$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: xE2upQgL9yGpMHq7la/16du6qi+Vl6lHvjJFUc/pQ5M= Subject key identifier: E3:C0:E7:8B:76:55:C2:C7:DE:33:E8:C7:8A:00:F8:5F:30:45:27:11 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 0249 Signing time: Fri 25 Sep 2026 02:32:22 +0000 Manifest this update: Fri 25 Sep 2026 02:32:22 +0000 Manifest next update: Fri 02 Oct 2026 02:32:22 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: 7IsP2d0Sb7WucNEhdZkh/UNG9zvsZsFUPZ3hp0Gp9wo=) 2: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: SwqN5BzpIlLjEtJuRg3b2c5KCHmTQAMZjOor1EV7XG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Sep 25 02:32:22 2026 GMT Not After : Oct 2 02:32:22 2026 GMT Subject: CN=6ab5dd36-5ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:9b:a7:de:99:fa:02:5b:c9:41:cf:c3:de: e2:43:b4:18:79:69:9a:a6:63:fb:a4:08:8a:b8:6c: 29:28:63:09:43:c9:c1:44:36:d7:3b:fc:4a:6d:57: d1:e2:f5:75:49:01:42:3a:a1:15:2d:b8:da:f5:39: dc:aa:03:da:55:5b:81:bb:de:32:e1:a8:d2:a3:f1: df:dd:28:a7:b6:54:6b:72:b5:31:f6:fa:f6:a9:9e: d8:d0:ba:a5:5c:92:e5:96:fd:1f:5b:ca:2b:18:16: 58:e7:cb:34:fa:1a:2c:19:a1:3a:0a:95:88:b4:2d: 5d:37:f8:9d:e3:8a:6b:66:68:ba:47:b1:ce:23:3e: ab:83:45:96:53:b7:82:fc:de:fe:32:bf:2c:5c:20: d9:59:71:c9:c3:e7:ec:4e:02:fb:df:68:50:c4:dd: df:4b:21:a2:ff:9c:fb:0d:82:fe:6c:0d:08:ed:15: 04:05:d9:30:fd:da:57:41:b0:bb:dc:b1:18:9a:d2: 54:0d:74:80:15:62:b6:03:fe:79:de:af:7e:88:5e: f9:4e:43:c3:52:ac:b5:d5:01:74:d0:c8:e1:cf:a0: 8c:60:80:88:b7:39:b3:04:55:00:ec:f3:ea:d8:e7: e8:d6:50:72:c3:d3:be:4b:7c:a4:e2:0d:79:cd:b0: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C0:E7:8B:76:55:C2:C7:DE:33:E8:C7:8A:00:F8:5F:30:45:27:11 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:a7:dc:d9:5b:32:87:4f:b6:d0:b8:ae:9a:63:dc:f4:ef: f8:4d:2e:26:14:97:e2:8f:c9:53:e5:02:91:34:d6:61:53:0b: ac:cd:87:42:0b:af:b0:49:27:ec:15:c2:c0:ff:72:40:71:e2: 6f:da:72:10:9c:01:36:90:9f:2c:55:5e:7d:7b:e0:fb:b2:36: 7f:8e:30:5e:23:56:a2:f9:9b:74:be:71:6a:af:b8:e6:92:78: 1e:dc:03:c2:d5:d1:66:2a:2d:e0:0f:2b:cd:e3:ba:e8:fc:cc: 23:50:74:ab:4c:63:ea:32:4c:73:4d:ef:4a:26:b5:f4:9c:d7: 22:40:33:b8:cf:d2:26:1b:ce:c5:11:e1:1e:96:77:b4:03:c1: cb:29:ce:e6:59:d1:4a:73:4f:45:c8:a2:c6:2c:f8:e5:71:43: 8f:e8:57:90:8d:5f:f9:8e:92:bd:d3:85:d7:1d:02:e5:88:cb: bf:7f:fb:71:2b:09:01:c1:03:fe:d4:2c:49:7e:2c:67:c7:3d: 6a:24:86:7a:f4:52:80:20:f1:cf:df:32:f5:4a:5f:05:e1:85: f2:cd:01:b9:d5:f9:25:fd:2b:dd:96:02:7c:52:4b:25:9a:e8: 61:bc:47:39:cb:e5:32:04:55:39:6c:e5:1f:62:69:46:c8:9d: 55:da:59:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjYwOTI1MDIzMjIyWhcNMjYxMDAyMDIzMjIyWjAYMRYwFAYD VQQDEw02YWI1ZGQzNi01ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7Cbp96Z+gJbyUHPw97iQ7QYeWmapmP7pAiKuGwpKGMJQ8nBRDbXO/xKbVfR 4vV1SQFCOqEVLbja9TncqgPaVVuBu94y4ajSo/Hf3SintlRrcrUx9vr2qZ7Y0Lql XJLllv0fW8orGBZY58s0+hosGaE6CpWItC1dN/id44prZmi6R7HOIz6rg0WWU7eC /N7+Mr8sXCDZWXHJw+fsTgL732hQxN3fSyGi/5z7DYL+bA0I7RUEBdkw/dpXQbC7 3LEYmtJUDXSAFWK2A/553q9+iF75TkPDUqy11QF00Mjhz6CMYICItzmzBFUA7PPq 2Ofo1lByw9O+S3yk4g15zbBG5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPA54t2 VcLH3jPox4oA+F8wRScRMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARrin3NlbModPttC4rppj3PTv+E0uJhSX4o/JU+UCkTTWYVMLrM2HQguvsEkn 7BXCwP9yQHHib9pyEJwBNpCfLFVefXvg+7I2f44wXiNWovmbdL5xaq+45pJ4HtwD wtXRZiot4A8rzeO66PzMI1B0q0xj6jJMc03vSia19JzXIkAzuM/SJhvOxRHhHpZ3 tAPByynO5lnRSnNPRciixiz45XFDj+hXkI1f+Y6SvdOF1x0C5YjLv3/7cSsJAcED /tQsSX4sZ8c9aiSGevRSgCDxz98y9UpfBeGF8s0BudX5Jf0r3ZYCfFJLJZroYbxH OcvlMgRVOWzlH2JpRsidVdpZNw== -----END CERTIFICATE-----Generated at Sat Sep 26 02:54:18 2026 by rpki-client