$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft File: yCFQSaXsETZftnQLghcGdiaArRc.mft (raw, json) Hash identifier: R83FYSSVRUMH72HZp18wkzQHu1gU+5qMA33ZiGaDuUE= Subject key identifier: 97:46:3A:0F:30:C5:7E:9C:BC:93:F3:25:29:56:E3:7E:0E:6B:E9:55 Authority key identifier: C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17 Certificate issuer: /CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft Manifest number: 01CA Signing time: Sat 19 Sep 2026 03:50:46 +0000 Manifest this update: Sat 19 Sep 2026 03:50:45 +0000 Manifest next update: Sat 26 Sep 2026 03:50:45 +0000 Files and hashes: 1: yCFQSaXsETZftnQLghcGdiaArRc.crl (hash: WFKxPr5I1LfrERLTuWrBzfnyXHmm30RdQ6zcLro6ZIU=) 2: 264C45FAFA3F11EE8A884F09C4F9AE02.roa (hash: 5wpit00HjrDdtoq3eiW6to5uWB0TX3js4LGWC8s6SMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC459, serialNumber=C8215049A5EC11365FB6740B821706762680AD17 Validity Not Before: Sep 19 03:50:45 2026 GMT Not After : Sep 26 03:50:45 2026 GMT Subject: CN=6aae0696-28cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:35:a4:d7:27:8d:6f:13:3b:43:4b:23:05: d1:d4:d8:33:45:3b:0f:76:e9:15:22:d1:95:ad:63: 5a:61:d2:68:9e:1c:3d:9d:49:fc:88:96:86:8d:0c: f0:ac:21:e1:49:ed:6c:77:7b:54:2f:9c:b2:ce:05: af:b7:e5:67:dc:72:0b:1d:07:b3:2f:fb:dc:ca:46: b0:83:1a:4f:21:b7:b5:f3:86:08:1c:6c:4b:4b:ea: 78:b8:37:a9:c9:3c:4e:65:dd:49:46:a7:85:43:5a: 1d:40:a1:7a:50:09:40:2a:70:1f:6b:e0:0c:7d:23: 12:f8:eb:d1:b8:9a:5e:53:46:82:a0:f6:7a:18:b0: 44:14:61:f5:c0:97:8e:81:9e:58:94:97:bb:76:6d: d7:0a:86:b4:c8:8c:a6:84:25:a1:9c:14:6d:57:bb: 51:2c:4c:49:81:9f:a5:d4:58:6f:59:4f:d5:08:f7: a1:3c:2a:45:9b:42:2d:ee:e3:3c:d0:98:ee:87:50: 04:1c:d7:cc:dc:23:8b:a5:75:56:ee:40:a5:f6:4a: 5b:6e:fd:6e:76:13:6f:11:ce:91:6c:88:f6:16:3c: 9e:65:29:64:c6:38:97:0a:39:0f:aa:0d:74:ee:ba: 03:af:64:9e:5b:5d:48:38:14:c9:2a:1a:42:c9:07: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:3A:0F:30:C5:7E:9C:BC:93:F3:25:29:56:E3:7E:0E:6B:E9:55 X509v3 Authority Key Identifier: keyid:C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:55:54:83:62:c6:4e:2f:10:03:13:d3:b1:ef:d8:83:e2:60: c5:ad:28:18:3d:24:e3:ad:31:23:d3:f5:e0:f6:93:d6:7a:bb: 55:31:65:1d:ae:31:49:c5:a8:aa:88:9d:ff:ef:17:91:a9:91: 0e:8c:17:c4:4c:54:6f:ad:11:bd:9e:d7:b2:a0:5e:b7:cd:3c: 92:c6:ec:02:4f:6d:a8:b4:fb:03:fb:99:bd:e1:ee:c3:98:57: 70:25:9a:e8:a8:62:24:3e:03:51:18:00:a3:dd:ba:29:8f:82: 9e:ca:8f:f7:ca:a3:f5:a2:27:92:7a:e1:d9:d3:4b:b0:e9:83: 10:7c:40:22:7e:d7:63:51:7f:6b:ef:2b:f8:18:42:ef:e2:f3: b9:70:59:a3:e0:0e:88:27:31:4a:9a:3f:90:5a:23:8d:f0:4e: 7e:af:d6:c4:2c:71:a6:a8:78:46:ae:e1:14:93:97:d4:d2:07: 72:3d:86:4c:9c:e4:a1:6e:97:2b:24:a3:85:01:60:ea:86:43: a4:51:d0:98:3e:a2:79:14:20:3a:bb:1f:5d:fd:d5:d4:0c:3b: 7d:31:67:05:62:de:4b:a0:df:09:f4:71:a7:97:5e:cb:a3:48: f2:94:85:4c:5c:e3:79:14:e5:9f:8d:55:30:44:39:4e:ca:a9: 94:12:4d:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NTkxMTAvBgNVBAUTKEM4MjE1MDQ5QTVFQzExMzY1RkI2NzQwQjgyMTcwNjc2 MjY4MEFEMTcwHhcNMjYwOTE5MDM1MDQ1WhcNMjYwOTI2MDM1MDQ1WjAYMRYwFAYD VQQDEw02YWFlMDY5Ni0yOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIE1pNcnjW8TO0NLIwXR1NgzRTsPdukVItGVrWNaYdJonhw9nUn8iJaGjQzw rCHhSe1sd3tUL5yyzgWvt+Vn3HILHQezL/vcykawgxpPIbe184YIHGxLS+p4uDep yTxOZd1JRqeFQ1odQKF6UAlAKnAfa+AMfSMS+OvRuJpeU0aCoPZ6GLBEFGH1wJeO gZ5YlJe7dm3XCoa0yIymhCWhnBRtV7tRLExJgZ+l1FhvWU/VCPehPCpFm0It7uM8 0Jjuh1AEHNfM3COLpXVW7kCl9kpbbv1udhNvEc6RbIj2FjyeZSlkxjiXCjkPqg10 7roDr2SeW11IOBTJKhpCyQdaMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdGOg8w xX6cvJPzJSlW434Oa+lVMB8GA1UdIwQYMBaAFMghUEml7BE2X7Z0C4IXBnYmgK0X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ1OS9BOTM1MDdCQ0Y2 RDUxMUVFQjg3ODNDMUVDNEY5QUUwMi95Q0ZRU2FYc0VUWmZ0blFMZ2hjR2RpYUFy UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDRlFTYVhzRVRaZnRuUUxnaGNHZGlhQXJSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ1OS9BOTM1MDdCQ0Y2RDUxMUVFQjg3ODNDMUVDNEY5QUUwMi95Q0ZRU2FYc0VU WmZ0blFMZ2hjR2RpYUFyUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ1VUg2LGTi8QAxPTse/Yg+Jgxa0oGD0k460xI9P14PaT1nq7VTFlHa4xScWo qoid/+8XkamRDowXxExUb60RvZ7XsqBet808ksbsAk9tqLT7A/uZveHuw5hXcCWa 6KhiJD4DURgAo926KY+CnsqP98qj9aInknrh2dNLsOmDEHxAIn7XY1F/a+8r+BhC 7+LzuXBZo+AOiCcxSpo/kFojjfBOfq/WxCxxpqh4Rq7hFJOX1NIHcj2GTJzkoW6X KySjhQFg6oZDpFHQmD6ieRQgOrsfXf3V1Aw7fTFnBWLeS6DfCfRxp5dey6NI8pSF TFzjeRTln41VMEQ5TsqplBJNIA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:23:24 2026 by rpki-client