$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json) Hash identifier: IXYzqYpTfWagH1uzAzS5lZiB07l73MGFLmIc4zuXnWY= Subject key identifier: 08:A1:4A:66:88:F8:1C:58:55:25:5F:45:A6:5A:02:FA:A5:29:19:E2 Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft Manifest number: 040A Signing time: Mon 21 Sep 2026 00:13:21 +0000 Manifest this update: Mon 21 Sep 2026 00:13:21 +0000 Manifest next update: Mon 28 Sep 2026 00:13:21 +0000 Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: ABbmK4OFIkzFRlkgD7yQ2OPBMcUR0ThiohNZA/DWrPA=) 2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: Cjy/SWLQH86e7gQzB7H8gnQKLtLg5bLdlkR56jFW4Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Sep 21 00:13:21 2026 GMT Not After : Sep 28 00:13:21 2026 GMT Subject: CN=6ab076a1-98b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:2f:10:ad:2f:91:8e:b7:72:8b:d9:d2:69: 12:82:9e:0c:52:d4:b9:95:b4:04:f5:e7:88:d3:31: d5:09:46:14:fb:15:6e:16:a4:47:2d:ad:12:2e:d0: 9a:a4:9e:3f:74:ff:98:98:5d:2b:9d:9a:61:68:11: f9:64:61:0c:4b:96:ea:68:78:d6:3f:ad:c0:ff:5c: 81:b8:87:19:9a:a9:34:d4:cf:72:c5:8d:c1:42:f5: 29:88:0c:4b:9d:de:eb:4b:33:09:16:3f:b6:7b:94: 6b:1f:39:c9:5b:d7:50:d5:0c:2e:e5:7c:ae:f1:b2: 84:d8:d8:dd:3a:b7:fd:23:7d:29:f7:97:9b:ad:bf: 13:a2:a6:52:14:d3:70:c7:81:63:c4:f4:bd:09:8f: 4b:5b:7a:fa:88:1e:5a:26:c7:31:9a:82:b8:2d:d2: 41:8d:e3:c1:16:f1:b4:77:78:61:05:86:89:c3:2b: b0:02:ed:75:ff:58:90:ae:db:32:97:bf:07:9a:e8: ee:81:a9:bc:36:4a:72:25:5a:ce:a7:bc:97:c0:93: 32:55:6f:2f:62:2f:b1:00:71:94:c4:52:ab:5b:63: 0f:50:8d:c1:14:e0:75:62:6f:97:ed:4b:7b:c5:21: 0c:a0:c0:00:4c:52:ce:40:ab:9f:a2:27:16:02:3f: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:4A:66:88:F8:1C:58:55:25:5F:45:A6:5A:02:FA:A5:29:19:E2 X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c2:e1:50:9b:b5:5d:77:52:50:f9:bf:ec:8c:13:2f:4c:ed: ae:5b:75:6f:0e:bd:18:2f:c4:ae:19:07:b5:61:66:eb:22:dc: b1:7a:b1:2b:41:bd:a3:0a:b5:31:fb:8d:a6:af:f4:37:87:6d: 1b:ee:6e:ca:a7:d3:3d:09:12:88:c8:d8:5d:6d:ea:17:ae:e4: e1:d8:9e:b1:40:c5:c6:d4:00:f6:bc:5c:5d:d8:36:d2:a7:46: f9:71:34:ec:01:4f:8e:f2:c4:f5:c4:5c:18:a7:a1:cf:31:84: 02:39:81:1f:55:48:c9:be:63:6c:66:84:00:43:4b:cd:90:30: 0c:6c:76:d7:4d:15:2a:8e:c5:98:02:e3:89:19:7f:bd:83:9a: ac:5f:ec:6b:71:24:57:7f:33:b1:bc:d2:89:e9:12:9d:35:f8: 1c:cf:d4:34:88:47:4d:76:fc:b1:a7:19:53:2f:e6:8c:3f:4d: a7:50:39:e2:fe:17:e3:16:62:ec:f7:6d:fd:dc:65:28:d8:8f: f9:44:7e:12:7b:e4:e6:b2:8a:e7:f6:c5:73:92:cf:24:a2:09: 3e:1c:7d:b5:58:79:fa:80:da:6a:5e:20:27:e2:75:79:9b:a2: 36:82:c5:16:13:d3:ed:5d:62:50:ae:35:42:1c:5f:1e:24:4a: fa:bd:00:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjYwOTIxMDAxMzIxWhcNMjYwOTI4MDAxMzIxWjAYMRYwFAYD VQQDEw02YWIwNzZhMS05OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/QvEK0vkY63covZ0mkSgp4MUtS5lbQE9eeI0zHVCUYU+xVuFqRHLa0SLtCa pJ4/dP+YmF0rnZphaBH5ZGEMS5bqaHjWP63A/1yBuIcZmqk01M9yxY3BQvUpiAxL nd7rSzMJFj+2e5RrHznJW9dQ1Qwu5Xyu8bKE2NjdOrf9I30p95ebrb8ToqZSFNNw x4FjxPS9CY9LW3r6iB5aJscxmoK4LdJBjePBFvG0d3hhBYaJwyuwAu11/1iQrtsy l78Hmujugam8NkpyJVrOp7yXwJMyVW8vYi+xAHGUxFKrW2MPUI3BFOB1Ym+X7Ut7 xSEMoMAATFLOQKufoicWAj+/aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAihSmaI +BxYVSVfRaZaAvqlKRniMB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzAxQS8wRjg1MDE0Q0QxMUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dD MnNjNGF1T1JSNlpHV1RxSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi8LhUJu1XXdSUPm/7IwTL0ztrlt1bw69GC/ErhkHtWFm6yLcsXqxK0G9owq1 MfuNpq/0N4dtG+5uyqfTPQkSiMjYXW3qF67k4diesUDFxtQA9rxcXdg20qdG+XE0 7AFPjvLE9cRcGKehzzGEAjmBH1VIyb5jbGaEAENLzZAwDGx2100VKo7FmALjiRl/ vYOarF/sa3EkV38zsbzSiekSnTX4HM/UNIhHTXb8sacZUy/mjD9Np1A54v4X4xZi 7Pdt/dxlKNiP+UR+Envk5rKK5/bFc5LPJKIJPhx9tVh5+oDaal4gJ+J1eZuiNoLF FhPT7V1iUK41QhxfHiRK+r0ARA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:46:15 2026 by rpki-client