$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: 77z1Spvhu9NQbA5Ab+ib8TpONVr1CFWYyIJCCp1dILw= Subject key identifier: 85:68:46:20:A3:6F:DA:0B:13:C2:34:1D:CA:F8:D6:EA:B8:61:60:23 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 35FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 35A4 Signing time: Sun 20 Sep 2026 14:49:05 +0000 Manifest this update: Sun 20 Sep 2026 14:49:04 +0000 Manifest next update: Sun 27 Sep 2026 14:49:04 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: uTafovO/TiMK1RNCF2tA7eMto73wt7zoSEPg6BlEtVg=) 2: 78B9569EB33711F19DE78FDE6D11F970.roa (hash: C0/nryBG+LkmWz6cZbkZcEYqysNpXiFU08p//7bHVZo=) 3: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=) 4: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=) 5: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=) 6: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=) 7: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=) 8: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13821 (0x35fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Sep 20 14:49:04 2026 GMT Not After : Sep 27 14:49:04 2026 GMT Subject: CN=6aaff261-ea3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:b3:fe:1b:ec:ae:c5:95:2c:88:89:d7:3b: 20:20:48:fc:d3:8c:25:9a:80:ba:77:44:e7:ee:75: 4a:79:d9:23:92:89:81:52:ca:a4:d5:0b:80:66:34: ff:47:bf:78:63:d2:a4:3d:3f:0f:a4:10:7e:3a:08: 13:52:65:87:b3:fe:43:ea:fd:d7:7d:ba:f7:f6:82: 3a:ca:33:31:d7:e8:1c:3b:21:54:0d:85:31:a6:24: c1:2c:9e:e4:b5:8f:8a:70:0f:c7:41:8c:de:e8:37: 52:ec:42:b9:83:96:8c:d3:64:ff:14:d1:07:cf:bd: 5d:84:b2:63:3e:08:52:e9:f1:6f:35:68:d3:07:64: 37:5c:08:68:b3:3b:bf:92:ae:1f:23:5d:d4:d3:02: 37:42:94:7e:97:a3:fa:34:93:9b:c8:8a:e0:c6:08: 13:19:b9:75:39:5a:3a:9c:b0:2b:e7:5b:e5:2a:b0: 28:37:f4:a1:57:4b:98:63:6e:e6:bf:63:94:a7:18: 4a:f1:ba:db:71:4e:2e:6c:02:7c:bd:67:cf:67:08: 2f:70:39:90:5e:18:e8:57:ef:46:4d:fe:3e:1f:23: 28:4f:78:3f:1e:68:28:21:d7:4e:b9:c9:5c:39:69: 32:69:6e:a9:9c:bf:32:9c:4f:80:63:74:5c:7d:8e: e1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:68:46:20:A3:6F:DA:0B:13:C2:34:1D:CA:F8:D6:EA:B8:61:60:23 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:18:2f:f1:f2:a9:41:83:26:5a:7c:f7:6c:7e:dc:bd:e0:99: 1b:2d:71:3d:73:62:8d:25:4d:fc:41:0c:d8:7b:48:93:fe:0b: 27:51:c1:7f:66:1f:4a:b7:26:2a:22:18:03:e5:15:37:d5:c6: 8d:4c:83:bc:42:3e:c9:77:05:31:b1:c8:29:17:27:db:43:a0: 5f:04:6a:b9:bc:41:c3:e3:82:91:88:e9:66:72:9a:fa:95:46: 48:c9:68:a4:55:1b:c6:51:68:8c:da:71:f1:55:33:f0:11:24: ca:7b:42:64:6e:93:91:f4:a6:41:da:73:23:4f:f4:64:24:ef: cc:37:8b:46:b8:0f:4e:9b:d9:53:22:a9:48:90:70:7b:b7:d7: cb:40:77:93:c8:6d:f5:c2:ce:4a:b5:9a:71:d4:75:0c:10:57: fe:f5:aa:e4:0d:e7:da:69:3d:2a:52:d2:ea:28:d9:fe:37:37: 6c:62:de:51:e0:af:c7:4a:aa:2b:3f:60:97:2b:0a:24:1e:3f: bd:06:c5:86:28:9e:23:ab:be:6e:a3:c6:00:83:94:a6:3a:86: 77:65:43:2f:82:ce:ba:45:43:26:d2:da:50:5d:c9:b6:a2:ad: 8e:bd:e6:64:d8:82:64:6f:ca:1c:49:87:08:d2:64:43:22:2a: f6:49:06:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYwOTIwMTQ0OTA0WhcNMjYwOTI3MTQ0OTA0WjAYMRYwFAYD VQQDEw02YWFmZjI2MS1lYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/iz/hvsrsWVLIiJ1zsgIEj804wlmoC6d0Tn7nVKedkjkomBUsqk1QuAZjT/ R794Y9KkPT8PpBB+OggTUmWHs/5D6v3Xfbr39oI6yjMx1+gcOyFUDYUxpiTBLJ7k tY+KcA/HQYze6DdS7EK5g5aM02T/FNEHz71dhLJjPghS6fFvNWjTB2Q3XAhoszu/ kq4fI13U0wI3QpR+l6P6NJObyIrgxggTGbl1OVo6nLAr51vlKrAoN/ShV0uYY27m v2OUpxhK8brbcU4ubAJ8vWfPZwgvcDmQXhjoV+9GTf4+HyMoT3g/HmgoIddOuclc OWkyaW6pnL8ynE+AY3RcfY7hmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVoRiCj b9oLE8I0Hcr41uq4YWAjMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnhgv8fKpQYMmWnz3bH7cveCZGy1xPXNijSVN/EEM2HtIk/4LJ1HBf2YfSrcm KiIYA+UVN9XGjUyDvEI+yXcFMbHIKRcn20OgXwRqubxBw+OCkYjpZnKa+pVGSMlo pFUbxlFojNpx8VUz8BEkyntCZG6TkfSmQdpzI0/0ZCTvzDeLRrgPTpvZUyKpSJBw e7fXy0B3k8ht9cLOSrWacdR1DBBX/vWq5A3n2mk9KlLS6ijZ/jc3bGLeUeCvx0qq Kz9glysKJB4/vQbFhiieI6u+bqPGAIOUpjqGd2VDL4LOukVDJtLaUF3JtqKtjr3m ZNiCZG/KHEmHCNJkQyIq9kkG1A== -----END CERTIFICATE-----Generated at Tue Sep 22 02:53:55 2026 by rpki-client