$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft File: RyCit4x4I5km_e5zRKNoDaDYBx0.mft (raw, json) Hash identifier: xgOsP4UfJpZzKfRBayix/ZR6Xe/OM5uy9xAWv5IstpY= Subject key identifier: AF:74:45:23:E7:7E:DB:92:39:B5:69:5F:7F:71:9C:42:BE:CD:DF:F4 Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft Manifest number: 0177 Signing time: Fri 25 Sep 2026 04:47:11 +0000 Manifest this update: Fri 25 Sep 2026 04:47:11 +0000 Manifest next update: Fri 02 Oct 2026 04:47:11 +0000 Files and hashes: 1: RyCit4x4I5km_e5zRKNoDaDYBx0.crl (hash: oQ5YWLDB3XWi5RDKpyPf04XiSL2Gcu/xjk5roOuzuj8=) 2: D2D7B762995611EFADA5D754C4F9AE02.roa (hash: X6EiEn5M65HSmmFeN5iF7WFFRfDBc3ykCiCnmX0frCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Validity Not Before: Sep 25 04:47:11 2026 GMT Not After : Oct 2 04:47:11 2026 GMT Subject: CN=6ab5fccf-f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:86:4a:4a:2b:e1:ce:a7:1f:e2:f4:28:6a: 70:65:fc:02:ec:58:89:6c:11:d9:5c:64:e6:04:79: 7f:23:60:f9:bd:7d:b1:42:8b:8d:4d:7e:5a:4c:4f: 7e:ed:ce:4e:2a:a1:c1:29:34:83:75:74:a3:86:17: 23:b1:e7:e1:86:7d:a4:e4:74:67:23:96:ec:0e:60: 21:8d:b8:dc:6a:50:cc:c9:83:95:d0:08:89:ed:16: 55:38:13:4e:87:2c:a5:52:30:2d:2d:de:cd:e2:54: e6:a9:96:dd:87:97:f9:60:7e:d0:5f:73:84:73:3a: 88:07:c2:b9:3c:a6:09:8d:f7:21:c5:c4:77:6f:19: 93:93:cb:d5:36:63:70:a6:4a:cd:09:b3:26:1f:2a: 39:81:9c:68:ff:54:b9:01:4b:7e:44:29:7a:4f:ac: 24:e3:e8:42:e9:d8:30:67:25:bf:d1:a8:37:88:b3: e8:1e:2e:af:35:97:bf:4e:fa:26:73:42:be:24:d7: 44:73:a3:00:63:57:55:3f:1c:1a:11:7d:2e:22:d1: 0d:64:19:b5:0f:d9:dc:0d:7d:21:2f:ef:94:4f:b7: 15:9a:90:34:6b:8a:84:3d:3e:7f:da:3d:a1:d0:62: fc:c5:89:a6:4c:a5:20:b0:5f:5d:17:b8:af:01:9f: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:74:45:23:E7:7E:DB:92:39:B5:69:5F:7F:71:9C:42:BE:CD:DF:F4 X509v3 Authority Key Identifier: keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:2e:5c:04:e0:a4:43:1f:1f:a8:bb:db:ea:8e:42:8e:be: 86:0b:84:8f:33:82:0e:d1:e4:46:df:92:a4:e9:bc:d4:0f:96: fc:90:af:3c:3f:56:22:43:09:e7:5b:10:82:44:96:43:9d:e9: d7:65:51:45:73:c0:fb:19:4c:4e:ec:0a:d0:64:f5:9e:c0:bb: 9a:56:82:73:60:2f:80:85:2b:a4:20:a4:17:48:ec:14:87:b6: 7c:94:4d:da:ae:dc:49:17:1f:fa:92:c0:44:62:aa:77:4f:21: e2:b4:d1:cc:6f:80:b4:51:fa:fd:f1:72:ff:f1:13:28:42:8d: f2:7f:3a:56:bb:13:d6:9d:3d:fd:00:e9:0f:68:04:7c:53:e7: a6:ec:64:72:55:d8:66:24:9e:f1:f8:75:ec:ed:92:29:0e:eb: ef:fe:19:e6:fe:55:3a:1b:e9:f2:a9:ae:e6:fc:dd:40:a6:0f: 6f:84:d3:1b:f1:d7:9e:f0:28:48:34:20:33:b1:d8:2b:72:d8: c4:6c:3b:93:3d:96:c6:b4:c1:6a:eb:d0:a6:bc:ae:34:cf:c7: 99:ca:49:1f:5e:55:29:03:6a:6e:0e:1d:c1:89:50:55:bb:e3: db:1e:99:22:ad:7a:b0:2b:87:a2:45:d6:7c:2f:f5:83:14:19: a1:99:f6:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDQ3MjBBMkI3OEM3ODIzOTkyNkZERUU3MzQ0QTM2ODBE QTBEODA3MUQwHhcNMjYwOTI1MDQ0NzExWhcNMjYxMDAyMDQ0NzExWjAYMRYwFAYD VQQDEw02YWI1ZmNjZi1mOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZmGSkor4c6nH+L0KGpwZfwC7FiJbBHZXGTmBHl/I2D5vX2xQouNTX5aTE9+ 7c5OKqHBKTSDdXSjhhcjsefhhn2k5HRnI5bsDmAhjbjcalDMyYOV0AiJ7RZVOBNO hyylUjAtLd7N4lTmqZbdh5f5YH7QX3OEczqIB8K5PKYJjfchxcR3bxmTk8vVNmNw pkrNCbMmHyo5gZxo/1S5AUt+RCl6T6wk4+hC6dgwZyW/0ag3iLPoHi6vNZe/Tvom c0K+JNdEc6MAY1dVPxwaEX0uItENZBm1D9ncDX0hL++UT7cVmpA0a4qEPT5/2j2h 0GL8xYmmTKUgsF9dF7ivAZ/7BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK90RSPn ftuSObVpX39xnEK+zd/0MB8GA1UdIwQYMBaAFEcgoreMeCOZJv3uc0SjaA2g2Acd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi8yN0UzRURBNDk4 MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1a21fZTV6UktOb0RhRFlC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJERi8yN0UzRURBNDk4MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1 a21fZTV6UktOb0RhRFlCeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHEMuXATgpEMfH6i72+qOQo6+hguEjzOCDtHkRt+SpOm81A+W/JCvPD9WIkMJ 51sQgkSWQ53p12VRRXPA+xlMTuwK0GT1nsC7mlaCc2AvgIUrpCCkF0jsFIe2fJRN 2q7cSRcf+pLARGKqd08h4rTRzG+AtFH6/fFy//ETKEKN8n86VrsT1p09/QDpD2gE fFPnpuxkclXYZiSe8fh17O2SKQ7r7/4Z5v5VOhvp8qmu5vzdQKYPb4TTG/HXnvAo SDQgM7HYK3LYxGw7kz2WxrTBauvQpryuNM/HmcpJH15VKQNqbg4dwYlQVbvj2x6Z Iq16sCuHokXWfC/1gxQZoZn2Pg== -----END CERTIFICATE-----Generated at Sat Sep 26 04:43:15 2026 by rpki-client