$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: 9oZ6oypNjWhXrsl+IXmReBK3INnPykw/COp77E6hwVA= Subject key identifier: 84:00:46:C9:94:B6:A6:C1:24:82:7C:2C:00:ED:1D:68:99:65:6F:84 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 084F Signing time: Sun 20 Sep 2026 20:54:41 +0000 Manifest this update: Sun 20 Sep 2026 20:54:41 +0000 Manifest next update: Sun 27 Sep 2026 20:54:41 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: 5RYViJfJOBUxyYTrrIFn8OmnIjIi2vnLPlRfR637CJ4=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: zGjBv3KjTdJ9K8ezQZ4lGTuieMHEGvxttP2L5olrWPo=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: Bjs5lfBqpZzgmWDJV0Xu1gn8UB3T2IWjUyjfP7AxZYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Sep 20 20:54:41 2026 GMT Not After : Sep 27 20:54:41 2026 GMT Subject: CN=6ab04811-9a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:cb:c2:43:92:3e:49:be:63:40:8d:b4:5f: 9f:a5:95:73:ad:f7:20:a9:90:ae:77:ab:9d:2b:84: 2f:3a:c8:5a:d1:7d:ac:a6:71:de:8b:ee:f6:d6:f8: 44:37:dd:91:eb:ce:d1:c2:7d:fc:93:23:99:32:ac: 93:12:12:3e:53:93:67:12:ba:b2:00:cd:56:a4:e9: 08:82:4d:4e:3c:53:ca:bc:17:2f:3e:27:00:a8:6c: 54:5a:8c:69:90:1f:f1:c7:2f:5c:22:29:f8:ed:0e: ee:4e:c9:f9:d8:f3:fb:b1:d6:7d:28:ba:a9:4f:4d: 28:78:ec:26:37:2f:97:6e:63:96:4c:66:40:5e:44: 86:e3:2c:96:cd:79:16:89:97:64:f1:b2:e0:d1:0a: 8f:9a:c5:76:dd:3b:40:de:a7:2f:4e:2e:cb:bb:58: 5d:ab:f4:7c:bb:f2:d6:dc:be:47:20:97:35:f2:6e: f3:7b:84:3f:84:82:06:ef:b4:a7:85:f9:07:5b:f2: d8:9e:73:58:e1:a5:7a:98:db:16:16:8c:c8:a3:ff: ea:bd:49:ed:9a:a3:61:2b:20:0e:d7:35:9e:a7:5b: 55:f7:01:95:59:15:41:67:e6:e4:d2:2c:ff:ac:ca: 64:91:28:ce:c9:6a:85:98:18:08:e0:d3:3b:1d:18: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:46:C9:94:B6:A6:C1:24:82:7C:2C:00:ED:1D:68:99:65:6F:84 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:8a:bb:21:80:a4:aa:51:0f:05:b8:3c:60:c6:4f:b3:eb: c0:bd:4b:b4:81:73:5f:1d:3e:29:e0:8f:34:12:ce:b6:ba:93: ba:04:42:54:5a:6b:bb:5f:ec:44:8b:ea:47:ad:5d:76:60:f9: cd:62:1f:52:09:af:80:27:04:30:a7:34:0d:af:b5:a1:0c:02: ca:45:16:af:d6:ad:57:fa:51:79:6d:7b:a1:50:ea:1f:bf:41: 83:e3:48:4e:32:fb:ef:5c:14:2f:88:98:df:a1:cb:61:cd:c8: 66:be:27:ee:f0:bc:ce:c5:b9:56:7c:dc:c9:0d:90:44:f0:2a: 17:a0:5c:f8:50:bf:94:c9:c7:4e:a3:aa:34:eb:46:3c:28:46: ff:30:51:fb:fa:99:aa:01:d7:9e:df:4a:22:a8:5d:bb:1a:8e: 21:10:b6:7b:80:bc:56:37:38:7b:1a:71:eb:20:d9:88:0f:85: 31:dd:e9:e4:21:4f:37:1e:ae:ff:d1:f2:f6:17:b7:db:ee:eb: 7b:3d:fd:c3:ab:e8:17:d3:ff:c6:7b:8e:78:21:71:01:e7:46: 74:d1:1c:e6:00:ae:0f:05:f7:a1:33:4c:00:9b:35:87:e8:11: 6a:ff:88:16:17:af:70:8d:23:22:33:a4:b5:be:59:c1:32:34: 58:d9:3b:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjYwOTIwMjA1NDQxWhcNMjYwOTI3MjA1NDQxWjAYMRYwFAYD VQQDEw02YWIwNDgxMS05YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKDLwkOSPkm+Y0CNtF+fpZVzrfcgqZCud6udK4QvOsha0X2spnHei+721vhE N92R687Rwn38kyOZMqyTEhI+U5NnErqyAM1WpOkIgk1OPFPKvBcvPicAqGxUWoxp kB/xxy9cIin47Q7uTsn52PP7sdZ9KLqpT00oeOwmNy+XbmOWTGZAXkSG4yyWzXkW iZdk8bLg0QqPmsV23TtA3qcvTi7Lu1hdq/R8u/LW3L5HIJc18m7ze4Q/hIIG77Sn hfkHW/LYnnNY4aV6mNsWFozIo//qvUntmqNhKyAO1zWep1tV9wGVWRVBZ+bk0iz/ rMpkkSjOyWqFmBgI4NM7HRjLPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQARsmU tqbBJIJ8LADtHWiZZW+EMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUweKuyGApKpRDwW4PGDGT7PrwL1LtIFzXx0+KeCPNBLOtrqTugRCVFpru1/s RIvqR61ddmD5zWIfUgmvgCcEMKc0Da+1oQwCykUWr9atV/pReW17oVDqH79Bg+NI TjL771wUL4iY36HLYc3IZr4n7vC8zsW5VnzcyQ2QRPAqF6Bc+FC/lMnHTqOqNOtG PChG/zBR+/qZqgHXnt9KIqhduxqOIRC2e4C8Vjc4expx6yDZiA+FMd3p5CFPNx6u /9Hy9he32+7rez39w6voF9P/xnuOeCFxAedGdNEc5gCuDwX3oTNMAJs1h+gRav+I FhevcI0jIjOktb5ZwTI0WNk7GA== -----END CERTIFICATE-----Generated at Mon Sep 21 21:51:47 2026 by rpki-client