$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: c+CY/mzuk2etI3kFbsPJRoNasfsaSwgi9yz9kuRFK+w= Subject key identifier: 0E:B9:6E:E8:C1:5F:96:94:80:6B:77:87:38:61:06:FB:35:3A:98:DA Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 0426 Signing time: Mon 21 Sep 2026 00:06:12 +0000 Manifest this update: Mon 21 Sep 2026 00:06:11 +0000 Manifest next update: Mon 28 Sep 2026 00:06:11 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: 934GYEdB/snT0VMtHAMovAW6aVUqp4Hrm9tGxT0dUFg=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Sep 21 00:06:11 2026 GMT Not After : Sep 28 00:06:11 2026 GMT Subject: CN=6ab074f4-a342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:ad:c9:88:87:f2:f4:a6:29:46:30:2b:d8: c3:cf:69:fe:46:b1:d8:53:35:c7:dc:ba:02:9d:29: 0d:5f:44:8b:17:f7:0c:52:36:36:3e:9d:ea:94:db: 8d:cf:ce:7d:75:34:99:44:7c:59:2b:97:df:46:bb: a3:59:e2:a6:92:68:02:15:47:1c:d4:2c:30:f4:b2: 71:91:7b:d3:a1:91:1e:76:86:51:a1:aa:58:c6:67: aa:92:ca:01:03:75:b1:fa:11:01:32:7b:f6:ec:53: dc:a7:73:b8:0e:09:fc:6f:68:43:20:5a:65:59:5c: 59:0a:71:03:8f:60:4e:3f:a9:b6:cc:1a:ad:83:f4: cc:23:83:44:63:2b:68:3f:ff:25:18:67:54:d4:a0: 81:ff:dd:d4:5b:66:df:4d:1f:ee:d6:92:f7:83:6a: 25:af:96:16:cd:4e:96:5b:5a:32:f4:67:a9:07:f6: 7f:76:ef:67:cc:65:8f:5e:1e:99:93:25:75:a7:5d: 8c:ed:de:24:74:65:b8:8f:c6:90:69:eb:07:a1:c7: c3:08:52:73:b6:48:03:fb:3a:fb:ed:e1:49:83:65: 4a:25:61:b2:12:7c:a1:fe:f0:1f:92:cb:61:91:f4: f2:03:eb:88:6f:87:92:ff:76:eb:85:75:d4:47:e9: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:6E:E8:C1:5F:96:94:80:6B:77:87:38:61:06:FB:35:3A:98:DA X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8b:12:1e:cb:64:72:d3:63:4a:bf:9e:30:95:dd:99:b6:ec: 31:c9:a9:62:89:16:c9:e7:9e:bf:ae:35:05:87:57:fc:d7:b6: 95:1b:9a:a8:ee:8d:35:f0:e7:d9:12:9c:fc:b6:e0:d5:4e:1f: b3:7a:ce:8a:f0:c8:22:45:86:97:bf:f6:88:f6:2e:74:54:c5: 00:2c:d9:48:43:2c:e3:f1:9c:cc:b9:a8:8c:c1:dc:5e:73:e4: d8:39:b9:0d:14:c8:46:3f:f3:a2:1e:85:80:03:73:7a:e4:c1: 8e:74:e1:be:9f:e3:ed:3e:2a:62:9b:cd:5d:10:fb:58:4f:25: 20:3e:f1:e9:3c:20:88:af:ee:ee:c0:a7:a9:8a:05:b7:74:d6: 75:76:9e:42:a0:4a:3c:8b:1d:e7:5d:69:ef:c0:4b:0a:de:9a: b1:84:ba:fc:01:39:45:f9:51:b6:a3:18:bb:49:90:1a:58:79: 0d:71:47:8e:07:c4:d3:15:24:85:32:af:d9:06:bc:4c:42:05: 93:3a:86:95:f9:16:8f:92:4c:6f:38:3d:9b:e4:f7:0f:c3:de: 18:19:7e:97:b4:c9:7d:8c:81:29:21:a8:4c:3a:0e:70:14:17: ec:b6:97:34:2d:4e:80:3e:f0:32:1c:e0:32:77:e6:6c:5c:d8: ee:e8:a4:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjYwOTIxMDAwNjExWhcNMjYwOTI4MDAwNjExWjAYMRYwFAYD VQQDEw02YWIwNzRmNC1hMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUKtyYiH8vSmKUYwK9jDz2n+RrHYUzXH3LoCnSkNX0SLF/cMUjY2Pp3qlNuN z859dTSZRHxZK5ffRrujWeKmkmgCFUcc1Cww9LJxkXvToZEedoZRoapYxmeqksoB A3Wx+hEBMnv27FPcp3O4Dgn8b2hDIFplWVxZCnEDj2BOP6m2zBqtg/TMI4NEYyto P/8lGGdU1KCB/93UW2bfTR/u1pL3g2olr5YWzU6WW1oy9GepB/Z/du9nzGWPXh6Z kyV1p12M7d4kdGW4j8aQaesHocfDCFJztkgD+zr77eFJg2VKJWGyEnyh/vAfksth kfTyA+uIb4eS/3brhXXUR+nm2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA65bujB X5aUgGt3hzhhBvs1OpjaMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAYsSHstkctNjSr+eMJXdmbbsMcmpYokWyeeev641BYdX/Ne2lRuaqO6NNfDn 2RKc/Lbg1U4fs3rOivDIIkWGl7/2iPYudFTFACzZSEMs4/GczLmojMHcXnPk2Dm5 DRTIRj/zoh6FgANzeuTBjnThvp/j7T4qYpvNXRD7WE8lID7x6TwgiK/u7sCnqYoF t3TWdXaeQqBKPIsd511p78BLCt6asYS6/AE5RflRtqMYu0mQGlh5DXFHjgfE0xUk hTKv2Qa8TEIFkzqGlfkWj5JMbzg9m+T3D8PeGBl+l7TJfYyBKSGoTDoOcBQX7LaX NC1OgD7wMhzgMnfmbFzY7uik1A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:54:37 2026 by rpki-client