$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: 2e4eJFhjlWGRXCjzgEtk9kzDBKyx0xwp/20Az+/aaCw= Subject key identifier: CF:B2:7F:61:AB:6C:99:1E:A2:A0:25:93:16:B1:3D:7E:D4:B2:9A:4D Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 0215 Signing time: Mon 21 Sep 2026 02:58:27 +0000 Manifest this update: Mon 21 Sep 2026 02:58:26 +0000 Manifest next update: Mon 28 Sep 2026 02:58:26 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: cd7BBu2pXmtvE74gGFqo8tReiVAsQWcIimpLrbtrb3A=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: esJHSwP5qiLnITDA6HOx8pEFmC6BOBPZgF6kgLGLSk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Sep 21 02:58:26 2026 GMT Not After : Sep 28 02:58:26 2026 GMT Subject: CN=6ab09d53-f965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:f9:7e:af:3d:32:e8:c3:fd:ec:c3:ec:74: 3d:7e:83:b8:47:65:ad:da:00:cb:e0:56:58:ab:02: 05:ce:48:e3:95:7b:24:10:c1:a2:d3:39:b9:ed:db: 85:7b:77:1b:08:67:64:cb:f2:7f:26:8c:82:a0:12: 97:d1:15:cb:c0:39:98:53:97:08:56:4a:7d:79:19: 9a:7c:dd:92:c5:06:32:ef:c1:78:9b:9a:ee:64:88: 4b:ac:50:0b:0e:b0:eb:fc:ba:2a:a8:9f:49:73:69: 9a:d4:47:94:66:a5:e0:e3:7d:95:37:f2:92:46:4e: e3:c1:80:14:b2:fb:b0:1b:52:c0:36:19:fa:12:26: 3a:6a:70:f8:d4:39:85:0b:68:71:cd:70:f2:39:6e: 1e:5e:fc:83:45:7f:b8:47:1c:5a:6c:a1:65:75:d6: fb:7d:32:78:cb:23:d0:4b:6d:72:a4:c3:d3:60:18: fd:de:2b:17:1e:cf:f6:70:3f:21:c2:fe:fe:4c:1d: f0:71:5e:df:72:fa:f5:58:98:6b:8e:ec:51:ee:97: 26:64:0b:3a:4b:fb:00:1d:ad:d9:e0:58:ec:41:bb: 73:04:7d:1e:89:1a:82:47:ce:62:4f:fc:0f:e0:54: ab:9f:8f:7f:66:c9:a5:a9:8e:21:64:1a:0e:4e:33: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B2:7F:61:AB:6C:99:1E:A2:A0:25:93:16:B1:3D:7E:D4:B2:9A:4D X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d5:2d:6f:6c:24:86:5c:45:9e:1a:f0:8f:e4:7b:27:2f:a3: aa:d4:d6:42:47:bb:87:ae:05:db:dd:df:39:08:f8:cd:23:c7: 6e:94:8d:96:64:75:f2:72:06:14:b6:99:26:51:20:ea:bd:e7: fb:ff:3a:8f:6d:95:64:ef:65:63:0c:ad:4a:1a:15:0e:21:d1: 85:f8:d9:29:9f:ce:a9:30:2f:6d:b4:e5:53:1c:fa:54:a4:cb: b8:5d:80:3f:a5:25:a6:91:a8:85:96:90:68:73:1a:d7:d3:c2: 63:b6:e6:42:63:a2:2d:07:02:2c:3c:e9:d0:f9:f8:82:2b:34: ec:44:ac:0e:10:1a:8e:fd:e5:b2:67:19:4c:fd:45:89:f6:b3: 0f:7b:6b:1f:dd:7c:6f:61:dc:f8:12:ee:b7:54:fc:26:46:a4: 1a:d7:6f:cf:16:71:ca:71:86:74:f0:68:bf:7d:5b:99:59:76: 7d:5b:46:9a:3e:c1:b3:d7:3a:af:c5:cd:06:f7:f9:55:c9:9d: e6:6e:96:d8:d4:3c:ed:89:16:e0:a7:62:1a:13:aa:10:ac:42: a2:a4:c5:c1:93:fc:7f:54:7c:e7:2b:cb:dc:76:b8:24:4b:69: cb:71:a1:31:cb:72:b2:9c:39:bd:28:0f:51:8a:d4:55:06:6a: af:c4:d8:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYwOTIxMDI1ODI2WhcNMjYwOTI4MDI1ODI2WjAYMRYwFAYD VQQDEw02YWIwOWQ1My1mOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zn5fq89MujD/ezD7HQ9foO4R2Wt2gDL4FZYqwIFzkjjlXskEMGi0zm57duF e3cbCGdky/J/JoyCoBKX0RXLwDmYU5cIVkp9eRmafN2SxQYy78F4m5ruZIhLrFAL DrDr/LoqqJ9Jc2ma1EeUZqXg432VN/KSRk7jwYAUsvuwG1LANhn6EiY6anD41DmF C2hxzXDyOW4eXvyDRX+4RxxabKFlddb7fTJ4yyPQS21ypMPTYBj93isXHs/2cD8h wv7+TB3wcV7fcvr1WJhrjuxR7pcmZAs6S/sAHa3Z4FjsQbtzBH0eiRqCR85iT/wP 4FSrn49/ZsmlqY4hZBoOTjPGkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+yf2Gr bJkeoqAlkxaxPX7UsppNMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAtUtb2wkhlxFnhrwj+R7Jy+jqtTWQke7h64F293fOQj4zSPHbpSNlmR18nIG FLaZJlEg6r3n+/86j22VZO9lYwytShoVDiHRhfjZKZ/OqTAvbbTlUxz6VKTLuF2A P6UlppGohZaQaHMa19PCY7bmQmOiLQcCLDzp0Pn4gis07ESsDhAajv3lsmcZTP1F ifazD3trH918b2Hc+BLut1T8JkakGtdvzxZxynGGdPBov31bmVl2fVtGmj7Bs9c6 r8XNBvf5Vcmd5m6W2NQ87YkW4KdiGhOqEKxCoqTFwZP8f1R85yvL3Ha4JEtpy3Gh Mctyspw5vSgPUYrUVQZqr8TYvg== -----END CERTIFICATE-----Generated at Tue Sep 22 16:50:54 2026 by rpki-client