$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json) Hash identifier: UjZa/8EZUuqUB12SaD37Q/uYYrNqzXAG9ynwAe8krfU= Subject key identifier: CA:46:B6:48:6B:D9:3D:1E:4E:D1:C1:AD:8B:1C:64:4A:95:4F:1C:F3 Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft Manifest number: 019C Signing time: Mon 21 Sep 2026 04:19:00 +0000 Manifest this update: Mon 21 Sep 2026 04:19:00 +0000 Manifest next update: Mon 28 Sep 2026 04:19:00 +0000 Files and hashes: 1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: Tw5utV+xoywuizAApFt+JDWBwakMT55ZGNyWGgTRPiU=) 2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: y32dMEUN6YUCKolUe/uVA0r0aXZ6vWR2Ez2nh841QQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Validity Not Before: Sep 21 04:19:00 2026 GMT Not After : Sep 28 04:19:00 2026 GMT Subject: CN=6ab0b034-6dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:9b:de:a4:a0:ca:23:24:b0:63:6d:f2:38: 70:09:7d:7d:eb:3d:7c:c7:fd:a0:97:e6:44:ee:14: 4f:86:64:eb:81:a9:ea:78:88:28:98:c0:d3:0a:4f: 94:ea:3d:b0:50:30:c3:75:93:9c:30:6e:ac:5e:68: 9e:1f:2a:0c:6c:7d:dd:64:79:9e:a2:06:d5:fe:10: 95:4a:62:e8:10:5b:09:2f:b5:ae:70:ca:9c:9c:f5: 16:86:1e:ba:09:e4:10:39:47:3e:dd:c9:61:37:3c: ce:0b:04:06:ae:3d:53:c0:80:ef:2c:33:b0:0f:4a: 33:1c:23:fc:eb:32:3e:a8:8d:d1:0a:ea:e9:13:19: d5:fa:12:54:5c:ac:e6:04:ee:52:c2:d3:c9:76:84: a6:a9:34:b6:07:b9:e6:a7:52:40:9b:ca:a2:56:9f: 14:65:b2:21:2a:3d:81:b7:b7:72:29:fa:1c:29:df: a8:8c:8b:1b:2d:99:66:50:9e:76:b2:2e:7b:8d:ac: a0:b8:46:9d:cf:31:5a:29:48:de:2b:c6:5e:9d:60: f3:d0:10:89:06:28:29:16:79:30:be:92:e9:83:be: 50:7a:e9:2b:bf:48:cf:3d:23:c3:c7:99:4a:dc:9e: 41:e4:01:8e:4b:71:69:6f:0c:14:75:6f:0e:3a:03: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:B6:48:6B:D9:3D:1E:4E:D1:C1:AD:8B:1C:64:4A:95:4F:1C:F3 X509v3 Authority Key Identifier: keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9c:20:99:8f:06:86:3c:45:64:e4:90:7b:a9:2f:19:ae:d3: 9e:6c:a5:c6:2c:eb:03:dd:a9:55:ce:71:4b:35:e0:94:9a:8c: bf:55:36:f3:34:18:69:03:09:f4:52:c2:ce:1b:1a:f8:06:c3: cc:08:2c:4a:9f:0d:6a:c3:d1:d3:74:38:fc:f5:92:c9:83:1f: d3:ba:1c:2b:f9:3c:d0:65:e8:65:6b:5c:67:96:33:94:d1:f0: 98:1c:fc:9d:1f:1b:69:6d:c1:af:ab:d9:f1:fb:ea:b0:2c:db: 48:43:88:07:05:e0:fa:c3:f6:e5:7d:15:3d:55:e4:c4:e6:28: 9e:8e:a5:0e:ff:4b:89:ce:ac:24:85:20:36:6d:d2:ca:89:54: 95:51:68:bd:99:2c:25:76:ee:4a:e4:06:34:ac:75:c3:8b:c9: 2a:c1:c7:13:f0:2e:51:d3:ff:35:2e:c2:ce:c5:87:8a:32:22: 84:ce:de:98:c2:06:84:59:e6:81:f0:65:0a:97:39:9b:56:fc: 42:e4:c5:f8:8a:72:55:54:15:98:7f:92:8e:87:67:35:20:58: 3c:89:82:30:02:f1:90:b1:b0:53:c8:68:61:45:65:b3:2a:c7: fa:44:68:a4:ed:7d:80:2c:92:c4:e1:5e:8b:e4:04:6c:3a:93: da:15:73:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKDYzMEVGQzhCQzgyNDdGOTlBMDEyODA3NDFFNEExQTBE QjdGMTQ3QjAwHhcNMjYwOTIxMDQxOTAwWhcNMjYwOTI4MDQxOTAwWjAYMRYwFAYD VQQDEw02YWIwYjAzNC02ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpab3qSgyiMksGNt8jhwCX196z18x/2gl+ZE7hRPhmTrganqeIgomMDTCk+U 6j2wUDDDdZOcMG6sXmieHyoMbH3dZHmeogbV/hCVSmLoEFsJL7WucMqcnPUWhh66 CeQQOUc+3clhNzzOCwQGrj1TwIDvLDOwD0ozHCP86zI+qI3RCurpExnV+hJUXKzm BO5SwtPJdoSmqTS2B7nmp1JAm8qiVp8UZbIhKj2Bt7dyKfocKd+ojIsbLZlmUJ52 si57jayguEadzzFaKUjeK8ZenWDz0BCJBigpFnkwvpLpg75Qeukrv0jPPSPDx5lK 3J5B5AGOS3FpbwwUdW8OOgMS4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpGtkhr 2T0eTtHBrYscZEqVTxzzMB8GA1UdIwQYMBaAFGMO/IvIJH+ZoBKAdB5KGg238Uew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FMkNGOTQwQTQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1bWdFb0IwSGtvYURiZnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1 bWdFb0IwSGtvYURiZnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdZwgmY8GhjxFZOSQe6kvGa7TnmylxizrA92pVc5xSzXglJqMv1U28zQYaQMJ 9FLCzhsa+AbDzAgsSp8NasPR03Q4/PWSyYMf07ocK/k80GXoZWtcZ5YzlNHwmBz8 nR8baW3Br6vZ8fvqsCzbSEOIBwXg+sP25X0VPVXkxOYono6lDv9Lic6sJIUgNm3S yolUlVFovZksJXbuSuQGNKx1w4vJKsHHE/AuUdP/NS7CzsWHijIihM7emMIGhFnm gfBlCpc5m1b8QuTF+IpyVVQVmH+SjodnNSBYPImCMALxkLGwU8hoYUVlsyrH+kRo pO19gCySxOFei+QEbDqT2hVzrg== -----END CERTIFICATE-----Generated at Tue Sep 22 09:15:05 2026 by rpki-client