$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft File: Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft (raw, json) Hash identifier: agDZyPCa8TjF+zdjrzKJgXd6TbVtsa5pAPo+EpVVouI= Subject key identifier: 58:9B:BE:03:3C:05:F6:49:24:5B:6A:0C:90:BD:6E:7C:3C:81:37:F2 Authority key identifier: 63:44:56:A4:9A:5B:2C:B6:1C:CD:90:A9:DC:61:F2:60:29:E8:7C:D4 Certificate issuer: /CN=A91C0657/serialNumber=634456A49A5B2CB61CCD90A9DC61F26029E87CD4 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft Manifest number: 20 Signing time: Fri 25 Sep 2026 09:02:55 +0000 Manifest this update: Fri 25 Sep 2026 09:02:55 +0000 Manifest next update: Fri 02 Oct 2026 09:02:55 +0000 Files and hashes: 1: Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl (hash: R/uqFT4lOJB5CMjDyzKqwRE8HyBd0gxAJCCAB83k17w=) 2: 9CFD6C4E8B9F11F1A015FFA56211F970.roa (hash: ae75i1UsURK661qHNvPqlVIMqk92KChqVwayxmO6Y0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0657, serialNumber=634456A49A5B2CB61CCD90A9DC61F26029E87CD4 Validity Not Before: Sep 25 09:02:55 2026 GMT Not After : Oct 2 09:02:55 2026 GMT Subject: CN=6ab638bf-de1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:0a:e6:0d:e1:72:ef:69:ed:5a:52:1c:99: c4:eb:19:0d:d7:3c:5a:ba:c9:47:dd:a3:2f:db:3a: 1e:83:ec:1c:b2:a1:3a:1e:9a:6e:41:19:6b:be:e1: e8:45:2f:af:10:0c:85:18:0d:1a:cb:37:5f:b4:22: 99:d9:95:8a:5e:d4:5a:74:c4:ee:19:53:9c:23:4f: 5d:37:95:30:67:ba:81:47:8b:26:5b:1c:db:97:a8: fb:4b:fd:ac:fd:a1:0c:8d:c2:fd:ea:8a:fb:33:72: b2:ae:30:e0:94:96:57:4c:8b:99:ac:a1:b2:36:bc: 8f:f6:af:98:bb:7e:e8:f6:2e:23:20:31:9b:ba:10: f1:25:61:dd:ce:86:f7:75:6c:d9:af:3e:40:b4:67: 3d:cd:f9:79:15:5c:32:f6:d1:1a:60:13:0e:1f:d2: 4a:9d:73:e9:ab:df:67:66:d9:00:42:f4:d5:02:79: 7a:83:60:9f:49:58:97:d5:c6:4e:2d:46:dc:7b:8c: b0:e8:53:f6:20:29:27:f9:0d:4b:f4:b7:8f:26:69: eb:72:39:78:86:9f:cd:c8:8a:7c:7c:5f:32:b8:33: 95:08:1f:a4:80:cf:5c:70:b2:dd:14:c3:2a:88:4e: 3a:c0:ea:e7:56:64:4a:08:ca:b7:6c:46:ec:3e:4f: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:BE:03:3C:05:F6:49:24:5B:6A:0C:90:BD:6E:7C:3C:81:37:F2 X509v3 Authority Key Identifier: keyid:63:44:56:A4:9A:5B:2C:B6:1C:CD:90:A9:DC:61:F2:60:29:E8:7C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:65:92:ce:7a:0c:ea:5e:10:37:e6:32:23:a6:cc:78:e0:a8: 