$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft (raw, json) Hash identifier: LqpWXw6fSKv285OsaBscsSVFNrYSYsQLW34Nj0xap0A= Subject key identifier: C4:03:1B:14:A6:79:6B:80:10:BE:1B:16:18:46:F9:0B:98:58:FD:79 Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft Manifest number: 0B05 Signing time: Sun 20 Sep 2026 19:16:49 +0000 Manifest this update: Sun 20 Sep 2026 19:16:48 +0000 Manifest next update: Sun 27 Sep 2026 19:16:48 +0000 Files and hashes: 1: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl (hash: uXihTK7q03xHSMuhT2OZN7pQBXLruKREK59i7D0eNAg=) 2: 3A851EE273E411EA9572F76EC4F9AE02.roa (hash: B7PIpT06o5yz5X0ICfGhNE1RjQ8ofk6sdiEjNK1EArU=) 3: 55D7D802475A11F0B3C02112C4F9AE02.roa (hash: 1ct6ERLfD4y94EVh8sazQBKiN2tsb/2UaNvWuVl4I30=) 4: F22D283A9B3B11EBA5C76B80C4F9AE02.roa (hash: 9jHgiW6B1sqLvSJnd17xl6prg5mUxXRdfL0P2w6JRHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Validity Not Before: Sep 20 19:16:48 2026 GMT Not After : Sep 27 19:16:48 2026 GMT Subject: CN=6ab03120-bb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:4d:24:50:df:17:43:62:6c:75:ab:20:96: 7b:4e:48:70:a9:40:14:ef:ad:ef:db:87:b6:11:c7: 4b:a2:c9:26:33:44:1a:0e:1b:21:bd:a0:52:57:7f: 09:f3:7e:7b:3e:94:5c:78:51:fe:72:bf:32:c7:1c: c3:fb:34:37:b1:72:c6:7f:f9:18:d5:ca:c9:bf:04: 77:73:52:ad:40:99:d3:a2:fb:03:7a:b1:1c:72:70: 8d:78:1d:77:bf:38:25:2a:44:4d:3c:cd:60:2f:e3: ca:49:da:f9:ba:3e:ab:f3:55:fe:41:4e:d4:17:74: b4:40:a5:56:e7:26:86:8e:01:21:6c:20:54:b5:45: 25:ff:d7:65:93:12:b8:80:06:e7:8a:bb:a6:df:68: 14:62:32:30:04:9a:3e:a3:d4:bb:0d:4f:ce:06:1b: 3a:58:5b:d8:ba:25:eb:03:cb:58:93:fa:22:f0:4e: 0f:3a:28:81:5f:b8:27:96:49:35:81:7e:b1:a8:17: 87:0d:7e:36:60:d2:9b:32:cb:db:7f:d9:70:bd:0b: 10:a7:fa:a0:7c:c6:10:1c:92:83:6b:23:04:92:87: 23:cc:af:c4:86:15:19:fb:76:ce:c9:2d:1d:36:02: 91:2f:67:41:7a:01:5f:ae:8a:6e:f6:11:9a:5a:5f: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:03:1B:14:A6:79:6B:80:10:BE:1B:16:18:46:F9:0B:98:58:FD:79 X509v3 Authority Key Identifier: keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5d:12:fe:11:fa:da:dc:bf:e0:02:a4:69:f8:aa:17:fe:f4: c5:51:b9:47:20:2c:8b:f3:22:63:57:cf:a0:f0:f4:af:d5:ed: a3:73:d1:a0:17:ee:5f:bf:92:17:ad:b6:2e:3e:aa:f3:6d:4a: 56:16:d4:73:1b:18:79:9d:b1:e5:48:c0:b6:b9:f6:75:71:ee: db:d4:6f:ef:39:16:60:bb:34:33:1d:fe:ba:f9:c4:e3:ab:c5: 00:25:9c:b1:dd:6c:3f:cc:43:a8:96:de:49:54:a3:63:f3:e4: 87:ee:20:33:ec:f1:3a:12:25:86:f1:54:aa:61:87:1e:b8:49: dc:1c:af:f8:55:dd:3c:f3:2e:5f:0b:7f:e8:3f:87:5f:2e:6c: 34:e2:da:e9:dd:83:3e:23:1c:35:46:8d:6d:3e:ac:55:c8:e3: 25:e1:9f:34:55:63:75:0a:3c:52:a0:fb:a9:cd:de:95:bf:8d: 9c:ef:38:91:1f:77:fd:57:d9:a1:58:10:86:0d:d9:a2:fd:29: db:a5:41:51:66:14:d6:32:1f:0e:0c:ef:00:eb:43:76:47:6a: ff:a1:bf:14:61:29:1e:5c:6d:b9:ea:6e:71:00:c7:d0:77:93: 52:05:d7:4b:20:de:d2:8c:ea:9c:4e:06:bc:35:dd:79:13:be: 12:12:30:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZBMEREN0UyMjFC NjNFNTM0QUIwHhcNMjYwOTIwMTkxNjQ4WhcNMjYwOTI3MTkxNjQ4WjAYMRYwFAYD VQQDEw02YWIwMzEyMC1iYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUNNJFDfF0NibHWrIJZ7TkhwqUAU763v24e2EcdLoskmM0QaDhshvaBSV38J 8357PpRceFH+cr8yxxzD+zQ3sXLGf/kY1crJvwR3c1KtQJnTovsDerEccnCNeB13 vzglKkRNPM1gL+PKSdr5uj6r81X+QU7UF3S0QKVW5yaGjgEhbCBUtUUl/9dlkxK4 gAbnirum32gUYjIwBJo+o9S7DU/OBhs6WFvYuiXrA8tYk/oi8E4POiiBX7gnlkk1 gX6xqBeHDX42YNKbMsvbf9lwvQsQp/qgfMYQHJKDayMEkocjzK/EhhUZ+3bOyS0d NgKRL2dBegFfropu9hGaWl+xjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQDGxSm eWuAEL4bFhhG+QuYWP15MB8GA1UdIwQYMBaAFMntS3Z24/WlsfimoN1+Ihtj5TSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFDRi81QUM2MkIyQTcz RTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlhV3gtS2FnM1g0aUcyUGxO S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llMUxkbmJqOWFXeC1LYWczWDRpRzJQbE5Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5iajlh V3gtS2FnM1g0aUcyUGxOS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUV0S/hH62ty/4AKkafiqF/70xVG5RyAsi/MiY1fPoPD0r9Xto3PRoBfuX7+S F622Lj6q821KVhbUcxsYeZ2x5UjAtrn2dXHu29Rv7zkWYLs0Mx3+uvnE46vFACWc sd1sP8xDqJbeSVSjY/Pkh+4gM+zxOhIlhvFUqmGHHrhJ3Byv+FXdPPMuXwt/6D+H Xy5sNOLa6d2DPiMcNUaNbT6sVcjjJeGfNFVjdQo8UqD7qc3elb+NnO84kR93/VfZ oVgQhg3Zov0p26VBUWYU1jIfDgzvAOtDdkdq/6G/FGEpHlxtuepucQDH0HeTUgXX SyDe0ozqnE4GvDXdeRO+EhIwKw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:22 2026 by rpki-client