$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: FBf7hkws4Uvys5Jjo0S+U9wgETO8LWIzi+HcGOnZqpA= Subject key identifier: 7D:F8:A0:5D:DF:A0:4A:0C:D6:D4:47:62:C2:B5:5B:4A:6D:13:14:EC Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0455 Signing time: Fri 25 Sep 2026 00:03:56 +0000 Manifest this update: Fri 25 Sep 2026 00:03:56 +0000 Manifest next update: Fri 02 Oct 2026 00:03:56 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: xYvpaspGNd1d2JxEd9BKsb2bQYXRp9kFGFVy3SI08rA=) 2: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=) 4: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Sep 25 00:03:56 2026 GMT Not After : Oct 2 00:03:56 2026 GMT Subject: CN=6ab5ba6c-5b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:1e:0d:43:6b:ec:ad:cd:57:ce:5b:1b:17: cd:44:3d:27:f9:1a:b4:48:35:8a:c3:c3:6e:4f:10: 46:27:f1:76:35:1a:88:25:e9:b9:df:6d:d2:c3:fb: d5:7a:b2:45:f6:c6:51:57:5d:d3:23:6e:22:73:0a: fe:65:4b:b7:0f:9c:8a:9c:9c:5e:02:67:eb:eb:83: a1:62:a9:bc:8c:c2:38:b3:05:19:be:4f:21:16:f8: eb:e6:2e:e1:f6:76:3d:2d:4d:ae:e0:6e:e6:a5:ae: 88:9d:c4:42:96:fa:75:b1:e8:07:f9:c4:49:22:26: 6d:2f:1a:de:80:c7:5b:e0:53:75:7b:12:e4:49:cd: 45:c0:11:19:a0:10:83:25:00:04:69:60:71:30:46: ae:d8:a3:e0:c0:54:f7:bd:78:da:21:e7:30:4c:fc: 56:6c:b2:52:a7:4c:51:64:18:23:b1:d6:1f:d0:eb: 78:d3:26:25:55:9d:17:14:20:3e:e9:c0:c4:20:b1: de:9b:f1:ce:19:80:9e:80:11:89:3c:aa:e1:16:db: a3:94:70:6f:b5:21:39:dd:69:c7:fb:38:11:eb:42: 2a:e9:3e:f1:e7:89:d8:ea:95:5f:d6:25:45:d0:c4: 0a:05:6d:2a:5f:35:48:85:0d:08:b8:b0:c3:8e:c6: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F8:A0:5D:DF:A0:4A:0C:D6:D4:47:62:C2:B5:5B:4A:6D:13:14:EC X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:26:41:6c:ba:b3:26:22:9a:88:51:b9:95:1b:7a:a0:85:7b: 42:41:af:32:f6:fe:01:12:af:c3:e8:ff:36:9f:c3:84:da:34: 39:8b:e5:15:7f:90:54:a0:12:91:be:8f:dd:81:44:a1:c5:b6: 99:eb:04:39:7d:08:eb:8c:02:7a:67:55:87:5a:8f:d6:13:02: ea:fb:60:44:5c:98:40:b4:ca:c1:15:9a:48:ba:52:e8:9b:17: 9b:05:79:55:c4:be:bf:4d:a5:3b:b1:16:50:e9:54:bd:a2:31: 8d:4e:21:2c:c6:f5:bc:8c:57:37:a9:64:57:8c:24:59:52:76: e5:5e:98:c4:03:bc:ee:f7:a5:73:33:21:c1:ea:c9:1c:c1:73: 4c:a0:23:7b:74:b0:c9:3a:4c:87:aa:e4:6b:81:45:89:d1:c5: 32:d3:f5:c9:4b:49:f0:dc:ea:e9:17:72:45:14:f3:b1:ee:f8: 27:5f:f0:0e:29:cc:d0:d0:e0:06:03:a8:f4:f9:64:ea:bd:a4: a1:95:fb:d4:f8:49:a6:ea:b0:c5:b6:0a:15:9b:01:d6:f1:8e: 5f:21:83:a9:b8:2a:62:ba:1d:a1:72:5e:c3:60:6f:f3:f9:54: 15:52:b4:1c:96:64:aa:4e:88:d7:30:1b:3f:4b:6a:75:91:81: 73:5a:48:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwOTI1MDAwMzU2WhcNMjYxMDAyMDAwMzU2WjAYMRYwFAYD VQQDEw02YWI1YmE2Yy01YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHEeDUNr7K3NV85bGxfNRD0n+Rq0SDWKw8NuTxBGJ/F2NRqIJem5323Sw/vV erJF9sZRV13TI24icwr+ZUu3D5yKnJxeAmfr64OhYqm8jMI4swUZvk8hFvjr5i7h 9nY9LU2u4G7mpa6IncRClvp1segH+cRJIiZtLxregMdb4FN1exLkSc1FwBEZoBCD JQAEaWBxMEau2KPgwFT3vXjaIecwTPxWbLJSp0xRZBgjsdYf0Ot40yYlVZ0XFCA+ 6cDEILHem/HOGYCegBGJPKrhFtujlHBvtSE53WnH+zgR60Iq6T7x54nY6pVf1iVF 0MQKBW0qXzVIhQ0IuLDDjsZ5iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH34oF3f oEoM1tRHYsK1W0ptExTsMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoSZBbLqzJiKaiFG5lRt6oIV7QkGvMvb+ARKvw+j/Np/DhNo0OYvlFX+QVKAS kb6P3YFEocW2mesEOX0I64wCemdVh1qP1hMC6vtgRFyYQLTKwRWaSLpS6JsXmwV5 VcS+v02lO7EWUOlUvaIxjU4hLMb1vIxXN6lkV4wkWVJ25V6YxAO87velczMhwerJ HMFzTKAje3SwyTpMh6rka4FFidHFMtP1yUtJ8Nzq6RdyRRTzse74J1/wDinM0NDg BgOo9Plk6r2koZX71PhJpuqwxbYKFZsB1vGOXyGDqbgqYrodoXJew2Bv8/lUFVK0 HJZkqk6I1zAbP0tqdZGBc1pIKA== -----END CERTIFICATE-----Generated at Sat Sep 26 03:43:39 2026 by rpki-client