$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: /s5w/N73htKVJIdjU3ysJP+iSVLLdjFzvhvuJVewtpw= Subject key identifier: 28:20:1F:E1:AD:D6:02:31:D5:05:75:F4:F6:B7:FF:C0:E9:00:47:3F Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 35D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 35AE Signing time: Sat 10 Oct 2026 15:00:49 +0000 Manifest this update: Sat 10 Oct 2026 15:00:48 +0000 Manifest next update: Sat 17 Oct 2026 15:00:48 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: +JfDLmIG/I/jJc1h9ogM3Ho3CYdoKeJ1UXAC9e/uKF4=) 2: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: 5+kHlPMY1vlmnCm2khEV4Cm9ZkyzeUnR4wfzGT1Bqgo=) 3: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: AqP5pcAaJH32TYuGX0fOzFQdp/XSO4T3mcIC6gFmJ5s=) 4: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: 24VUnNW+IwALD6fth9CM1bbdRgcY8qK4/vGIkj8WWe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13783 (0x35d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Oct 10 15:00:48 2026 GMT Not After : Oct 17 15:00:48 2026 GMT Subject: CN=6aca5320-8944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c7:ed:d2:1e:27:ae:68:9c:d3:3b:04:9b:73: 71:d1:c7:b1:c5:3d:3f:f6:d6:21:6e:6e:4d:cf:79: f3:b4:31:b5:58:99:7a:41:aa:fb:a5:43:3c:ac:ae: 9e:23:91:70:67:2d:55:3e:25:3d:15:cd:2f:cd:18: 51:75:f6:30:d4:1a:3c:6d:03:52:7f:11:2e:20:1b: e4:65:0c:cc:db:0c:de:13:62:39:71:15:7f:1c:bf: 8c:f7:8f:22:28:96:11:40:12:13:38:53:41:5f:65: 97:f5:16:cb:19:62:64:df:2a:07:88:22:95:ff:87: 47:ae:ac:c9:e5:1c:e9:38:63:66:fc:4e:4a:b7:09: 15:a5:62:5e:47:98:85:93:c2:38:53:53:7b:ba:eb: f1:b3:c4:11:3d:24:f1:a8:32:3a:f6:06:7f:69:2e: b6:22:3d:98:a1:1a:2c:20:51:fe:f4:bd:49:1d:cd: 28:fc:4c:fc:cb:5c:de:49:73:a0:bd:cc:6c:19:2e: f1:c3:4a:ad:f4:cc:40:b9:1d:ec:e4:d6:f6:25:e6: 6f:b1:08:36:95:a7:8b:44:fb:77:54:f2:0b:23:f4: 79:0d:9b:15:d8:8f:00:a1:b4:d8:18:76:75:f0:6d: a4:b4:31:ea:26:56:0e:54:ef:cf:1e:9a:1f:03:c8: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:1F:E1:AD:D6:02:31:D5:05:75:F4:F6:B7:FF:C0:E9:00:47:3F X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4d:ca:71:37:bb:d0:a1:8e:4b:1b:9d:f6:69:d9:b7:44:d8: ff:c0:f4:a3:02:28:f0:3d:08:5d:6e:4a:fe:49:fb:22:79:11: dd:4f:63:e4:f0:6b:5b:96:4a:af:f4:11:06:ee:7e:38:26:86: 41:ba:7a:63:a2:07:83:a0:50:71:9a:2a:90:90:d8:c1:9c:6d: 35:c2:5a:1c:bc:d8:42:1c:f3:8d:57:81:5c:12:c0:83:0e:10: be:21:10:e3:f3:8c:9d:d4:91:d4:2b:d8:cb:52:95:a3:52:d0: d8:48:1f:9d:26:67:32:09:6e:97:d7:58:c9:45:96:40:e3:77: c0:d4:72:56:96:5f:c6:ed:fc:db:ad:6d:28:b5:c5:73:be:e1: c3:9c:0a:40:75:95:32:d5:39:3f:a2:5e:b0:15:ba:11:cb:19: 72:1d:e5:7f:5c:d5:66:1e:db:fa:ae:0d:e8:9f:fa:5d:aa:22: 23:65:9f:85:65:a0:31:ab:3f:4b:64:0c:25:0f:ef:63:3f:e0: 64:d6:fa:f2:00:ef:81:e9:e0:67:78:29:0f:32:70:6e:3c:ec: ea:b5:72:2e:33:fb:23:32:b9:c6:98:49:03:11:45:25:e9:e5: a7:20:37:17:f8:61:10:7c:54:96:c8:87:5b:27:77:18:5f:4d: 7e:93:bb:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYxMDEwMTUwMDQ4WhcNMjYxMDE3MTUwMDQ4WjAYMRYwFAYD VQQDEw02YWNhNTMyMC04OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8ft0h4nrmic0zsEm3Nx0cexxT0/9tYhbm5Nz3nztDG1WJl6Qar7pUM8rK6e I5FwZy1VPiU9Fc0vzRhRdfYw1Bo8bQNSfxEuIBvkZQzM2wzeE2I5cRV/HL+M948i KJYRQBITOFNBX2WX9RbLGWJk3yoHiCKV/4dHrqzJ5RzpOGNm/E5KtwkVpWJeR5iF k8I4U1N7uuvxs8QRPSTxqDI69gZ/aS62Ij2YoRosIFH+9L1JHc0o/Ez8y1zeSXOg vcxsGS7xw0qt9MxAuR3s5Nb2JeZvsQg2laeLRPt3VPILI/R5DZsV2I8AobTYGHZ1 8G2ktDHqJlYOVO/PHpofA8i/pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCggH+Gt 1gIx1QV19Pa3/8DpAEc/MB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAME3KcTe70KGOSxud9mnZt0TY/8D0owIo8D0IXW5K/kn7InkR3U9j5PBrW5ZK r/QRBu5+OCaGQbp6Y6IHg6BQcZoqkJDYwZxtNcJaHLzYQhzzjVeBXBLAgw4QviEQ 4/OMndSR1CvYy1KVo1LQ2EgfnSZnMglul9dYyUWWQON3wNRyVpZfxu38261tKLXF c77hw5wKQHWVMtU5P6JesBW6EcsZch3lf1zVZh7b+q4N6J/6XaoiI2WfhWWgMas/ S2QMJQ/vYz/gZNb68gDvgengZ3gpDzJwbjzs6rVyLjP7IzK5xphJAxFFJenlpyA3 F/hhEHxUlsiHWyd3GF9NfpO7JA== -----END CERTIFICATE-----Generated at Sun Oct 11 16:43:41 2026 by rpki-client