$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft File: ypAQR86iWPy4s5sDZNpIokZit00.mft (raw, json) Hash identifier: hf47pUfG3pB4JaLZU4bRNsEmDJifcdMi61J7EJd2mI4= Subject key identifier: 2A:36:80:6D:1D:49:69:06:1C:73:E6:17:C6:B0:0F:D2:B3:E4:C5:8C Authority key identifier: CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D Certificate issuer: /CN=A91C987A/serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft Manifest number: 24 Signing time: Mon 21 Sep 2026 08:52:29 +0000 Manifest this update: Mon 21 Sep 2026 08:52:28 +0000 Manifest next update: Mon 28 Sep 2026 08:52:28 +0000 Files and hashes: 1: ypAQR86iWPy4s5sDZNpIokZit00.crl (hash: 4R/7Uyje6Q9WOgWfiTLF4g0aeiIcx1t86afnXdnM40w=) 2: BD79B614915611F18490ADCA6911F970.roa (hash: QYVNcxQHFREpP33/6Uxpf9LJcni4eo476dd+VvhSGPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C987A, serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D Validity Not Before: Sep 21 08:52:28 2026 GMT Not After : Sep 28 08:52:28 2026 GMT Subject: CN=6ab0f04c-b5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:87:52:8e:ba:bc:72:cf:79:b2:39:4a:66:0e: d1:65:e0:e4:c3:c2:11:5c:ff:30:fe:41:a9:0e:3b: 9d:58:e4:49:c1:7a:fc:83:18:6e:18:ae:5b:8c:31: bd:31:06:12:e7:5d:b2:8a:b5:6e:99:f8:82:13:5b: 74:db:fb:0a:cf:36:94:14:ef:da:59:48:d0:07:a2: 5e:5c:bf:41:c4:c5:18:20:6f:0c:9f:90:7b:ea:d6: 87:4b:d2:2c:ab:79:df:fe:d7:ed:68:8a:42:8b:30: 85:6c:cd:6a:af:c1:d8:e0:82:af:c8:1d:31:41:0e: e0:e8:2a:80:94:ea:e1:5c:07:08:41:a8:73:e3:f6: aa:02:c6:78:97:20:f4:70:6d:6c:36:4c:1d:b1:06: 1c:a1:bd:20:ce:6f:a3:03:16:fb:05:7e:fd:da:30: ba:3f:c0:a7:71:02:46:11:80:a1:94:2d:f4:6d:b2: 78:eb:67:4e:01:31:db:ea:03:df:04:ca:0f:4b:7a: 92:96:2a:da:91:f6:41:f2:a8:0d:ea:06:27:38:01: f9:52:15:88:19:26:9d:1a:98:b9:18:44:71:f4:a9: a2:b0:cf:41:2a:62:3a:60:1a:cb:c0:89:30:a3:94: 72:26:9f:b0:59:b4:ce:6a:ea:1c:2b:83:96:9b:97: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:80:6D:1D:49:69:06:1C:73:E6:17:C6:B0:0F:D2:B3:E4:C5:8C X509v3 Authority Key Identifier: keyid:CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:cf:da:e8:15:ac:0a:bc:24:ff:68:5c:13:33:d9:e4:19: 64:fe:46:bb:47:34:9f:42:da:38:e3:f5:c4:cb:a3:0a:0e:6d: 98:49:8a:9b:56:a0:fd:37:50:82:37:85:e6:78:2d:2f:e2:54: 3a:53:d6:0e:f6:eb:77:9f:76:38:de:31:41:e0:21:85:e5:21: b9:c0:7a:03:d7:e7:80:ab:84:86:5d:22:8b:a1:bf:43:94:af: fb:b6:d1:2f:f6:14:f7:70:f6:f2:58:72:4b:06:d0:9c:f4:64: c7:cc:f4:d9:e2:af:a1:54:54:ee:1b:d0:c5:ad:55:29:a7:f6: 2e:73:f9:e1:d8:eb:96:a4:b3:b0:56:7f:fc:54:ca:a8:91:64: 71:ec:a9:10:16:9f:b6:07:84:ff:dc:52:66:0d:56:b1:a3:67: ef:9b:b0:11:8b:e1:0c:cd:b4:4b:60:b8:24:92:b6:ac:2d:2c: 2f:33:c7:f2:8f:15:ae:8e:6a:11:b6:8e:2a:14:32:67:60:fc: 86:d5:9a:d9:5c:5b:54:9d:e4:4b:f2:4a:39:38:d8:60:16:43: 02:bc:f0:68:dd:07:ec:ca:ff:9a:6b:43:94:26:3e:de:fe:c3: 8b:7d:19:a8:2d:b2:cb:1c:06:cc:73:06:30:ba:27:5b:d6:e9: 43:4b:02:19 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTg3QTExMC8GA1UEBRMoQ0E5MDEwNDdDRUEyNThGQ0I4QjM5QjAzNjREQTQ4QTI0 NjYyQjc0RDAeFw0yNjA5MjEwODUyMjhaFw0yNjA5MjgwODUyMjhaMBgxFjAUBgNV BAMTDTZhYjBmMDRjLWI1ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqh1KOurxyz3myOUpmDtFl4OTDwhFc/zD+QakOO51Y5EnBevyDGG4YrluMMb0x BhLnXbKKtW6Z+IITW3Tb+wrPNpQU79pZSNAHol5cv0HExRggbwyfkHvq1odL0iyr ed/+1+1oikKLMIVszWqvwdjggq/IHTFBDuDoKoCU6uFcBwhBqHPj9qoCxniXIPRw bWw2TB2xBhyhvSDOb6MDFvsFfv3aMLo/wKdxAkYRgKGULfRtsnjrZ04BMdvqA98E yg9LepKWKtqR9kHyqA3qBic4AflSFYgZJp0amLkYRHH0qaKwz0EqYjpgGsvAiTCj lHImn7BZtM5q6hwrg5abl/d5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKjaAbR1J aQYcc+YXxrAP0rPkxYwwHwYDVR0jBBgwFoAUypAQR86iWPy4s5sDZNpIokZit00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5ODdBLzIwOEM2QTc2OEIw ODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5NHM1c0RaTnBJb2taaXQw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXBBUVI4NmlXUHk0czVzRFpOcElva1ppdDAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 ODdBLzIwOEM2QTc2OEIwODExRjFBNDM2ODRDNTcwMTFGOTcwL3lwQVFSODZpV1B5 NHM1c0RaTnBJb2taaXQwMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAx+s/a6BWsCrwk/2hcEzPZ5Blk/ka7RzSfQto44/XEy6MKDm2YSYqbVqD9N1CC N4XmeC0v4lQ6U9YO9ut3n3Y43jFB4CGF5SG5wHoD1+eAq4SGXSKLob9DlK/7ttEv 9hT3cPbyWHJLBtCc9GTHzPTZ4q+hVFTuG9DFrVUpp/Yuc/nh2OuWpLOwVn/8VMqo kWRx7KkQFp+2B4T/3FJmDVaxo2fvm7ARi+EMzbRLYLgkkrasLSwvM8fyjxWujmoR to4qFDJnYPyG1ZrZXFtUneRL8ko5ONhgFkMCvPBo3Qfsyv+aa0OUJj7e/sOLfRmo LbLLHAbMcwYwuidb1ulDSwIZ -----END CERTIFICATE-----Generated at Tue Sep 22 18:27:30 2026 by rpki-client