$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json) Hash identifier: NhZn343aXEkDuqdZ4UagTbvOFiLgrLtb+V7y+uM5j5Y= Subject key identifier: CA:2A:38:14:28:6F:24:F3:12:2F:A7:8E:34:98:1F:F8:95:54:12:53 Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft Manifest number: E3 Signing time: Wed 23 Sep 2026 06:20:13 +0000 Manifest this update: Wed 23 Sep 2026 06:20:13 +0000 Manifest next update: Wed 30 Sep 2026 06:20:13 +0000 Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: 9gJrE5LlhudmqnB5Zw+7QWr8PStC/BEgAmySupODLL0=) 2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: y+sTsz0tA3g3DzsQDXuqpBvyUzmJcH4SyCIepVtJQs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: Sep 23 06:20:13 2026 GMT Not After : Sep 30 06:20:13 2026 GMT Subject: CN=6ab36f9d-9ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:f0:e0:77:60:05:be:cc:35:36:22:3e:ee: d7:80:02:93:77:be:8d:81:f9:4c:65:f7:5a:71:8a: 85:23:b1:08:e9:90:27:41:36:46:19:0b:2e:5f:cb: 41:60:a5:0d:a7:94:24:55:8b:ce:e5:a6:0d:cc:b2: 45:7e:49:10:d8:22:0e:aa:d1:38:0c:d7:35:dd:1a: 1e:55:e5:e3:2f:81:ff:c4:38:87:a8:da:eb:03:29: fc:96:93:f8:ca:ff:6f:85:aa:b6:f5:f6:2e:33:34: b9:ad:c3:bd:61:fa:11:5e:76:37:fc:db:c0:ec:19: 93:f4:4e:ed:c6:ce:3f:b3:a2:35:18:46:7d:6d:a0: 24:2d:87:ab:76:e4:ec:a7:51:f2:87:d7:d6:10:da: aa:1a:e4:ed:75:84:f7:2b:6e:73:e1:1e:0e:23:b6: 56:2c:d4:4b:5c:29:0d:52:c2:02:b9:d4:1f:fb:67: 68:43:64:92:dc:3f:3d:4c:17:b8:6f:56:af:04:8b: 3c:d9:b4:ce:e3:89:05:76:f4:46:29:22:e0:a9:e5: 5d:36:c2:90:da:94:39:ae:05:99:d2:88:0e:92:4b: 9c:9f:ae:e9:fb:94:14:7e:c3:ad:79:6f:d7:70:45: 14:a2:18:3d:32:10:ff:cb:65:91:4a:53:33:d4:ae: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2A:38:14:28:6F:24:F3:12:2F:A7:8E:34:98:1F:F8:95:54:12:53 X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:cc:73:9d:6b:f9:6a:d4:05:df:8b:f8:c5:e4:c0:a0:c2:11: f8:7d:0f:96:b2:4a:0a:85:01:ba:87:45:c6:fe:ca:3f:08:8e: e4:ae:6d:f0:26:ae:8f:39:10:a8:a0:e7:58:ca:7c:aa:cb:e6: 74:cb:79:28:54:97:b4:4e:d4:8d:7f:32:ab:81:ba:ea:61:57: c4:e7:fc:a9:c3:8a:72:22:31:9f:ec:74:9b:0d:5e:5d:6a:8d: 47:59:e5:07:4d:75:c3:85:87:63:35:d0:c3:58:fa:54:57:d3: ac:0a:07:23:42:87:20:96:95:27:dd:1e:02:cd:aa:3f:22:bd: 6e:95:ae:53:a5:98:b5:c1:89:f7:fe:6b:9a:7f:5e:d5:a4:cd: 4e:8e:bc:5d:1d:66:39:2c:c2:d8:81:08:b3:f5:c3:c9:21:8e: 7e:19:d5:e8:18:3c:a8:52:16:c4:6c:ec:a7:8c:a7:ef:ac:20: af:c6:ef:97:88:91:d8:c3:8a:3c:f1:ec:1e:b5:85:0b:8b:bd: f2:c8:b3:fe:61:ce:eb:fe:26:d0:27:07:6c:90:cc:ea:3a:8c: d4:91:4d:06:d7:6f:0d:7e:79:07:b7:f2:0f:df:fc:95:ef:43: 59:59:5d:de:23:13:2c:73:bb:c3:76:a9:ad:95:d9:37:a3:76: df:95:6f:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQzRjIxMTAvBgNVBAUTKDU1Nzg5QTM0MTZFN0VGNTE1Q0UwOEYwNUEzNkYxREVE ODM0NDRDMDkwHhcNMjYwOTIzMDYyMDEzWhcNMjYwOTMwMDYyMDEzWjAYMRYwFAYD VQQDEw02YWIzNmY5ZC05Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xTw4HdgBb7MNTYiPu7XgAKTd76NgflMZfdacYqFI7EI6ZAnQTZGGQsuX8tB YKUNp5QkVYvO5aYNzLJFfkkQ2CIOqtE4DNc13RoeVeXjL4H/xDiHqNrrAyn8lpP4 yv9vhaq29fYuMzS5rcO9YfoRXnY3/NvA7BmT9E7txs4/s6I1GEZ9baAkLYerduTs p1Hyh9fWENqqGuTtdYT3K25z4R4OI7ZWLNRLXCkNUsICudQf+2doQ2SS3D89TBe4 b1avBIs82bTO44kFdvRGKSLgqeVdNsKQ2pQ5rgWZ0ogOkkucn67p+5QUfsOteW/X cEUUohg9MhD/y2WRSlMz1K6YoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoqOBQo byTzEi+njjSYH/iVVBJTMB8GA1UdIwQYMBaAFFV4mjQW5+9RXOCPBaNvHe2DREwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80MTgwNTA5NDYw QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcxRmM0SThGbzI4ZDdZTkVU QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDNGMi80MTgwNTA5NDYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcx RmM0SThGbzI4ZDdZTkVUQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhMxznWv5atQF34v4xeTAoMIR+H0PlrJKCoUBuodFxv7KPwiO5K5t8CaujzkQ qKDnWMp8qsvmdMt5KFSXtE7UjX8yq4G66mFXxOf8qcOKciIxn+x0mw1eXWqNR1nl B011w4WHYzXQw1j6VFfTrAoHI0KHIJaVJ90eAs2qPyK9bpWuU6WYtcGJ9/5rmn9e 1aTNTo68XR1mOSzC2IEIs/XDySGOfhnV6Bg8qFIWxGzsp4yn76wgr8bvl4iR2MOK PPHsHrWFC4u98siz/mHO6/4m0CcHbJDM6jqM1JFNBtdvDX55B7fyD9/8le9DWVld 3iMTLHO7w3aprZXZN6N235VvtA== -----END CERTIFICATE-----Generated at Wed Sep 23 12:18:26 2026 by rpki-client