$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: llfZWrd1p2MhAjABwfw+aZvWpAXiQ9FzfTSEhHdZ+pM= Subject key identifier: BA:86:47:42:0B:36:CC:54:E5:B2:0A:F0:9A:82:59:E1:27:EE:0D:AE Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0E66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0E4B Signing time: Thu 24 Sep 2026 17:44:12 +0000 Manifest this update: Thu 24 Sep 2026 17:44:12 +0000 Manifest next update: Thu 01 Oct 2026 17:44:12 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: Vg4UHaJ49JwxQd/QgmnhbUW982YOm0vn/Uyl6h0JsIU=) 2: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: nT2sh7uqTi1U5cwmoFpAbizu4Ra0Y+5JbyS+sH+1hZc=) 3: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: YHt1SbNsyMG4Q62rnhZuMa3T8SKHY5G8WGqZLcUa22M=) 4: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3686 (0xe66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Sep 24 17:44:12 2026 GMT Not After : Oct 1 17:44:12 2026 GMT Subject: CN=6ab5616c-ebd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:ed:0a:f2:92:0f:13:78:5c:8c:2d:30:ab: 82:f7:2a:c1:d2:c6:80:c1:59:3a:32:6f:d1:9a:3f: e0:e2:32:e8:84:db:a8:19:0f:8a:1e:2b:4e:40:5d: 8b:29:e9:70:f8:98:b5:29:1e:ac:fb:0f:14:81:5b: 1a:2b:dc:21:3e:a1:e6:ef:67:69:68:f6:db:47:ee: e8:63:d0:09:e3:61:97:90:f5:33:86:d1:3d:4b:7f: ad:c8:ef:07:1e:a6:05:b6:19:4e:42:ce:42:77:4b: 7a:b0:ea:8e:52:45:7a:9b:f7:57:82:0d:a9:07:17: 1d:9a:a6:3c:fb:73:6c:5c:65:ec:42:d5:08:e1:f2: 53:0a:4b:7d:51:86:87:a1:96:cc:36:15:9a:b1:33: 56:c9:0d:3f:21:ad:5c:b8:5d:df:4a:93:a0:68:e8: 9d:93:40:59:17:be:84:63:66:d9:12:ee:b0:05:67: 08:e7:53:8e:f1:8d:35:29:32:df:5c:de:eb:57:2a: 9b:b6:f9:5f:6e:5b:df:56:fd:b1:b3:ed:d8:45:44: de:9b:ca:92:3b:42:8a:f5:c3:8e:71:bd:4e:af:e4: da:10:b8:66:18:e3:31:87:13:53:2a:c7:2c:f7:3f: 88:ad:d8:85:93:a8:17:8a:67:65:1d:27:07:09:8e: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:86:47:42:0B:36:CC:54:E5:B2:0A:F0:9A:82:59:E1:27:EE:0D:AE X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c9:a2:19:1f:b1:3b:ba:55:04:54:cd:5f:8f:35:68:43:46: e0:3d:52:94:3a:64:f8:13:84:2e:17:61:cd:79:f7:fc:f3:36: 7f:a9:4e:07:97:27:71:dc:02:9b:ac:0c:f8:4e:eb:fe:41:cb: 06:99:c5:de:f0:74:2c:0b:67:c1:ec:82:ef:cb:ba:32:e7:0c: 1b:da:5a:ad:b4:b1:50:88:d5:5c:17:95:4a:26:fd:35:06:a4: 8a:c5:04:35:f5:05:e3:1b:3d:88:22:b2:88:0b:51:cb:47:e0: ae:17:af:29:a3:7f:d8:89:f7:66:4e:0c:c8:3d:64:66:2d:a4: 66:fb:2d:ad:25:ff:08:46:ef:92:ba:db:8f:df:57:72:a4:e3: 71:a1:99:3c:2f:14:e9:23:4b:0f:93:c9:97:a2:b8:99:d1:cc: 2d:70:a8:68:99:64:79:2a:db:c4:86:fb:44:12:91:90:ff:3b: 63:07:23:43:50:fd:cc:a3:b9:3d:67:b2:4e:95:2a:32:ee:c2: 97:7a:f5:c6:ea:1f:c8:37:40:76:a2:ed:a5:c4:e7:6e:8e:b5: 87:21:8c:43:04:ee:ec:54:9d:36:3c:bf:c4:dc:19:39:66:3c: d6:0c:e4:a5:b5:c9:aa:b9:31:4f:6f:f9:a5:ab:80:23:d8:ef: cd:55:79:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjYwOTI0MTc0NDEyWhcNMjYxMDAxMTc0NDEyWjAYMRYwFAYD VQQDEw02YWI1NjE2Yy1lYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SLtCvKSDxN4XIwtMKuC9yrB0saAwVk6Mm/Rmj/g4jLohNuoGQ+KHitOQF2L Kelw+Ji1KR6s+w8UgVsaK9whPqHm72dpaPbbR+7oY9AJ42GXkPUzhtE9S3+tyO8H HqYFthlOQs5Cd0t6sOqOUkV6m/dXgg2pBxcdmqY8+3NsXGXsQtUI4fJTCkt9UYaH oZbMNhWasTNWyQ0/Ia1cuF3fSpOgaOidk0BZF76EY2bZEu6wBWcI51OO8Y01KTLf XN7rVyqbtvlfblvfVv2xs+3YRUTem8qSO0KK9cOOcb1Or+TaELhmGOMxhxNTKscs 9z+IrdiFk6gXimdlHScHCY6JVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqGR0IL NsxU5bIK8JqCWeEn7g2uMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtcmiGR+xO7pVBFTNX481aENG4D1SlDpk+BOELhdhzXn3/PM2f6lOB5cncdwC m6wM+E7r/kHLBpnF3vB0LAtnweyC78u6MucMG9parbSxUIjVXBeVSib9NQakisUE NfUF4xs9iCKyiAtRy0fgrhevKaN/2In3Zk4MyD1kZi2kZvstrSX/CEbvkrrbj99X cqTjcaGZPC8U6SNLD5PJl6K4mdHMLXCoaJlkeSrbxIb7RBKRkP87YwcjQ1D9zKO5 PWeyTpUqMu7Cl3r1xuofyDdAdqLtpcTnbo61hyGMQwTu7FSdNjy/xNwZOWY81gzk pbXJqrkxT2/5pauAI9jvzVV5gQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:38:41 2026 by rpki-client