$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: G2P4Zc/hZJMIpQZMA8ojb6uphtIYfoZkAZ+9QON2EHs= Subject key identifier: 43:62:90:0C:FA:5E:55:ED:0C:9D:5D:18:E0:2E:A8:5F:D0:5A:74:32 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 025E Signing time: Wed 23 Sep 2026 02:03:31 +0000 Manifest this update: Wed 23 Sep 2026 02:03:30 +0000 Manifest next update: Wed 30 Sep 2026 02:03:30 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: pmLxQDsPyuBmzF3a2lmcaWv7qgxJ65xrq3xdVHMbE5k=) 2: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) 3: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 4: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Sep 23 02:03:30 2026 GMT Not After : Sep 30 02:03:30 2026 GMT Subject: CN=6ab33373-2d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:86:df:67:3e:e5:c6:4e:04:f1:91:a0:54: cf:7c:64:a6:2d:ed:c1:73:31:80:76:07:07:0d:8d: cb:9a:97:cb:4a:e7:1a:92:81:6d:1e:a5:e5:2c:1e: 2a:bb:25:1f:21:6a:53:1f:1a:66:03:eb:e6:73:a9: d2:45:d6:2b:21:90:a1:ea:6e:b3:63:a3:db:6f:83: 2c:e0:3f:dd:d4:c7:84:09:ab:8d:47:b5:6f:24:2f: 9e:2e:58:f0:48:1a:be:30:6f:47:fc:a5:b6:b4:45: 6d:9a:9e:d8:e9:ba:5b:3f:7f:51:f3:bd:13:d9:b1: c6:95:18:9f:3e:98:92:4a:d9:1f:78:25:2e:f6:57: 6f:a3:31:ef:e6:e1:98:81:03:08:68:44:81:27:a0: e2:9d:d4:49:eb:64:53:c0:c9:e0:5f:a1:3b:d7:4f: 29:5a:6d:c3:b1:db:0f:dc:1c:fd:1f:9e:4e:2c:60: 3d:52:ea:2d:de:2e:37:53:07:a4:4c:56:5e:a1:d0: f2:db:69:c8:a8:a7:99:4e:0f:55:e0:67:cd:d1:e6: 1a:72:fb:55:4e:1c:9f:04:38:19:d4:94:27:47:1a: 8c:fd:d7:68:a6:6e:38:0a:4c:63:a1:29:1d:2c:72: a8:48:1e:8a:86:98:51:a6:3f:36:8f:78:d1:23:c6: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:62:90:0C:FA:5E:55:ED:0C:9D:5D:18:E0:2E:A8:5F:D0:5A:74:32 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:af:90:01:92:c4:82:3c:04:44:30:f0:88:5a:7a:f3:c9:11: dd:54:51:9a:83:c2:1d:67:b1:2b:7c:e8:94:ac:ba:9d:68:9e: f1:c8:29:17:17:a4:26:8e:eb:b2:cc:32:41:57:90:3b:4c:f1: b6:91:59:86:8f:4c:c3:c2:4d:30:42:56:ff:ab:e6:13:6f:cd: 8d:8b:4c:90:6c:5b:c2:98:6f:6c:3a:1d:6a:a2:57:de:5b:f1: 88:d1:15:c6:1c:e7:75:8a:93:07:00:6d:ba:4b:12:d1:af:b3: f4:b2:99:2c:80:d7:fb:0b:76:da:59:0a:51:f4:3d:d1:66:a0: 9d:e7:3b:e1:74:bb:dd:cb:40:89:49:5c:30:7e:92:b9:bd:1b: 2e:7f:86:52:36:de:e3:6d:b8:b1:c8:8e:25:2c:68:f0:ee:4b: 60:8c:fa:37:f3:5f:4f:61:25:5b:cc:7c:2a:5f:56:13:6c:53: e7:1c:99:0d:91:1c:6e:70:0e:0e:de:09:9b:3e:cf:70:c4:30: 30:26:51:1a:38:05:3f:8c:32:b3:83:c9:3d:c7:48:8c:ae:03: 9a:b1:75:9f:ec:02:95:bc:fd:1b:4c:13:04:74:0e:7e:5f:ce: b1:bf:e5:b6:e9:f9:9e:19:2b:b0:b4:9b:bf:2e:6d:15:e9:1a: 96:44:32:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwOTIzMDIwMzMwWhcNMjYwOTMwMDIwMzMwWjAYMRYwFAYD VQQDEw02YWIzMzM3My0yZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr6G32c+5cZOBPGRoFTPfGSmLe3BczGAdgcHDY3LmpfLSucakoFtHqXlLB4q uyUfIWpTHxpmA+vmc6nSRdYrIZCh6m6zY6Pbb4Ms4D/d1MeECauNR7VvJC+eLljw SBq+MG9H/KW2tEVtmp7Y6bpbP39R870T2bHGlRifPpiSStkfeCUu9ldvozHv5uGY gQMIaESBJ6DindRJ62RTwMngX6E7108pWm3DsdsP3Bz9H55OLGA9Uuot3i43Uwek TFZeodDy22nIqKeZTg9V4GfN0eYacvtVThyfBDgZ1JQnRxqM/ddopm44CkxjoSkd LHKoSB6KhphRpj82j3jRI8Y+LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENikAz6 XlXtDJ1dGOAuqF/QWnQyMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlq+QAZLEgjwERDDwiFp688kR3VRRmoPCHWexK3zolKy6nWie8cgpFxekJo7r sswyQVeQO0zxtpFZho9Mw8JNMEJW/6vmE2/NjYtMkGxbwphvbDodaqJX3lvxiNEV xhzndYqTBwBtuksS0a+z9LKZLIDX+wt22lkKUfQ90Wagnec74XS73ctAiUlcMH6S ub0bLn+GUjbe4224sciOJSxo8O5LYIz6N/NfT2ElW8x8Kl9WE2xT5xyZDZEcbnAO Dt4Jmz7PcMQwMCZRGjgFP4wys4PJPcdIjK4DmrF1n+wClbz9G0wTBHQOfl/Osb/l tun5nhkrsLSbvy5tFekalkQyyw== -----END CERTIFICATE-----Generated at Fri Sep 25 04:05:49 2026 by rpki-client