$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: GLqFglO/J/OCMIqvSddLloBeSOrkWZqwblZlO8sFfMA= Subject key identifier: 8B:52:35:54:1A:AD:1A:6E:38:C0:17:8C:1A:A6:1E:09:E9:D5:34:C4 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 023B Signing time: Wed 23 Sep 2026 02:29:05 +0000 Manifest this update: Wed 23 Sep 2026 02:29:05 +0000 Manifest next update: Wed 30 Sep 2026 02:29:05 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: Ufl0fWAlMv8TGHkXiTi2R4ZTOuz4f3KTFAfXGg8FPx4=) 2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=) 3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=) 4: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Sep 23 02:29:05 2026 GMT Not After : Sep 30 02:29:05 2026 GMT Subject: CN=6ab33971-7b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:85:9e:c7:93:b6:e0:3c:49:b3:6d:f6:21: c9:91:df:84:40:ca:0a:50:0c:10:10:d8:c3:ec:ed: 0e:83:5b:82:75:53:3b:dd:ff:62:2e:59:19:14:cf: 7d:63:06:9a:ea:bb:5c:5c:bb:72:f8:ec:bd:5b:ad: 57:3a:a3:ac:d2:d7:e8:8d:b9:fb:c8:1c:e7:69:20: 2c:3a:f6:dc:a0:3e:a4:8d:44:48:f1:71:b4:67:74: 08:e0:fd:8a:3a:7b:10:53:11:28:12:f2:14:f8:20: f3:d0:0f:16:c3:ae:e5:3d:c4:fb:66:45:65:b5:0e: 6e:26:e0:d1:4c:0f:66:28:33:53:ad:d2:3c:1f:64: 28:97:ab:39:6c:98:cf:4f:89:16:53:3e:2b:cb:e6: c0:b0:2d:8a:58:24:ef:52:75:e0:db:b7:38:7f:42: b3:22:69:3a:4b:f1:85:e0:9c:78:24:af:75:a2:ff: 8b:ed:d2:0b:a7:76:ad:97:54:bd:d3:4e:98:79:3b: 0c:37:6c:52:9f:3f:32:3e:ff:97:6a:8e:8f:f0:48: ba:65:d3:5a:51:d0:09:b7:86:64:6c:d0:9c:b4:6c: d8:6b:da:b4:71:04:ec:c0:40:75:c0:f1:61:66:00: dd:39:6c:3a:09:22:d7:dc:a0:00:b1:bc:a3:92:08: 9d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:35:54:1A:AD:1A:6E:38:C0:17:8C:1A:A6:1E:09:E9:D5:34:C4 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a6:da:e2:25:2b:e6:4f:b4:5e:e6:81:74:dd:5e:9f:91:41: c7:27:a7:df:7f:90:c8:27:93:64:c9:2c:c8:0c:48:a9:28:fb: ce:f2:1d:fc:17:90:3e:61:aa:da:86:ae:d2:cd:de:0a:d4:2f: cf:8c:3e:17:75:1a:b8:16:d3:69:62:e6:d4:5d:e7:93:69:1b: 8b:3c:07:18:9a:24:4b:09:a4:3e:15:7f:b0:3b:3e:36:6f:e0: ef:82:f8:d4:71:43:35:22:13:5d:c6:91:cd:e9:b0:4b:65:73: 64:47:d9:b7:c2:7e:ee:5e:7c:05:f6:79:1b:1d:a6:71:d8:a7: c4:f7:89:f6:59:14:98:5a:b9:39:7b:4f:97:45:18:52:02:08: fd:f3:cc:17:e4:bf:8f:1e:c6:5b:51:78:8e:58:47:d8:15:67: 19:8d:88:75:0c:5a:2a:15:8e:b8:5c:9a:aa:7f:a7:a5:8a:93: 4d:b1:00:83:0e:e0:7a:85:df:18:d7:be:c1:36:f5:fc:0a:30: 44:82:17:54:40:69:5e:d5:4a:1e:34:4f:de:95:14:4f:50:63: fa:80:6b:43:d4:4b:c9:b1:e6:06:61:9c:8d:25:69:97:f5:0c: fe:98:43:5d:02:15:b0:fe:43:15:4e:ca:06:f4:04:98:66:8f: 10:04:5b:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjYwOTIzMDIyOTA1WhcNMjYwOTMwMDIyOTA1WjAYMRYwFAYD VQQDEw02YWIzMzk3MS03YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQOFnseTtuA8SbNt9iHJkd+EQMoKUAwQENjD7O0Og1uCdVM73f9iLlkZFM99 Ywaa6rtcXLty+Oy9W61XOqOs0tfojbn7yBznaSAsOvbcoD6kjURI8XG0Z3QI4P2K OnsQUxEoEvIU+CDz0A8Ww67lPcT7ZkVltQ5uJuDRTA9mKDNTrdI8H2Qol6s5bJjP T4kWUz4ry+bAsC2KWCTvUnXg27c4f0KzImk6S/GF4Jx4JK91ov+L7dILp3atl1S9 006YeTsMN2xSnz8yPv+Xao6P8Ei6ZdNaUdAJt4ZkbNCctGzYa9q0cQTswEB1wPFh ZgDdOWw6CSLX3KAAsbyjkgidtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItSNVQa rRpuOMAXjBqmHgnp1TTEMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaba4iUr5k+0XuaBdN1en5FBxyen33+QyCeTZMksyAxIqSj7zvId/BeQPmGq 2oau0s3eCtQvz4w+F3UauBbTaWLm1F3nk2kbizwHGJokSwmkPhV/sDs+Nm/g74L4 1HFDNSITXcaRzemwS2VzZEfZt8J+7l58BfZ5Gx2mcdinxPeJ9lkUmFq5OXtPl0UY UgII/fPMF+S/jx7GW1F4jlhH2BVnGY2IdQxaKhWOuFyaqn+npYqTTbEAgw7geoXf GNe+wTb1/AowRIIXVEBpXtVKHjRP3pUUT1Bj+oBrQ9RLybHmBmGcjSVpl/UM/phD XQIVsP5DFU7KBvQEmGaPEARbYw== -----END CERTIFICATE-----Generated at Thu Sep 24 14:01:53 2026 by rpki-client