$ rpki-client -vvvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: fxGLQdQzdFpjrfW3i9OueBq03FI+KBC0t10di8oDM90= Subject key identifier: 22:69:0A:BF:96:BB:9A:F2:3C:25:44:7C:2B:06:E9:CA:C0:6D:FB:BA Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 0282 Signing time: Sat 31 Oct 2026 02:20:53 +0000 Manifest this update: Sat 31 Oct 2026 02:20:52 +0000 Manifest next update: Sat 07 Nov 2026 02:20:52 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: Qm7E8sc5yDHLc39Slz4CsV8vw4CwN+TUJFgtWTwsiA4=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: PWf4oMvr+PNTHRxrV3/i7vJtMPICCfeeIHaNdzjX+vU=) 3: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: 1E6dEPIoMSwpwPKFPaitFfgKeB/UCjvPX24bGC045Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 02:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Oct 31 02:20:52 2026 GMT Not After : Nov 7 02:20:52 2026 GMT Subject: CN=6ae55085-8c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:d2:12:40:b5:ca:35:55:0d:ca:33:d2:1c: 4a:ee:d1:01:65:1f:a9:10:28:ff:3d:cd:4d:2a:9a: 35:5e:30:a5:90:1a:09:32:cb:e6:62:e5:05:d1:45: 61:2f:8d:e6:e1:3b:d7:f7:db:80:82:b9:da:62:00: b5:33:83:16:ef:69:b4:f2:79:a2:79:51:a9:8d:d4: 62:e6:30:80:94:33:5c:24:3c:7e:bf:60:6b:75:ff: ff:42:bc:c4:8f:00:22:ff:d6:62:62:ec:34:50:5a: 8c:30:26:41:08:92:83:54:29:9e:e9:d3:77:43:68: 1f:54:80:3b:f0:1d:6d:9f:13:1c:e4:d2:c2:2f:03: 9c:c9:04:0b:18:e3:54:f3:cd:68:de:ba:c9:cb:ff: 3c:1a:3a:ee:70:42:db:f3:f9:32:4f:31:81:62:39: 4a:69:8f:69:f4:53:17:d8:c5:95:f5:68:60:00:65: 27:81:24:fb:72:98:96:f3:d4:4d:5c:8c:e2:49:9b: b4:fb:42:53:5b:ad:ae:7c:ed:b4:1f:4b:fc:8f:cb: 10:5c:ec:59:51:35:2d:dc:d3:28:db:0d:26:a3:67: 64:31:d8:5b:e4:ec:22:0a:9f:8d:3b:0b:40:40:29: c3:e7:ad:a3:d9:02:58:de:87:4e:ae:d4:54:33:11: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:0A:BF:96:BB:9A:F2:3C:25:44:7C:2B:06:E9:CA:C0:6D:FB:BA X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:12:21:f2:54:eb:45:50:5f:bd:90:6e:c0:4d:a5:33:ed: 82:e9:18:69:ef:ee:a3:96:65:2a:7a:92:73:e7:76:6c:c2:ea: b0:0f:bc:6c:94:2a:54:d7:30:ac:d6:bc:61:8e:2f:29:91:7c: 0f:71:e7:a2:98:88:00:72:5c:c1:7d:03:1f:4d:52:e1:e9:bb: 1d:d2:51:6d:af:e5:52:00:5f:7f:ed:c3:34:1f:4c:4b:cc:fa: aa:fc:76:17:3c:ce:92:d4:f6:71:f9:aa:94:ea:60:c1:bc:5c: 70:eb:6c:88:15:2b:68:44:d6:fe:c1:43:bf:7b:ac:67:95:a5: d7:ad:10:ba:05:b6:fb:3b:88:14:22:34:1a:67:d5:9b:20:c0: 6e:a6:cc:08:2f:a3:b0:e7:aa:a4:11:87:b3:ec:6e:59:76:3a: 84:39:9d:39:b6:46:9b:bf:54:6d:84:29:cd:87:5f:8b:fc:28: 65:07:7c:11:5e:8e:81:32:79:92:1b:83:17:32:b2:33:0c:7a: 65:bd:27:12:fb:ff:65:a4:3b:07:0d:ca:81:7b:fd:dc:d9:e5: b7:07:e9:06:ad:b8:04:d9:a2:ea:ba:c8:75:df:d7:62:c8:8b: 2d:a5:10:eb:d1:79:72:73:13:6d:d1:d3:fb:31:59:37:32:f3: 07:23:b6:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjYxMDMxMDIyMDUyWhcNMjYxMTA3MDIyMDUyWjAYMRYwFAYD VQQDEw02YWU1NTA4NS04YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXfSEkC1yjVVDcoz0hxK7tEBZR+pECj/Pc1NKpo1XjClkBoJMsvmYuUF0UVh L43m4TvX99uAgrnaYgC1M4MW72m08nmieVGpjdRi5jCAlDNcJDx+v2Brdf//QrzE jwAi/9ZiYuw0UFqMMCZBCJKDVCme6dN3Q2gfVIA78B1tnxMc5NLCLwOcyQQLGONU 881o3rrJy/88GjrucELb8/kyTzGBYjlKaY9p9FMX2MWV9WhgAGUngST7cpiW89RN XIziSZu0+0JTW62ufO20H0v8j8sQXOxZUTUt3NMo2w0mo2dkMdhb5OwiCp+NOwtA QCnD562j2QJY3odOrtRUMxEPTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJpCr+W u5ryPCVEfCsG6crAbfu6MB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxESIfJU60VQX72QbsBNpTPtgukYae/uo5ZlKnqSc+d2bMLqsA+8bJQqVNcw rNa8YY4vKZF8D3HnopiIAHJcwX0DH01S4em7HdJRba/lUgBff+3DNB9MS8z6qvx2 FzzOktT2cfmqlOpgwbxccOtsiBUraETW/sFDv3usZ5Wl160QugW2+zuIFCI0GmfV myDAbqbMCC+jsOeqpBGHs+xuWXY6hDmdObZGm79UbYQpzYdfi/woZQd8EV6OgTJ5 khuDFzKyMwx6Zb0nEvv/ZaQ7Bw3KgXv93NnltwfpBq24BNmi6rrIdd/XYsiLLaUQ 69F5cnMTbdHT+zFZNzLzByO29A== -----END CERTIFICATE-----Generated at Sat Oct 31 21:30:51 2026 by rpki-client