$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: znZB9ARqmmt/2Afvl9ODkVJ0c7+noG/K9kCWFiYxzJk= Subject key identifier: 75:88:43:2E:CD:43:13:45:8E:F7:7F:E1:4C:6F:B9:A3:2B:94:BF:D0 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0D27 Signing time: Tue 22 Sep 2026 18:09:42 +0000 Manifest this update: Tue 22 Sep 2026 18:09:41 +0000 Manifest next update: Tue 29 Sep 2026 18:09:41 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: 4cCQF/o9vKebb7hKuLpn5XHB4jnUDuBhIcc12SWv2vM=) 2: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: CGowp4w2GBQ9qV/GHYQUjgIY+WC1P2t6NRtsfQxE+ag=) 3: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: DCzIu7CILC93Y/AaTkM9+LUyGULYyH1ab9eTUGXE5NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Sep 22 18:09:41 2026 GMT Not After : Sep 29 18:09:41 2026 GMT Subject: CN=6ab2c465-0833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:5f:6b:df:5e:f0:6f:7e:73:0b:8f:d3:c6: df:40:ec:96:eb:9e:95:22:03:64:23:20:c7:44:e6: 3a:02:36:ff:d2:ca:f8:fa:7e:a9:35:fc:4c:1c:7c: 1d:fc:73:81:fe:8f:1c:de:79:e0:5b:63:95:2e:d7: 3d:bf:d5:0f:fd:ad:33:4b:bb:63:4a:c4:72:ef:c6: 9b:55:02:05:d7:f8:30:d8:b1:87:ed:d2:db:92:23: 6f:01:db:1e:51:de:07:d1:24:13:af:45:f4:b6:17: d4:e4:a5:75:ea:2e:4b:50:11:ef:40:20:eb:bf:36: 35:40:2a:25:32:93:59:75:de:e7:1d:37:1f:a7:ba: ff:24:12:95:ab:36:17:7c:e1:c0:ae:37:49:c5:12: 51:73:51:85:49:68:d2:cb:8b:db:b3:6e:68:85:69: 9e:f8:8e:00:3c:91:d0:0c:4e:7d:41:5e:f0:42:63: 80:22:ad:c1:36:85:82:06:64:d3:e6:7b:7d:8c:0a: f5:f8:54:8a:0d:b6:f2:05:8c:a7:48:0a:24:01:94: d8:06:52:e1:4a:6a:a0:7b:fa:91:d8:aa:34:4a:c5: 51:db:b5:f3:9d:1c:44:35:a7:a9:50:aa:20:0f:77: 4c:92:15:73:d6:f6:68:be:ad:e9:ac:41:21:92:70: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:88:43:2E:CD:43:13:45:8E:F7:7F:E1:4C:6F:B9:A3:2B:94:BF:D0 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c8:7f:22:07:fb:59:d6:9d:59:2b:2c:c5:26:1e:fc:a4:40: d7:51:44:da:26:ed:8f:36:d8:9f:af:fc:9e:7f:21:5a:23:65: 36:8a:92:6e:c2:95:a0:5e:15:51:15:2f:5c:9c:ec:de:7d:f5: d4:2a:fa:59:67:18:c5:f8:20:37:ab:bf:1b:a0:9f:c9:79:19: 3e:09:2c:a3:4c:27:4b:06:e1:fa:83:a4:23:08:f4:b3:0a:28: 83:b4:a2:77:ca:a2:12:92:b9:a3:e5:2d:41:2d:c6:0a:cb:ec: 12:98:75:1a:a6:bb:68:a8:5a:7d:a3:a8:75:4a:22:c9:b3:de: 5f:cb:55:20:ae:2d:f9:85:44:f6:01:fe:ea:17:7a:96:bc:d8: 24:6f:38:ff:55:f3:ee:77:e8:ff:ae:01:cd:08:c1:72:e4:cc: 7e:e1:9b:36:52:aa:18:c0:73:8f:9f:81:0a:1d:d3:1c:09:06: 6f:99:be:23:df:75:eb:5d:26:06:b5:a8:9f:23:65:02:4a:70: e6:fc:f2:9c:a8:fd:53:12:49:75:12:a9:52:9c:5e:b5:f5:2b: 31:83:7e:92:b7:90:43:34:4d:59:c3:d3:69:0c:c9:9c:67:d1: 88:b1:b8:fa:66:1a:e5:1a:5e:39:a8:4b:a0:12:d0:15:12:21: 03:42:e9:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYwOTIyMTgwOTQxWhcNMjYwOTI5MTgwOTQxWjAYMRYwFAYD VQQDEw02YWIyYzQ2NS0wODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDlfa99e8G9+cwuP08bfQOyW656VIgNkIyDHROY6Ajb/0sr4+n6pNfxMHHwd /HOB/o8c3nngW2OVLtc9v9UP/a0zS7tjSsRy78abVQIF1/gw2LGH7dLbkiNvAdse Ud4H0SQTr0X0thfU5KV16i5LUBHvQCDrvzY1QColMpNZdd7nHTcfp7r/JBKVqzYX fOHArjdJxRJRc1GFSWjSy4vbs25ohWme+I4APJHQDE59QV7wQmOAIq3BNoWCBmTT 5nt9jAr1+FSKDbbyBYynSAokAZTYBlLhSmqge/qR2Ko0SsVR27XznRxENaepUKog D3dMkhVz1vZovq3prEEhknCBNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWIQy7N QxNFjvd/4UxvuaMrlL/QMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS8h/Igf7WdadWSssxSYe/KRA11FE2ibtjzbYn6/8nn8hWiNlNoqSbsKVoF4V URUvXJzs3n311Cr6WWcYxfggN6u/G6CfyXkZPgkso0wnSwbh+oOkIwj0swoog7Si d8qiEpK5o+UtQS3GCsvsEph1Gqa7aKhafaOodUoiybPeX8tVIK4t+YVE9gH+6hd6 lrzYJG84/1Xz7nfo/64BzQjBcuTMfuGbNlKqGMBzj5+BCh3THAkGb5m+I991610m BrWonyNlAkpw5vzynKj9UxJJdRKpUpxetfUrMYN+kreQQzRNWcPTaQzJnGfRiLG4 +mYa5RpeOahLoBLQFRIhA0LpCw== -----END CERTIFICATE-----Generated at Wed Sep 23 12:30:33 2026 by rpki-client