$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: KtgoT9irqn1FHs3ZnV18GE3Ymab7C/yg7M1eTbHAR6M= Subject key identifier: FE:C6:EC:B1:03:E6:40:85:05:8B:66:33:FE:50:53:5E:05:15:44:50 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 028F Signing time: Thu 05 Nov 2026 02:28:17 +0000 Manifest this update: Thu 05 Nov 2026 02:28:17 +0000 Manifest next update: Thu 12 Nov 2026 02:28:17 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: F9oxfAdev6Cia9RngRpzXP5yZTACMB8MtrgbWoPewd4=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: Tc+1LYvp/EHSWgsQOB1EwJZ0GtDm1QSlM5WXrDm3nkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 02:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Nov 5 02:28:17 2026 GMT Not After : Nov 12 02:28:17 2026 GMT Subject: CN=6aebe9c1-bc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:0d:87:fc:45:13:a1:b8:da:60:0f:8c:71: 6b:33:67:68:0b:00:a8:3d:09:6b:25:f7:19:b4:5c: 7d:76:40:c7:af:24:cc:ad:3a:16:d2:16:d5:f9:76: 8b:4b:e1:bb:af:bd:3d:a8:d5:41:1e:85:c1:4d:22: 80:a2:b5:02:7f:64:ba:a5:46:fb:5d:8a:b0:4b:c1: 2d:9b:67:8b:0f:a0:c8:0c:d8:3a:5c:4d:0c:76:61: 88:71:ea:79:1b:b5:92:1f:2a:e9:65:ac:22:29:a1: 11:9f:37:b4:fe:3a:ff:12:03:cd:5e:c7:c1:15:08: a6:be:5a:dc:3c:a9:5a:61:1c:5c:5d:ec:5a:57:45: 53:3e:65:6f:d2:9d:cd:59:1f:77:81:28:f9:de:04: b8:d1:10:71:74:8b:da:e5:9e:16:3b:67:40:c0:04: 49:e6:06:aa:57:bc:e1:f1:f8:d3:0d:58:6c:25:69: 6b:97:27:07:49:93:c9:9d:fa:28:96:7e:eb:56:29: 1a:0b:2e:49:69:0c:c8:f0:f8:f7:0d:52:3d:f8:57: 54:c2:5b:f4:07:8c:c3:ba:de:ed:5b:9a:73:78:42: b7:2f:d6:ed:20:87:52:58:48:04:79:3f:eb:7a:ab: d1:d6:91:66:52:aa:7d:29:82:38:30:a6:8a:e2:2a: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:EC:B1:03:E6:40:85:05:8B:66:33:FE:50:53:5E:05:15:44:50 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c3:42:b2:cb:43:73:d3:70:ab:bd:05:54:79:4c:7c:17:33: 0a:fe:6e:58:15:2a:b0:2c:5d:fc:ec:f0:c1:e0:65:d0:89:55: 48:e7:1d:57:ce:93:e5:14:51:50:43:95:b3:69:49:12:b7:34: fa:1b:24:32:8e:5e:7f:9a:18:78:22:91:51:c0:f8:ab:bd:ff: 00:62:e1:15:ef:7d:87:cc:06:eb:3b:bb:70:8e:0b:3f:08:27: 28:3d:a2:97:7c:38:8e:b0:d5:83:64:90:20:3f:33:08:14:c7: bc:d8:a9:f7:f8:cd:3e:c4:13:f3:f1:b0:ef:d0:1d:83:5f:6d: ce:84:66:09:9c:e7:e1:e4:31:d3:8d:ce:51:39:92:7d:98:26: 92:52:b6:2e:33:55:15:8b:35:3b:ab:94:4e:4b:63:d0:7e:fa: d7:9c:75:a7:5f:ad:7c:0f:8b:06:92:12:68:4f:f1:03:46:ef: f5:74:15:55:18:f2:92:fd:a3:30:41:50:f4:8d:b6:ac:ea:43: da:7d:92:9b:ad:d9:af:04:47:c8:78:fb:3f:d5:cf:ee:5e:cf: e2:46:61:c8:d1:5a:23:04:a3:ce:46:91:17:30:8f:33:20:62: 8a:49:47:c8:0c:af:52:82:d2:fc:0f:90:d5:c8:35:2e:38:d2: 2c:25:4d:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjYxMTA1MDIyODE3WhcNMjYxMTEyMDIyODE3WjAYMRYwFAYD VQQDEw02YWViZTljMS1iYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaUNh/xFE6G42mAPjHFrM2doCwCoPQlrJfcZtFx9dkDHryTMrToW0hbV+XaL S+G7r709qNVBHoXBTSKAorUCf2S6pUb7XYqwS8Etm2eLD6DIDNg6XE0MdmGIcep5 G7WSHyrpZawiKaERnze0/jr/EgPNXsfBFQimvlrcPKlaYRxcXexaV0VTPmVv0p3N WR93gSj53gS40RBxdIva5Z4WO2dAwARJ5gaqV7zh8fjTDVhsJWlrlycHSZPJnfoo ln7rVikaCy5JaQzI8Pj3DVI9+FdUwlv0B4zDut7tW5pzeEK3L9btIIdSWEgEeT/r eqvR1pFmUqp9KYI4MKaK4ir3JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7G7LED 5kCFBYtmM/5QU14FFURQMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8NCsstDc9Nwq70FVHlMfBczCv5uWBUqsCxd/OzwweBl0IlVSOcdV86T5RRR UEOVs2lJErc0+hskMo5ef5oYeCKRUcD4q73/AGLhFe99h8wG6zu7cI4LPwgnKD2i l3w4jrDVg2SQID8zCBTHvNip9/jNPsQT8/Gw79Adg19tzoRmCZzn4eQx043OUTmS fZgmklK2LjNVFYs1O6uUTktj0H7615x1p1+tfA+LBpISaE/xA0bv9XQVVRjykv2j MEFQ9I22rOpD2n2Sm63ZrwRHyHj7P9XP7l7P4kZhyNFaIwSjzkaRFzCPMyBiiklH yAyvUoLS/A+Q1cg1LjjSLCVNMQ== -----END CERTIFICATE-----Generated at Thu Nov 5 16:32:57 2026 by rpki-client