$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json) Hash identifier: QEftBq69lCykbgocFj5tZYXc4HuoJ4Oej1ZMObJ+r9s= Subject key identifier: 82:D0:DE:9D:F7:1A:56:F3:7D:25:13:91:F3:9A:96:8C:AD:E8:4C:8B Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft Manifest number: 01A9 Signing time: Thu 05 Nov 2026 04:58:57 +0000 Manifest this update: Thu 05 Nov 2026 04:58:56 +0000 Manifest next update: Thu 12 Nov 2026 04:58:56 +0000 Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: yqZAqSvaMJ1S5vEGZQoDNo7w0+cHxSTfhlf1234GqsQ=) 2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: HZDNvMXF2Ddy6vd2h5W5yFnu+C+QnMlW7ipSlMoj5As=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 04:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Nov 5 04:58:56 2026 GMT Not After : Nov 12 04:58:56 2026 GMT Subject: CN=6aec0d11-9da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:b5:27:a9:4f:f5:eb:b5:27:cb:46:2f:75: 69:be:7e:45:81:e6:fb:29:15:7c:e4:40:90:24:b6: 30:21:7b:13:88:3e:e4:85:81:30:13:05:13:81:b4: 4d:19:63:40:47:06:de:b6:1f:f8:f7:25:39:e1:ca: 95:47:67:b6:0c:af:f0:f1:fe:19:d5:6d:3f:e8:96: a1:8e:0b:47:a1:f4:72:26:93:a6:a9:03:b1:04:23: 64:ad:b1:07:0d:bd:34:26:09:33:7a:f0:a2:01:a5: ed:5c:1f:f3:e7:c8:e9:df:f5:0f:41:0c:96:75:8f: 06:9b:36:a9:12:96:1f:f7:0b:f0:20:d1:6d:94:68: 8c:c2:25:8d:55:a6:19:97:e6:91:86:db:a2:b2:50: 6b:df:f6:02:57:c1:79:e2:7e:25:17:55:33:25:91: 4c:32:3f:14:c2:46:2a:80:c2:04:3d:6e:89:7c:97: 9c:33:bc:39:75:18:58:0f:e4:6f:ac:c9:2b:c6:29: b5:6c:6c:96:76:cd:3c:4f:f8:50:49:b0:c2:b5:34: e0:d9:2d:44:4f:80:6f:2d:bc:d5:84:a2:d7:a8:95: 52:53:d3:f7:09:d5:70:0d:0d:dc:f4:55:d7:72:eb: 3f:d5:24:99:fb:3b:69:25:57:6a:9a:ed:75:4a:03: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D0:DE:9D:F7:1A:56:F3:7D:25:13:91:F3:9A:96:8C:AD:E8:4C:8B X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8c:8e:21:58:9b:ce:30:df:a1:cd:dc:95:51:fc:6c:2e:18: dc:e6:d7:4d:25:f1:5a:72:9c:e2:c9:76:16:8c:1f:64:b4:4c: d4:d0:c9:cd:ab:7f:67:45:b2:c1:ff:71:bc:39:11:ae:80:c4: b4:b6:57:10:b7:df:94:a2:50:72:c7:ae:2e:97:7c:34:92:45: e3:cc:b0:67:85:42:ff:43:bb:2e:01:ca:ed:d6:bf:8b:7c:80: 9b:1c:0f:d7:23:33:3d:27:c2:a6:1a:f1:1a:c5:ea:50:63:fa: 13:56:cf:29:07:27:e2:db:95:6b:fe:a7:d6:a6:a1:ca:dc:1f: eb:f2:d6:fc:cf:05:4b:52:e7:65:ee:84:74:ab:38:22:52:40: d3:7c:92:39:54:c5:61:90:69:ff:f4:4d:70:c6:64:5a:8c:cd: 94:1d:06:6a:37:35:b3:71:fa:1f:da:90:60:db:ed:5a:a1:95: a0:27:ea:50:be:ed:ca:7f:69:fb:55:1e:2f:8b:7f:ae:f3:5b: 79:c8:da:9a:5b:b6:84:6b:62:fc:c4:43:42:df:e3:87:df:02: 16:01:bb:21:65:39:9c:54:87:ed:e6:91:59:11:44:89:79:5b: b4:35:fb:f1:fb:ba:6c:cf:ee:98:5f:d8:c8:8f:47:73:9b:f6: 55:7e:9a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF RkYxQjc5NDAwHhcNMjYxMTA1MDQ1ODU2WhcNMjYxMTEyMDQ1ODU2WjAYMRYwFAYD VQQDEw02YWVjMGQxMS05ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfu1J6lP9eu1J8tGL3Vpvn5Fgeb7KRV85ECQJLYwIXsTiD7khYEwEwUTgbRN GWNARwbeth/49yU54cqVR2e2DK/w8f4Z1W0/6JahjgtHofRyJpOmqQOxBCNkrbEH Db00JgkzevCiAaXtXB/z58jp3/UPQQyWdY8GmzapEpYf9wvwINFtlGiMwiWNVaYZ l+aRhtuislBr3/YCV8F54n4lF1UzJZFMMj8UwkYqgMIEPW6JfJecM7w5dRhYD+Rv rMkrxim1bGyWds08T/hQSbDCtTTg2S1ET4BvLbzVhKLXqJVSU9P3CdVwDQ3c9FXX cus/1SSZ+ztpJVdqmu11SgNyEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILQ3p33 GlbzfSUTkfOaloyt6EyLMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5 RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC4yOIVibzjDfoc3clVH8bC4Y3ObXTSXxWnKc4sl2FowfZLRM1NDJzat/Z0Wy wf9xvDkRroDEtLZXELfflKJQcseuLpd8NJJF48ywZ4VC/0O7LgHK7da/i3yAmxwP 1yMzPSfCphrxGsXqUGP6E1bPKQcn4tuVa/6n1qahytwf6/LW/M8FS1LnZe6EdKs4 IlJA03ySOVTFYZBp//RNcMZkWozNlB0Gajc1s3H6H9qQYNvtWqGVoCfqUL7tyn9p +1UeL4t/rvNbecjamlu2hGti/MRDQt/jh98CFgG7IWU5nFSH7eaRWRFEiXlbtDX7 8fu6bM/umF/YyI9Hc5v2VX6avg== -----END CERTIFICATE-----Generated at Thu Nov 5 15:01:31 2026 by rpki-client