$ rpki-client -vvvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: wviK0ZJr6qqM5vSDGiGRQJnu3239cJbmdV0bZLzd+LA= Subject key identifier: F9:51:F6:B3:ED:40:44:EF:71:2C:82:50:42:6F:22:55:54:A7:FF:CB Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0A8F Signing time: Sun 18 Oct 2026 17:14:37 +0000 Manifest this update: Sun 18 Oct 2026 17:14:37 +0000 Manifest next update: Sun 25 Oct 2026 17:14:37 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: g1Jruwx7By6azX+3fTdtikal6QFamxyTmhqufe2RXEA=) 2: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=) 3: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Oct 18 17:14:37 2026 GMT Not After : Oct 25 17:14:37 2026 GMT Subject: CN=6ad4fe7d-2c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:18:5e:22:b3:97:08:92:b8:b0:65:ff:2d: 9e:6d:64:57:8c:c6:e8:a3:44:b1:af:f4:35:51:9a: 31:a3:59:0c:86:66:5f:dd:fa:62:62:e1:b7:72:d9: cb:f8:12:e0:55:7e:85:ad:28:fd:5f:12:40:2c:77: 54:41:52:b8:12:3e:c7:3a:72:6a:ba:f1:cb:0e:e9: c6:aa:ea:94:d2:f9:35:d5:11:43:7f:c1:29:54:2c: 7a:97:b9:45:18:3c:ab:84:08:db:ae:77:04:da:34: 6b:79:d8:14:26:e7:63:f4:fb:db:67:eb:26:96:4e: 91:5d:1b:64:60:4f:d7:42:ae:d9:96:a1:7d:c8:6b: 58:6c:e6:8f:99:26:fe:a0:d0:f1:ac:86:d0:36:f5: cb:76:8b:89:47:af:31:cd:91:4a:0e:da:12:80:70: 40:78:bf:08:49:17:0b:53:41:a4:08:47:89:7e:ac: 5c:17:3c:ce:54:2a:c5:87:6e:d6:c6:54:23:9e:0f: 27:e1:8d:d9:09:45:8c:03:d6:1f:aa:c3:c0:05:c5: bf:25:62:da:95:21:d9:53:dd:0e:75:f4:69:bf:e9: 20:ed:09:15:47:a3:95:bf:2a:78:6f:2f:84:99:ac: f1:9f:f5:7d:96:c1:d3:1a:e2:d1:da:b0:7b:80:36: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:F6:B3:ED:40:44:EF:71:2C:82:50:42:6F:22:55:54:A7:FF:CB X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:46:9d:64:d4:93:6b:79:b8:80:08:f9:6a:d3:b9:53:dd:39: c0:1d:1b:3f:3f:26:ee:64:5c:64:1b:7f:16:02:85:ce:f1:bb: 27:c9:d9:b7:29:f0:cd:33:9b:79:35:35:cf:9c:b0:0c:9c:80: ba:3c:21:98:8a:31:f7:b7:67:0b:d1:ac:8f:10:e9:ca:3e:4b: 74:92:cb:db:ee:6e:b9:08:c1:dd:5f:e8:f0:1d:89:f3:7a:75: 2c:0a:d5:eb:53:dc:8a:83:7c:2c:06:f5:98:a1:11:9b:2e:c2: c9:91:d3:6d:fe:e9:40:41:f3:3c:23:08:79:90:0a:c5:63:2e: d0:23:0a:b2:07:4a:72:55:1e:46:9a:ef:0b:5f:43:ad:f8:66: 7a:a4:0a:68:ef:71:34:e1:27:46:73:8e:96:4d:6e:eb:e1:17: 8f:b2:ed:e0:95:9b:ae:c3:94:ac:93:13:cc:95:2d:5d:92:85: 6b:0b:18:c3:c4:b5:19:fe:38:01:b3:72:29:1b:36:f6:c0:8f: 46:e5:f8:04:1b:a3:b6:11:ce:1b:82:42:16:7e:cf:b9:33:5d: 32:dd:cb:bf:14:0c:b1:f9:3d:c8:05:c5:99:52:12:b0:3e:1b: d2:39:3c:4e:9e:e3:1b:20:f6:e6:b1:58:92:3f:dd:3e:41:db: 80:8a:8c:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjYxMDE4MTcxNDM3WhcNMjYxMDI1MTcxNDM3WjAYMRYwFAYD VQQDEw02YWQ0ZmU3ZC0yYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr74YXiKzlwiSuLBl/y2ebWRXjMboo0Sxr/Q1UZoxo1kMhmZf3fpiYuG3ctnL +BLgVX6FrSj9XxJALHdUQVK4Ej7HOnJquvHLDunGquqU0vk11RFDf8EpVCx6l7lF GDyrhAjbrncE2jRredgUJudj9PvbZ+smlk6RXRtkYE/XQq7ZlqF9yGtYbOaPmSb+ oNDxrIbQNvXLdouJR68xzZFKDtoSgHBAeL8ISRcLU0GkCEeJfqxcFzzOVCrFh27W xlQjng8n4Y3ZCUWMA9YfqsPABcW/JWLalSHZU90OdfRpv+kg7QkVR6OVvyp4by+E mazxn/V9lsHTGuLR2rB7gDZCvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlR9rPt QETvcSyCUEJvIlVUp//LMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnEadZNSTa3m4gAj5atO5U905wB0bPz8m7mRcZBt/FgKFzvG7J8nZtynwzTOb eTU1z5ywDJyAujwhmIox97dnC9GsjxDpyj5LdJLL2+5uuQjB3V/o8B2J83p1LArV 61PcioN8LAb1mKERmy7CyZHTbf7pQEHzPCMIeZAKxWMu0CMKsgdKclUeRprvC19D rfhmeqQKaO9xNOEnRnOOlk1u6+EXj7Lt4JWbrsOUrJMTzJUtXZKFawsYw8S1Gf44 AbNyKRs29sCPRuX4BBujthHOG4JCFn7PuTNdMt3LvxQMsfk9yAXFmVISsD4b0jk8 Tp7jGyD25rFYkj/dPkHbgIqMlg== -----END CERTIFICATE-----Generated at Mon Oct 19 22:22:36 2026 by rpki-client