68:4a:21:ac:a6:29:c0:69:6f:b9:cf:0a:ca:80:44:5b:7a:2d: 4e:67:f8:d8:c9:62:d8:09:31:75:52:1e:44:e2:9c:96:0b:9e: f8:09:9c:2c:4b:ee:b3:3f:3a:04:af:39:f2:19:11:7d:bb:86: f0:80:de:4c:b2:93:5a:b3:67:8f:9d:28:50:9f:97:9b:ba:3b: ef:43:15:85:34:df:62:9e:3a:b6:30:c2:7d:c3:ab:e4:d1:6a: f8:1b:0e:96:26:e2:0c:55:3a:6b:53:23:f6:8b:9c:0d:7e:96: 82:8d:46:97:59:2e:87:04:be:b6:ce:70:c3:1c:23:fa:45:5d: 0c:62:94:22:75:2e:30:1d:07:f2:33:18:8e:7b:4d:18:c4:88: 0b:b1:87:6a:e2:37:5b:95:0d:28:26:49:b3:58:ec:49:0a:45: b9:08:18:07:1f:d5:3e:7e:b3:2c:fa:0f:26:bf:7e:e0:b4:93: 22:43:5e:b2:01:76:fe:dd:58:ee:a0:cc:4f:f2:6f:f9:64:3b: cf:15:27:9f:23:2f:2f:ea:5e:38:90:0c:f9:74:39:50:52:b3: 88:dd:30:f6:8d:5d:06:5a:29:cd:65:58:d0:a4:43:d7:c2:f6: 54:bf:1d:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDY1NzExMC8GA1UEBRMoNjM0NDU2QTQ5QTVCMkNCNjFDQ0Q5MEE5REM2MUYyNjAy OUU4N0NENDAeFw0yNjA5MjUwOTAyNTVaFw0yNjEwMDIwOTAyNTVaMBgxFjAUBgNV BAMTDTZhYjYzOGJmLWRlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKuwrmDeFy72ntWlIcmcTrGQ3XPFq6yUfdoy/bOh6D7ByyoToemm5BGWu+4ehF L68QDIUYDRrLN1+0IpnZlYpe1Fp0xO4ZU5wjT103lTBnuoFHiyZbHNuXqPtL/az9 oQyNwv3qivszcrKuMOCUlldMi5msobI2vI/2r5i7fuj2LiMgMZu6EPElYd3Ohvd1 bNmvPkC0Zz3N+XkVXDL20RpgEw4f0kqdc+mr32dm2QBC9NUCeXqDYJ9JWJfVxk4t Rtx7jLDoU/YgKSf5DUv0t48maetyOXiGn83Iinx8XzK4M5UIH6SAz1xwst0UwyqI TjrA6udWZEoIyrdsRuw+T6pHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWJu+AzwF 9kkkW2oMkL1ufDyBN/IwHwYDVR0jBBgwFoAUY0RWpJpbLLYczZCp3GHyYCnofNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwNjU3L0RGNjkzNDVDOEI5 RDExRjFCRDc4MTI0MTYyMTFGOTcwL1kwUldwSnBiTExZY3paQ3AzR0h5WUNub2ZO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTBSV3BKcGJMTFljelpDcDNHSHlZQ25vZk5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw NjU3L0RGNjkzNDVDOEI5RDExRjFCRDc4MTI0MTYyMTFGOTcwL1kwUldwSnBiTExZ Y3paQ3AzR0h5WUNub2ZOUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMZZLOegzqXhA35jIjpsx44KhoSiGspinAaW+5zwrKgERbei1OZ/jYyWLYCTF1 Uh5E4pyWC574CZwsS+6zPzoErznyGRF9u4bwgN5MspNas2ePnShQn5ebujvvQxWF NN9injq2MMJ9w6vk0Wr4Gw6WJuIMVTprUyP2i5wNfpaCjUaXWS6HBL62znDDHCP6 RV0MYpQidS4wHQfyMxiOe00YxIgLsYdq4jdblQ0oJkmzWOxJCkW5CBgHH9U+frMs +g8mv37gtJMiQ16yAXb+3VjuoMxP8m/5ZDvPFSefIy8v6l44kAz5dDlQUrOI3TD2 jV0GWinNZVjQpEPXwvZUvx2g -----END CERTIFICATE-----Generated at Sat Sep 26 15:28:00 2026 by rpki-client