$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json) Hash identifier: lUZ7k6dCAqcjF+lAzZaqq1UIF1m9Lu54hWiCQcKLMOI= Subject key identifier: 63:3A:70:DA:48:DA:B2:C4:D4:EC:8B:DD:2E:38:75:AF:95:9F:E1:DA Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft Manifest number: 40 Signing time: Mon 21 Sep 2026 08:30:36 +0000 Manifest this update: Mon 21 Sep 2026 08:30:35 +0000 Manifest next update: Mon 28 Sep 2026 08:30:35 +0000 Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: sfmgPEkPTDkCyKWpgicLMr70KM4iskRlC/iVoF9zuGY=) 2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Validity Not Before: Sep 21 08:30:35 2026 GMT Not After : Sep 28 08:30:35 2026 GMT Subject: CN=6ab0eb2b-34a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:47:9f:50:71:a1:8b:50:ef:2b:03:a2:54: 8f:a2:42:03:79:8e:80:0e:de:24:8a:3a:9c:2a:c1: 2b:3d:ba:ea:a6:3c:c1:9b:6d:0a:4a:07:b8:b5:21: 5b:77:2b:13:05:a7:7a:d1:51:72:da:7e:43:dd:7c: cb:79:9c:5f:f1:14:ad:ed:6b:5f:d4:66:51:e9:65: 45:17:76:d5:5b:35:18:80:f6:03:e9:02:00:af:dd: 13:35:b8:65:b1:d7:30:da:33:9e:20:d5:b5:83:ad: 70:63:b1:dc:44:c4:ed:f4:23:76:47:5f:1d:b6:77: 79:cc:1f:83:63:cc:3a:9e:29:f2:90:02:9e:36:37: f7:f7:dd:b3:58:54:94:dd:29:6f:8e:f4:e1:16:57: 75:b2:fb:70:a9:59:22:3d:84:5e:37:e4:58:a0:11: e9:07:7b:4d:b9:3a:f6:d0:f2:f3:f0:9c:a3:bf:d9: ca:c0:d0:26:74:d0:a7:13:f5:b4:1f:19:85:23:f5: 7d:be:27:4a:a0:07:de:09:8c:8f:72:13:0d:5a:ec: cc:9d:55:4f:ae:0f:90:c8:33:4f:a7:db:b6:a9:42: 88:b5:d3:fb:c3:f3:be:e1:c4:34:58:c5:4f:b2:f3: 30:d4:87:59:15:08:94:34:35:fc:af:9b:42:8d:c4: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3A:70:DA:48:DA:B2:C4:D4:EC:8B:DD:2E:38:75:AF:95:9F:E1:DA X509v3 Authority Key Identifier: keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d5:99:05:2e:56:59:b7:a8:02:f8:4a:9a:18:68:14:41:37: 10:da:ba:ea:6c:d1:33:fd:d5:ce:dc:2a:57:5b:1b:c7:4c:1c: 3a:79:d9:9a:64:ae:30:8e:d3:07:85:c6:6f:ec:41:b2:23:5f: 39:25:49:87:c5:76:91:c0:55:1a:87:29:a5:6a:b8:23:85:5a: a9:2e:77:4a:4b:4f:73:3b:27:9a:9c:de:f8:21:21:c1:53:e4: 41:0c:39:b1:9c:d9:1a:86:6d:1c:c3:79:7e:2e:b7:c2:00:b4: 16:d3:00:b4:41:9b:0a:47:11:63:fa:af:aa:ce:4b:f6:d0:44: a1:3a:7b:3c:96:24:e2:14:7a:d0:cb:a9:42:f5:73:44:0c:7f: 4e:e7:04:d6:03:99:8c:26:cc:ed:c3:75:f1:06:63:d1:76:43: 7f:ca:1e:22:72:74:7a:51:a1:9a:cf:a2:fc:b1:55:c6:dc:bd: 54:e0:d1:58:93:94:43:22:5a:91:f6:ca:fe:3a:b6:e7:c9:72: db:36:10:40:d2:fd:9f:bd:9a:05:cf:89:0f:79:27:3a:8a:48: 27:33:bc:4d:7e:3e:81:01:50:1a:83:90:df:48:18:12:11:59: 80:63:a3:fa:0a:a4:3b:14:71:9b:95:85:41:3c:5d:e7:af:52: 69:47:c2:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG MkFEQzExMzAeFw0yNjA5MjEwODMwMzVaFw0yNjA5MjgwODMwMzVaMBgxFjAUBgNV BAMTDTZhYjBlYjJiLTM0YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/+kefUHGhi1DvKwOiVI+iQgN5joAO3iSKOpwqwSs9uuqmPMGbbQpKB7i1IVt3 KxMFp3rRUXLafkPdfMt5nF/xFK3ta1/UZlHpZUUXdtVbNRiA9gPpAgCv3RM1uGWx 1zDaM54g1bWDrXBjsdxExO30I3ZHXx22d3nMH4NjzDqeKfKQAp42N/f33bNYVJTd KW+O9OEWV3Wy+3CpWSI9hF435FigEekHe025OvbQ8vPwnKO/2crA0CZ00KcT9bQf GYUj9X2+J0qgB94JjI9yEw1a7MydVU+uD5DIM0+n27apQoi10/vD877hxDRYxU+y 8zDUh1kVCJQ0Nfyvm0KNxHVFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYzpw2kja ssTU7IvdLjh1r5Wf4dowHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZ1ZkFLlZZt6gC+EqaGGgUQTcQ2rrqbNEz/dXO3CpXWxvHTBw6edmaZK4wjtMH hcZv7EGyI185JUmHxXaRwFUahymlargjhVqpLndKS09zOyeanN74ISHBU+RBDDmx nNkahm0cw3l+LrfCALQW0wC0QZsKRxFj+q+qzkv20EShOns8liTiFHrQy6lC9XNE DH9O5wTWA5mMJsztw3XxBmPRdkN/yh4icnR6UaGaz6L8sVXG3L1U4NFYk5RDIlqR 9sr+OrbnyXLbNhBA0v2fvZoFz4kPeSc6ikgnM7xNfj6BAVAag5DfSBgSEVmAY6P6 CqQ7FHGblYVBPF3nr1JpR8J9 -----END CERTIFICATE-----Generated at Tue Sep 22 23:05:15 2026 by rpki-client