F:1B:5E:DA:89:8A:6E:DB:F6:7A Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Certificate serial: 098D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft Manifest number: 0973 Signing time: Sun 20 Sep 2026 20:00:55 +0000 Manifest this update: Sun 20 Sep 2026 20:00:55 +0000 Manifest next update: Sun 27 Sep 2026 20:00:55 +0000 Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: z5PybXEU/mqQpAvw+GoNemfl8zewYFeywQYOUxt4I3I=) 2: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=) 3: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=) 4: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Validity Not Before: Sep 20 20:00:55 2026 GMT Not After : Sep 27 20:00:55 2026 GMT Subject: CN=6ab03b77-af35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:fb:d8:74:e4:a7:02:5b:3b:5f:b2:9c:dc: 29:8e:5b:be:8c:44:5c:d5:41:d8:70:20:d1:af:da: ec:73:67:33:d7:8a:b7:93:b9:38:17:fd:d0:b7:a4: b7:59:02:4e:90:46:89:aa:0f:76:81:4f:eb:4c:eb: 96:bf:08:48:82:2b:6a:91:8d:44:23:d2:d9:b2:cf: 94:db:1f:b4:d8:d7:c1:af:f9:d8:f5:c1:44:cf:6c: 96:fa:ac:d0:1c:f6:6b:74:81:3f:50:58:11:6a:fb: 1c:2a:4b:f1:a9:ca:be:75:d5:9e:84:d2:37:38:e2: 36:8b:b0:63:3b:36:80:05:a6:e3:e3:b8:40:81:1f: 81:4d:d0:50:ad:80:3a:7f:22:1e:d6:8b:0e:ad:3f: 04:4d:35:7f:3d:e7:f7:d4:27:e9:2e:13:04:d9:49: f6:bd:c6:c4:57:8a:cd:7b:cc:c8:c4:15:18:24:35: 85:df:21:e2:fe:b6:4a:d9:35:4b:fe:d4:55:5e:37: f0:4f:b4:30:f8:d6:2f:8b:64:c2:74:5d:f1:7d:87: df:ec:2c:c2:c5:d0:30:61:ea:5a:2f:bc:82:69:f8: 90:09:ea:37:4c:af:b3:72:ef:df:4f:f2:db:e5:08: 85:f0:84:22:fb:5f:40:df:79:64:e1:56:bc:c0:7f: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D0:35:BB:89:D9:65:36:67:BF:7F:1B:5E:DA:89:8A:6E:DB:F6:7A X509v3 Authority Key Identifier: keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f1:9b:5d:ac:ce:01:e2:6a:48:c1:53:15:45:ba:ee:04:c2: f5:87:a2:f4:31:b5:18:77:2d:6e:63:74:da:0c:04:c4:4a:39: 66:c7:24:b1:b0:2c:5e:a4:3e:7e:44:f4:04:e7:40:9a:73:92: f3:30:24:85:a1:ba:32:06:29:7c:07:a7:4c:73:10:e1:3c:03: d1:75:dc:2e:cb:ef:d4:91:59:98:be:4f:e8:fb:16:a6:d7:c9: ee:41:d2:80:4b:2d:ce:ba:22:b3:8a:ba:82:07:94:a4:1a:d1: 8d:ab:db:15:ec:b1:26:c2:0b:b9:40:ce:0f:fb:d2:79:57:c3: 42:30:97:d9:e3:32:af:a8:f6:6f:75:3e:84:35:6c:9c:e1:67: 54:18:36:8a:3a:86:70:0f:e4:d4:0c:34:ec:47:52:bf:9f:67: 18:90:ec:ff:ed:3d:2b:3a:6c:0d:7d:c3:0f:5f:80:cf:49:c7: 9f:86:31:72:e4:62:10:a9:74:a9:4d:4b:db:56:5e:21:5e:df: 5d:e5:d8:97:d4:50:09:65:75:5f:13:ff:19:11:79:5f:4f:7b: 8f:72:35:dc:58:98:78:cf:10:36:b5:4e:1a:f1:49:87:ae:2f: 99:ba:c9:0f:2e:f5:76:1e:1c:c4:64:1a:75:82:46:c6:8b:6e: e7:69:73:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB RDExMDFBN0MwHhcNMjYwOTIwMjAwMDU1WhcNMjYwOTI3MjAwMDU1WjAYMRYwFAYD VQQDEw02YWIwM2I3Ny1hZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMz72HTkpwJbO1+ynNwpjlu+jERc1UHYcCDRr9rsc2cz14q3k7k4F/3Qt6S3 WQJOkEaJqg92gU/rTOuWvwhIgitqkY1EI9LZss+U2x+02NfBr/nY9cFEz2yW+qzQ HPZrdIE/UFgRavscKkvxqcq+ddWehNI3OOI2i7BjOzaABabj47hAgR+BTdBQrYA6 fyIe1osOrT8ETTV/Pef31CfpLhME2Un2vcbEV4rNe8zIxBUYJDWF3yHi/rZK2TVL /tRVXjfwT7Qw+NYvi2TCdF3xfYff7CzCxdAwYepaL7yCafiQCeo3TK+zcu/fT/Lb 5QiF8IQi+19A33lk4Va8wH9zCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfQNbuJ 2WU2Z79/G17aiYpu2/Z6MB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUVEMC82RUVCMTE1MEMyQjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1Zq eDhRNTJ3ZWJaTGF0RVFHbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFfGbXazOAeJqSMFTFUW67gTC9Yei9DG1GHctbmN02gwExEo5ZscksbAsXqQ+ fkT0BOdAmnOS8zAkhaG6MgYpfAenTHMQ4TwD0XXcLsvv1JFZmL5P6PsWptfJ7kHS gEstzrois4q6ggeUpBrRjavbFeyxJsILuUDOD/vSeVfDQjCX2eMyr6j2b3U+hDVs nOFnVBg2ijqGcA/k1Aw07EdSv59nGJDs/+09KzpsDX3DD1+Az0nHn4YxcuRiEKl0 qU1L21ZeIV7fXeXYl9RQCWV1XxP/GRF5X097j3I13FiYeM8QNrVOGvFJh64vmbrJ Dy71dh4cxGQadYJGxotu52lzzw== -----END CERTIFICATE-----Generated at Tue Sep 22 16:37:59 2026 by rpki-client