$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft File: vYWifqA3zhvaSwsh9PBA2bHT53g.mft (raw, json) Hash identifier: EoL5+XVSOqrgKdJary2ssqfby1okib5CPj/PK2z06NI= Subject key identifier: C3:65:48:EB:2A:EF:FB:11:F0:1D:E7:74:56:B0:1D:4A:07:E2:AB:2A Authority key identifier: BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78 Certificate issuer: /CN=A91FCA43/serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft Manifest number: 1A Signing time: Fri 25 Sep 2026 09:16:35 +0000 Manifest this update: Fri 25 Sep 2026 09:16:34 +0000 Manifest next update: Fri 02 Oct 2026 09:16:34 +0000 Files and hashes: 1: vYWifqA3zhvaSwsh9PBA2bHT53g.crl (hash: ULsx/SAaWUgXr7UkE6P0Z+qQBwchW9C9daWy8vm7NII=) 2: BF0C3468A27A11F1846886F86811F970.roa (hash: HiBw6l9Sxo7Rrs0kPz6lX0/bPt6FCdr2birEHDIBD+E=) 3: m0_tJMWIkob__qWztDFwuI7BAqU.asa (hash: l1AjCWVrvXraVZ9Z8MnHg0my36XZ8gwtH5FBbkfxpK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA43, serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778 Validity Not Before: Sep 25 09:16:34 2026 GMT Not After : Oct 2 09:16:34 2026 GMT Subject: CN=6ab63bf3-0d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:e5:89:45:97:ae:15:c7:00:f5:8c:eb:0a: b1:a3:82:8c:ea:5a:7e:ef:30:d5:08:96:c9:1d:66: a4:c8:67:b3:e8:29:99:40:cd:b3:b8:ba:b8:fc:e7: bc:01:43:57:e2:1a:fb:ce:c2:1f:20:de:49:9c:c2: 19:91:75:f9:71:09:f4:65:f0:72:28:8b:c1:50:a5: 50:9e:8d:bc:ef:44:78:64:19:58:81:cc:27:79:b4: 40:44:a5:bc:a7:9e:9a:ce:d5:af:08:3b:5b:16:88: d9:21:c6:98:76:14:4a:f2:9e:b6:20:3d:b7:78:b7: 1c:ad:c2:de:fd:94:e5:a8:c2:77:5d:d8:ef:fd:8e: 1e:28:4b:f7:b6:18:34:a1:cb:c0:be:67:96:e1:b1: 78:3a:cf:b7:9b:c4:98:a1:28:97:d9:7a:69:b0:d5: e7:0c:ab:49:f3:61:08:a0:b2:97:cb:71:d8:8d:fe: b9:9f:0b:95:6a:c0:10:73:20:ab:70:ad:d0:a7:98: 5b:62:73:33:a6:20:a9:92:fd:97:4d:be:cc:7b:99: 60:dd:8b:7f:1f:26:17:2e:25:d1:4e:7e:84:9d:cb: 29:56:e7:fb:f1:0d:88:dd:b1:3e:18:21:25:60:ba: 55:67:28:50:e2:1b:0e:52:8e:fd:74:6f:18:d5:b8: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:65:48:EB:2A:EF:FB:11:F0:1D:E7:74:56:B0:1D:4A:07:E2:AB:2A X509v3 Authority Key Identifier: keyid:BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fa:e6:c2:6d:a4:06:3f:97:2a:cd:5d:14:8a:60:09:41:01: 83:2e:fc:79:fa:d9:38:25:69:75:6a:4e:3d:ff:b6:2d:d6:e1: