$ rpki-client -vvvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft File: yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json) Hash identifier: oTuiOfYeYWiBc/4E+qWzmNf+4lZU4XJjR7DCDS2AVIo= Subject key identifier: DB:2B:87:20:28:AE:88:61:DF:31:6E:5A:80:6E:E8:99:E8:3F:A8:25 Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft Manifest number: F0 Signing time: Wed 23 Sep 2026 06:11:06 +0000 Manifest this update: Wed 23 Sep 2026 06:11:06 +0000 Manifest next update: Wed 30 Sep 2026 06:11:06 +0000 Files and hashes: 1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: qQlo4Bcd/iOvJbKYLuJthoEJyatPgUc1ch/1rS6Atkg=) 2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Validity Not Before: Sep 23 06:11:06 2026 GMT Not After : Sep 30 06:11:06 2026 GMT Subject: CN=6ab36d7a-a16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:e2:e6:7c:28:cb:08:58:ad:c9:f3:2e:98: b9:fe:4b:ae:89:f3:01:f9:87:f0:82:82:32:bb:6d: 65:0d:49:72:4f:c5:a7:bf:f7:33:55:fa:1c:bc:be: e0:cf:08:fb:6b:a6:ad:63:03:1a:6c:ed:fa:e4:5d: 3f:47:78:5f:29:2e:c7:51:33:12:6b:f1:3f:2f:41: 53:22:fe:8f:47:ec:4d:6d:c3:4a:c3:df:98:aa:86: 5a:0f:95:2b:a5:7f:67:16:ca:a5:7e:3b:6a:cd:ef: b8:6e:3b:7d:bd:53:db:71:fd:ba:5c:e7:33:d5:db: 4b:c5:27:0a:5b:40:43:bb:3c:dd:41:54:5e:7b:1e: de:06:25:6c:d0:99:62:6c:a2:b5:9c:1d:b0:cc:3b: 53:4f:8f:ed:d8:1e:f3:c4:28:78:d1:ba:76:e6:09: 7d:10:6b:b6:53:04:c0:5a:b8:8e:c2:2c:0f:c9:df: cc:08:8c:85:20:56:5d:8e:e7:59:f9:cb:1a:32:84: 16:ca:e1:4c:a4:34:8b:0b:bf:75:af:0c:0f:94:b5: ae:a0:64:24:24:bb:d3:60:55:61:ad:e3:b0:5f:60: 28:18:2e:28:fb:60:89:b4:dd:6d:f1:76:84:a1:16: a6:3e:54:9b:dd:c2:2c:4a:54:10:4a:5e:c6:76:8c: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2B:87:20:28:AE:88:61:DF:31:6E:5A:80:6E:E8:99:E8:3F:A8:25 X509v3 Authority Key Identifier: keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8d:47:dc:ba:0e:1e:45:b4:a5:bb:36:19:ba:79:97:f3:a2: 1a:b4:e3:64:98:6f:da:3e:1d:23:e9:96:f1:63:7d:f4:b0:98: b9:26:16:af:c6:97:39:75:33:8f:dc:19:6c:f9:87:e8:d8:3e: de:f2:74:e0:f1:6a:34:0d:fe:ba:cd:61:db:b0:e7:b4:19:7c: 15:61:6b:46:f4:2e:6a:72:49:bb:35:1d:40:ee:d3:58:36:8f: 93:58:50:a0:9d:35:96:85:95:5f:d3:cd:10:44:41:71:2c:69: 9d:1a:f3:01:e3:ae:00:c9:09:38:e0:80:d4:e4:d1:04:6b:1b: f4:42:33:43:9a:5d:d5:5a:d4:a8:53:b2:7d:6b:3c:c4:a2:a5: cb:e9:05:61:ba:41:f3:d9:e7:a7:6b:b6:df:e1:13:78:78:be: 10:dd:df:a6:96:0e:9b:b1:18:42:66:56:80:0b:d1:d7:d5:5d: fe:98:69:d6:cd:18:50:16:d8:b7:94:49:4c:e3:4b:14:9a:b7: 66:5c:e8:82:6e:b7:84:bb:54:4b:37:ab:b7:26:44:ae:d4:a3: 25:dc:3f:4e:d2:8f:c1:c8:c7:93:e3:c4:b7:d5:24:8b:49:1b: b1:bf:f3:43:69:84:37:7c:b6:f3:e3:06:ef:9a:23:26:ed:00: a6:e1:58:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3RkUxMTAvBgNVBAUTKEM4MDk3M0QxNkNDQ0M5RTE4QzEzQTY4ODAzM0RDNEQw RjBFNjFDNEEwHhcNMjYwOTIzMDYxMTA2WhcNMjYwOTMwMDYxMTA2WjAYMRYwFAYD VQQDEw02YWIzNmQ3YS1hMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfni5nwoywhYrcnzLpi5/kuuifMB+YfwgoIyu21lDUlyT8Wnv/czVfocvL7g zwj7a6atYwMabO365F0/R3hfKS7HUTMSa/E/L0FTIv6PR+xNbcNKw9+YqoZaD5Ur pX9nFsqlfjtqze+4bjt9vVPbcf26XOcz1dtLxScKW0BDuzzdQVReex7eBiVs0Jli bKK1nB2wzDtTT4/t2B7zxCh40bp25gl9EGu2UwTAWriOwiwPyd/MCIyFIFZdjudZ +csaMoQWyuFMpDSLC791rwwPlLWuoGQkJLvTYFVhreOwX2AoGC4o+2CJtN1t8XaE oRamPlSb3cIsSlQQSl7GdoxMLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsrhyAo rohh3zFuWoBu6JnoP6glMB8GA1UdIwQYMBaAFMgJc9FszMnhjBOmiAM9xNDw5hxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdGRS9DMDg3NTcyMjRE OEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXllR01FNmFJQXozRTBQRG1I RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdGRS9DMDg3NTcyMjREOEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXll R01FNmFJQXozRTBQRG1IRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiI1H3LoOHkW0pbs2Gbp5l/OiGrTjZJhv2j4dI+mW8WN99LCYuSYWr8aXOXUz j9wZbPmH6Ng+3vJ04PFqNA3+us1h27DntBl8FWFrRvQuanJJuzUdQO7TWDaPk1hQ oJ01loWVX9PNEERBcSxpnRrzAeOuAMkJOOCA1OTRBGsb9EIzQ5pd1VrUqFOyfWs8 xKKly+kFYbpB89nnp2u23+ETeHi+EN3fppYOm7EYQmZWgAvR19Vd/php1s0YUBbY t5RJTONLFJq3Zlzogm63hLtUSzertyZErtSjJdw/TtKPwcjHk+PEt9Uki0kbsb/z Q2mEN3y28+MG75ojJu0ApuFYeg== -----END CERTIFICATE-----Generated at Fri Sep 25 05:36:19 2026 by rpki-client