$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft File: y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json) Hash identifier: vYFuG97gBxpPfYIn9Gnq8uZ/LBT97lMo75lw08x0BWs= Subject key identifier: 4F:FC:6C:D5:13:6F:1E:3C:59:C2:30:18:E5:86:8F:F5:6B:AA:3E:0C Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft Manifest number: 092A Signing time: Sun 08 Nov 2026 20:07:47 +0000 Manifest this update: Sun 08 Nov 2026 20:07:47 +0000 Manifest next update: Sun 15 Nov 2026 20:07:47 +0000 Files and hashes: 1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: a2dzcajxiEPnnXycwoSzSEMF04Z5+PMSWbyQsk0zwI8=) 2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: VcmK6EnZRhzFMJv/oixEp2sj3JEVdIbT31qeLDgClZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Validity Not Before: Nov 8 20:07:47 2026 GMT Not After : Nov 15 20:07:47 2026 GMT Subject: CN=6af0d693-c789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:41:3f:22:63:91:d6:82:a4:71:9e:5c:47: ce:d3:a7:bf:71:2f:9b:3c:2f:e9:6a:0d:60:75:72: eb:11:aa:0d:e8:19:c7:cc:dd:47:85:f6:91:5a:46: 83:48:d1:62:2c:16:4f:06:66:92:a4:cf:f9:ac:ed: ac:c8:8c:3b:bd:c4:ab:a8:60:14:1b:b4:c6:5b:3b: 34:e9:70:09:03:d7:db:da:fa:1f:f6:d4:bc:4e:36: a6:29:8a:fa:21:cd:ad:da:f1:79:b0:90:67:3d:e6: b6:01:ef:90:9a:c4:af:8f:05:e0:4e:57:73:bc:88: bf:aa:bb:a0:dc:a8:2c:eb:85:9c:06:8a:fd:b0:dc: 20:06:0f:7e:fb:73:4a:c7:e5:f9:f7:b5:61:62:c1: b4:a5:c9:61:ad:52:2a:e6:43:f9:43:05:03:b2:f2: ef:e2:84:66:3d:12:a1:88:02:f1:2a:9a:5b:32:d6: 09:8e:bd:af:54:ac:54:55:4a:06:9c:30:e8:68:15: 37:59:b3:b9:27:17:ed:a6:90:3c:df:0e:ee:87:a7: c6:33:be:65:9d:1e:44:db:18:15:3f:bc:4d:10:2b: d1:66:30:8d:8e:c2:55:31:7e:91:a4:8f:08:92:17: f3:b1:db:ca:6f:a7:25:f3:4d:0c:65:3c:7c:bb:81: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FC:6C:D5:13:6F:1E:3C:59:C2:30:18:E5:86:8F:F5:6B:AA:3E:0C X509v3 Authority Key Identifier: keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:02:84:49:1d:b4:df:9e:d7:80:6e:be:47:fb:4d:a4:35:de: cb:59:28:86:ea:80:d4:14:e8:3e:3d:43:74:c7:8e:fc:37:03: bb:96:16:a6:ec:40:c1:b7:dc:cd:36:0a:e4:69:6d:39:a5:ad: 79:c9:a7:c8:7d:b7:48:b4:a8:fa:f8:af:ec:8d:fb:e2:4c:c0: af:3f:50:90:94:cc:52:43:3b:3d:2f:ad:37:00:8d:70:16:73: e0:dd:6f:f1:9f:13:28:9d:44:f5:36:41:5d:1b:00:c5:3c:35: 4d:8b:72:1b:a9:78:2d:f7:58:4d:aa:ad:b4:9c:ce:10:15:5b: ee:eb:2e:32:2c:6d:ba:0d:dd:47:ce:4d:7a:ea:63:26:66:28: ed:42:a2:ec:60:24:4c:24:4d:27:90:c5:10:93:d1:d8:db:1b: 0b:2b:3c:28:68:94:a7:3d:cc:59:03:d8:af:08:92:63:6d:2d: b5:6e:1e:93:0f:21:fe:2a:32:07:11:b1:3c:00:78:5b:fa:33: 28:02:66:31:ad:1b:c6:18:f4:95:39:de:3f:bb:2e:b6:4c:ec: a9:2d:c3:4f:54:46:e3:13:48:3c:ce:3d:e8:d0:77:90:a4:85: 8c:c9:00:1d:bc:2b:b0:ad:ad:18:ac:d2:e9:9b:6c:2a:94:c4: 3b:61:fd:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3 MkEzQTA5MkEwHhcNMjYxMTA4MjAwNzQ3WhcNMjYxMTE1MjAwNzQ3WjAYMRYwFAYD VQQDEw02YWYwZDY5My1jNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcpBPyJjkdaCpHGeXEfO06e/cS+bPC/pag1gdXLrEaoN6BnHzN1HhfaRWkaD SNFiLBZPBmaSpM/5rO2syIw7vcSrqGAUG7TGWzs06XAJA9fb2vof9tS8TjamKYr6 Ic2t2vF5sJBnPea2Ae+QmsSvjwXgTldzvIi/qrug3Kgs64WcBor9sNwgBg9++3NK x+X597VhYsG0pclhrVIq5kP5QwUDsvLv4oRmPRKhiALxKppbMtYJjr2vVKxUVUoG nDDoaBU3WbO5JxftppA83w7uh6fGM75lnR5E2xgVP7xNECvRZjCNjsJVMX6RpI8I khfzsdvKb6cl800MZTx8u4EFLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/8bNUT bx48WcIwGOWGj/Vrqj4MMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEZFNy81QTJEODlFQURCN0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxM bFk3c08ycVVSWGR5bzZDU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAygKESR20357XgG6+R/tNpDXey1kohuqA1BToPj1DdMeO/DcDu5YWpuxAwbfc zTYK5GltOaWtecmnyH23SLSo+viv7I374kzArz9QkJTMUkM7PS+tNwCNcBZz4N1v 8Z8TKJ1E9TZBXRsAxTw1TYtyG6l4LfdYTaqttJzOEBVb7usuMixtug3dR85Neupj JmYo7UKi7GAkTCRNJ5DFEJPR2NsbCys8KGiUpz3MWQPYrwiSY20ttW4ekw8h/ioy BxGxPAB4W/ozKAJmMa0bxhj0lTneP7sutkzsqS3DT1RG4xNIPM496NB3kKSFjMkA HbwrsK2tGKzS6ZtsKpTEO2H9og== -----END CERTIFICATE-----Generated at Tue Nov 10 17:15:49 2026 by rpki-client