$ rpki-client -vvvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft File: yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json) Hash identifier: Xnlsz8YIQzm0/M3mjrUQbTs22zfXJ5d8SC7sPJ+u3tk= Subject key identifier: CE:D1:42:AB:2E:4D:58:65:D6:5F:1C:7A:D0:93:A5:20:F2:38:C7:CF Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft Manifest number: EF Signing time: Mon 21 Sep 2026 06:23:47 +0000 Manifest this update: Mon 21 Sep 2026 06:23:47 +0000 Manifest next update: Mon 28 Sep 2026 06:23:47 +0000 Files and hashes: 1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: 4yG9wQx6czH4zhm8DtqCLaUj4qMDHLIhmNhtKSF45qw=) 2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Validity Not Before: Sep 21 06:23:47 2026 GMT Not After : Sep 28 06:23:47 2026 GMT Subject: CN=6ab0cd73-1be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:c5:ef:32:38:58:8e:c4:86:93:bc:76:75: a5:cd:62:15:9b:bf:16:3c:e9:5f:b9:74:43:b6:c7: ac:f8:3f:f1:26:46:af:f3:be:0d:8b:12:62:6c:9e: 99:4c:b2:68:04:e8:b9:94:89:4f:00:1d:65:c6:74: 67:f7:9b:00:b2:42:eb:6e:25:18:b9:53:29:0c:79: 52:78:c6:ce:cf:34:f0:9b:5f:62:40:3f:01:14:e7: 9d:04:15:22:f4:79:74:d2:cc:ea:d1:ac:5a:9a:56: be:58:be:a1:0d:8d:08:ab:60:b2:5c:9d:d6:a0:e9: 2a:f5:97:df:fb:5b:69:b0:dd:de:66:3b:f6:02:4f: 4f:da:e9:9c:c3:1c:d7:90:2b:8b:43:2c:c1:f1:2d: b4:b0:a2:e2:d8:ad:0c:e4:e8:1a:2f:e1:0c:d4:db: 8e:73:3f:e6:7b:c0:3d:de:68:0b:fd:d9:c6:17:18: 35:74:1b:eb:0c:f7:47:d1:38:90:3f:e6:2f:01:93: be:76:e6:ec:bf:16:fc:12:1c:a8:28:2b:d9:e4:7b: cf:28:41:d5:34:a6:c7:1d:94:87:43:e1:2d:14:37: 4c:d6:cb:d4:72:b2:db:8b:55:25:d4:4f:8c:46:42: d2:3d:cb:68:61:17:13:d3:36:15:23:57:0a:76:a4: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:42:AB:2E:4D:58:65:D6:5F:1C:7A:D0:93:A5:20:F2:38:C7:CF X509v3 Authority Key Identifier: keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:62:91:4c:dd:c8:f8:c9:a6:69:61:b9:17:f3:1a:12:a7:18: 32:a7:d2:18:d8:fa:ca:2b:32:72:c5:c9:da:dc:b5:cb:4c:a1: 7d:60:51:73:1d:67:07:58:7b:93:8f:64:f3:05:c0:e1:ae:8c: 52:4f:10:b0:a8:dc:79:33:e2:43:c2:a5:4f:84:ff:c0:ef:ac: 8f:71:a9:e6:d8:a7:94:b2:69:6d:9d:21:49:23:84:eb:1c:af: 2d:8f:86:55:4a:31:52:20:b5:68:a4:a9:d6:70:24:be:d6:11: 6c:48:41:ce:f1:cc:61:ff:9e:67:ca:04:bf:61:fc:50:cd:50: 82:34:30:3d:8c:b5:df:f6:3c:f5:2e:e1:06:46:c3:ae:03:d5: b7:20:b4:1e:dd:2a:fe:13:00:64:c4:da:f3:c4:42:24:ff:a2: 21:3b:76:c0:0f:0d:58:2d:88:e5:71:25:df:f9:e0:86:db:f9: f2:fe:4d:41:54:49:33:13:05:1f:88:fb:6b:47:26:7e:67:1b: 34:f8:74:5c:49:f5:35:4a:01:89:f6:71:34:93:b0:f1:cd:d0: 26:e6:9f:7c:54:8a:0c:1c:94:4d:19:9b:0f:3a:ea:16:3c:81: fb:5e:23:56:80:ab:e5:0c:cf:72:2e:ef:44:d0:73:02:03:83: 6a:82:65:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3RkUxMTAvBgNVBAUTKEM4MDk3M0QxNkNDQ0M5RTE4QzEzQTY4ODAzM0RDNEQw RjBFNjFDNEEwHhcNMjYwOTIxMDYyMzQ3WhcNMjYwOTI4MDYyMzQ3WjAYMRYwFAYD VQQDEw02YWIwY2Q3My0xYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPbF7zI4WI7EhpO8dnWlzWIVm78WPOlfuXRDtses+D/xJkav874NixJibJ6Z TLJoBOi5lIlPAB1lxnRn95sAskLrbiUYuVMpDHlSeMbOzzTwm19iQD8BFOedBBUi 9Hl00szq0axamla+WL6hDY0Iq2CyXJ3WoOkq9Zff+1tpsN3eZjv2Ak9P2umcwxzX kCuLQyzB8S20sKLi2K0M5OgaL+EM1NuOcz/me8A93mgL/dnGFxg1dBvrDPdH0TiQ P+YvAZO+dubsvxb8EhyoKCvZ5HvPKEHVNKbHHZSHQ+EtFDdM1svUcrLbi1Ul1E+M RkLSPctoYRcT0zYVI1cKdqTAPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7RQqsu TVhl1l8cetCTpSDyOMfPMB8GA1UdIwQYMBaAFMgJc9FszMnhjBOmiAM9xNDw5hxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdGRS9DMDg3NTcyMjRE OEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXllR01FNmFJQXozRTBQRG1I RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdGRS9DMDg3NTcyMjREOEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXll R01FNmFJQXozRTBQRG1IRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa2KRTN3I+MmmaWG5F/MaEqcYMqfSGNj6yisycsXJ2ty1y0yhfWBRcx1nB1h7 k49k8wXA4a6MUk8QsKjceTPiQ8KlT4T/wO+sj3Gp5tinlLJpbZ0hSSOE6xyvLY+G VUoxUiC1aKSp1nAkvtYRbEhBzvHMYf+eZ8oEv2H8UM1QgjQwPYy13/Y89S7hBkbD rgPVtyC0Ht0q/hMAZMTa88RCJP+iITt2wA8NWC2I5XEl3/nghtv58v5NQVRJMxMF H4j7a0cmfmcbNPh0XEn1NUoBifZxNJOw8c3QJuaffFSKDByUTRmbDzrqFjyB+14j VoCr5QzPci7vRNBzAgODaoJl0g== -----END CERTIFICATE-----Generated at Tue Sep 22 13:58:28 2026 by rpki-client