ac:05:13:c5:2f:7b:0d:e6:eb:f3:5b:16:6e:7f:68:da:46:8b: b1:40:dd:3b:d3:3b:38:e3:79:33:a1:b7:b8:f8:44:0b:c7:6a: 06:70:0b:1c:ff:45:3e:7b:02:f2:8b:51:c3:f4:a6:77:61:a7: a9:8d:7c:40:3d:19:ad:b8:5a:5a:f3:36:b7:e2:5f:e4:92:6d: cb:7e:1f:96:21:b0:f1:75:2c:af:f5:af:03:be:3d:da:ca:f7: 77:9d:53:7c:31:7e:c6:63:9e:9c:9d:e3:30:5c:de:d5:f1:4a: 43:75:8f:47:7e:d8:ac:79:5d:32:1f:9c:82:32:0b:ed:7d:2b: f7:d1:6e:57:d3:d6:82:8e:b1:d4:8c:e8:dd:f4:94:42:6d:9d: 8c:e7:fe:19:0d:2d:18:6d:2b:7a:44:60:b8:ac:82:f1:b9:8d: 7e:a3:cf:d8:03:8b:5c:a0:41:5a:b4:68:bc:3a:c3:74:7b:91: c6:15:f5:1c:7b:2a:e2:25:4f:ad:0a:ba:fc:c3:bc:7a:84:2a: f0:68:26:1b:81:07:15:5b:8d:fe:91:f8:f5:ad:60:03:b4:18: 16:c2:ac:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0E0MzExMC8GA1UEBRMoQkQ4NUEyN0VBMDM3Q0UxQkRBNEIwQjIxRjRGMDQwRDlC MUQzRTc3ODAeFw0yNjA5MjUwOTE2MzRaFw0yNjEwMDIwOTE2MzRaMBgxFjAUBgNV BAMTDTZhYjYzYmYzLTBkOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ1+WJRZeuFccA9YzrCrGjgozqWn7vMNUIlskdZqTIZ7PoKZlAzbO4urj857wB Q1fiGvvOwh8g3kmcwhmRdflxCfRl8HIoi8FQpVCejbzvRHhkGViBzCd5tEBEpbyn nprO1a8IO1sWiNkhxph2FErynrYgPbd4txytwt79lOWowndd2O/9jh4oS/e2GDSh y8C+Z5bhsXg6z7ebxJihKJfZemmw1ecMq0nzYQigspfLcdiN/rmfC5VqwBBzIKtw rdCnmFticzOmIKmS/ZdNvsx7mWDdi38fJhcuJdFOfoSdyylW5/vxDYjdsT4YISVg ulVnKFDiGw5Sjv10bxjVuHh9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw2VI6yrv +xHwHed0VrAdSgfiqyowHwYDVR0jBBgwFoAUvYWifqA3zhvaSwsh9PBA2bHT53gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQzLzI5NEI5NkRBQTIw NzExRjFBMjI2Qjc2NTQ2MTFGOTcwL3ZZV2lmcUEzemh2YVN3c2g5UEJBMmJIVDUz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdllXaWZxQTN6aHZhU3dzaDlQQkEyYkhUNTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTQzLzI5NEI5NkRBQTIwNzExRjFBMjI2Qjc2NTQ2MTFGOTcwL3ZZV2lmcUEzemh2 YVN3c2g5UEJBMmJIVDUzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC0+ubCbaQGP5cqzV0UimAJQQGDLvx5+tk4JWl1ak49/7Yt1uGsBRPFL3sN5uvz WxZuf2jaRouxQN070zs443kzobe4+EQLx2oGcAsc/0U+ewLyi1HD9KZ3YaepjXxA PRmtuFpa8za34l/kkm3Lfh+WIbDxdSyv9a8Dvj3ayvd3nVN8MX7GY56cneMwXN7V 8UpDdY9HftiseV0yH5yCMgvtfSv30W5X09aCjrHUjOjd9JRCbZ2M5/4ZDS0YbSt6 RGC4rILxuY1+o8/YA4tcoEFatGi8OsN0e5HGFfUceyriJU+tCrr8w7x6hCrwaCYb gQcVW43+kfj1rWADtBgWwqwf -----END CERTIFICATE-----Generated at Sat Sep 26 13:01:50 2026 by rpki-client