$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: /VV4xuR424IKh7U/TtZw7eveTHgO8KtvPiroLofsibI= Subject key identifier: 60:D2:7B:4A:2A:C1:DB:10:CB:77:AE:34:0C:65:AA:3C:A2:6C:EF:75 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 08DB Signing time: Sun 20 Sep 2026 20:24:22 +0000 Manifest this update: Sun 20 Sep 2026 20:24:21 +0000 Manifest next update: Sun 27 Sep 2026 20:24:21 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: oSJmbrC4CWRsHHGBhNxwDSGZlxRYUR4r8aNiHwNdLzM=) 2: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: hxEYoEMqj4BpXAJVc6GCqQHmmq9QFwmOlIQ9koH/Ilc=) 3: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: d3gEiVUqUws+0A/GhooCgjNpu9i7U506wCE8JKmKXtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Sep 20 20:24:21 2026 GMT Not After : Sep 27 20:24:21 2026 GMT Subject: CN=6ab040f6-64c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:09:c5:2a:40:a0:9f:fb:b8:f0:ad:ef:0f: 5d:96:e4:7a:12:77:07:19:67:64:13:28:d1:9f:aa: 8e:4e:b4:3a:cd:da:91:21:4b:02:af:1a:c5:09:9b: 48:41:99:e5:9b:ab:cd:a7:37:e2:a7:6f:71:ed:89: ee:33:71:56:36:37:be:6c:65:1f:1b:d6:77:82:d0: 7b:fe:59:df:aa:2e:a4:bb:27:e2:f9:4a:7e:54:3b: 75:40:e3:d5:e3:06:08:06:f3:7b:ef:43:48:ff:07: d3:77:e5:87:b0:89:ca:12:6a:7d:1a:33:1f:c5:8c: 47:1e:e6:e7:06:5c:be:8a:9c:9a:dc:76:d2:a6:a2: 85:f4:8f:31:71:8a:c0:1e:9e:cf:e4:47:d4:78:88: fb:c2:27:04:79:fd:96:79:d7:31:f9:5f:34:93:e3: 9c:1f:44:f5:b8:a3:68:c9:03:1b:cc:7a:ee:d1:22: 20:70:4b:6a:79:aa:1f:bd:83:ad:71:68:35:0d:e5: b7:fe:6b:eb:ea:04:9b:22:ed:2c:8a:0f:28:dd:59: a7:16:b4:7b:32:9c:4b:ab:2a:cb:f3:83:ee:14:18: d1:60:b8:39:23:77:f5:c0:98:e8:46:42:30:df:3f: 69:b1:ea:02:81:37:93:94:84:b3:5d:b8:2f:78:93: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D2:7B:4A:2A:C1:DB:10:CB:77:AE:34:0C:65:AA:3C:A2:6C:EF:75 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:43:7d:ce:18:3d:6c:56:91:86:ec:a5:72:4b:68:71:42:f8: 09:da:12:e8:10:bf:0c:c9:a9:dc:60:8a:7d:26:84:f9:53:61: 4a:ab:57:54:1f:21:69:9d:bf:f2:ef:66:a6:59:e5:29:13:7e: d6:f8:51:e9:2c:5a:4c:95:e5:f5:82:f1:fc:1b:12:c9:98:53: 55:4a:74:6c:04:e3:90:b5:d5:d1:24:e6:f1:5a:fd:4f:1a:ca: f9:4e:9a:ba:f7:05:c5:b7:75:c2:f2:4d:76:8f:20:22:2c:93: b9:0b:97:b5:37:ba:ec:b3:30:40:fb:9e:9f:89:ec:42:cd:58: 0f:2c:b8:80:d4:a5:e9:9f:4d:02:0f:ac:80:78:3d:c4:e8:a4: 42:92:6e:c9:65:fb:6b:48:c7:be:8e:d9:2f:ad:55:65:f8:6f: ec:ee:ba:7c:55:91:a8:93:33:5e:08:90:a3:ab:a4:b7:f5:0b: 5b:3f:84:60:fe:f5:ef:5e:4c:bc:0c:35:50:fd:e5:dd:0f:62: 3d:d1:ba:c7:46:be:b6:ba:c7:19:66:c7:67:e2:db:0b:35:80: ed:dd:97:2a:f2:c9:85:5e:50:ac:e0:43:21:01:b2:be:f0:91: c2:a2:a8:ae:88:96:c8:fb:23:a0:a5:0e:eb:e8:c2:90:84:ff: 61:08:19:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwOTIwMjAyNDIxWhcNMjYwOTI3MjAyNDIxWjAYMRYwFAYD VQQDEw02YWIwNDBmNi02NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnewJxSpAoJ/7uPCt7w9dluR6EncHGWdkEyjRn6qOTrQ6zdqRIUsCrxrFCZtI QZnlm6vNpzfip29x7YnuM3FWNje+bGUfG9Z3gtB7/lnfqi6kuyfi+Up+VDt1QOPV 4wYIBvN770NI/wfTd+WHsInKEmp9GjMfxYxHHubnBly+ipya3HbSpqKF9I8xcYrA Hp7P5EfUeIj7wicEef2Wedcx+V80k+OcH0T1uKNoyQMbzHru0SIgcEtqeaofvYOt cWg1DeW3/mvr6gSbIu0sig8o3VmnFrR7MpxLqyrL84PuFBjRYLg5I3f1wJjoRkIw 3z9pseoCgTeTlISzXbgveJPEjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDSe0oq wdsQy3euNAxlqjyibO91MB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIEN9zhg9bFaRhuylcktocUL4CdoS6BC/DMmp3GCKfSaE+VNhSqtXVB8haZ2/ 8u9mplnlKRN+1vhR6SxaTJXl9YLx/BsSyZhTVUp0bATjkLXV0STm8Vr9TxrK+U6a uvcFxbd1wvJNdo8gIiyTuQuXtTe67LMwQPuen4nsQs1YDyy4gNSl6Z9NAg+sgHg9 xOikQpJuyWX7a0jHvo7ZL61VZfhv7O66fFWRqJMzXgiQo6ukt/ULWz+EYP71715M vAw1UP3l3Q9iPdG6x0a+trrHGWbHZ+LbCzWA7d2XKvLJhV5QrOBDIQGyvvCRwqKo roiWyPsjoKUO6+jCkIT/YQgZSQ== -----END CERTIFICATE-----Generated at Tue Sep 22 07:48:17 2026 by rpki-client