$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: jLSqsEnlqYBuuRV9xSke/Ji9unl0chuEU+aSIu07bKo= Subject key identifier: C7:16:7D:56:79:0C:23:A2:8E:B9:D0:9D:A9:03:5D:67:7A:45:1A:C6 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 051C Signing time: Tue 22 Sep 2026 23:20:43 +0000 Manifest this update: Tue 22 Sep 2026 23:20:43 +0000 Manifest next update: Tue 29 Sep 2026 23:20:43 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: MeUR2GSRKiJML8gHqT2kFlSsaoHozL5JIYcmbeZmGHs=) 2: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=) 3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=) 4: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Sep 22 23:20:43 2026 GMT Not After : Sep 29 23:20:43 2026 GMT Subject: CN=6ab30d4b-de13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:26:28:18:94:6a:ba:82:c2:fe:8c:1c:c0: e9:47:c4:23:d9:2b:6c:9a:24:6b:58:f2:18:35:d7: 1b:77:38:d4:1b:7e:9c:23:0c:74:53:c1:49:b2:4a: 7d:ef:cb:33:c2:b5:81:e7:4a:35:84:66:51:a9:73: 05:e2:a3:2a:6d:14:77:58:7d:27:b0:cb:6b:51:e8: 52:7c:1e:83:e1:2e:62:bc:2d:6e:a4:5b:17:a3:e5: 86:be:9c:6d:27:30:9d:b0:95:6c:92:e9:65:cd:c5: f9:59:a2:7e:a2:80:9d:4e:e1:fb:3a:f6:5e:45:12: a0:71:bf:33:0f:13:ff:f7:55:fd:c2:07:6e:97:d4: 91:66:be:b8:15:d9:df:f2:c6:df:32:bd:18:7e:0c: 8a:fe:de:21:58:96:e0:ed:dc:c0:db:a4:ad:a8:37: 27:73:e1:9f:f9:24:6b:8d:bd:89:ad:2a:d6:16:10: 9a:6e:83:d7:03:32:04:c7:32:93:c0:39:b1:9d:9c: 1e:1b:00:b4:d2:3b:29:04:9e:f3:a8:8b:92:4a:2f: fa:c6:f4:8c:bc:ba:89:4e:5c:d2:1c:c0:52:15:22: 7e:0c:e2:fc:3d:e2:da:f3:99:9a:91:cd:06:a2:e2: 7f:a0:52:fe:df:f7:cf:06:2f:4f:8c:fe:fe:9d:23: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:16:7D:56:79:0C:23:A2:8E:B9:D0:9D:A9:03:5D:67:7A:45:1A:C6 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:70:74:77:ce:0a:05:5a:d4:c6:54:1a:0b:e2:b3:b4:95:cc: 46:56:50:c3:a9:0a:cf:ac:c7:8e:cb:b0:bc:83:3c:56:b1:96: b0:a3:fd:57:18:e9:d6:da:9f:d0:d5:0f:1f:2f:dd:b0:df:2c: 10:d1:32:84:b2:6a:33:1b:d4:aa:00:7c:63:db:22:fa:03:66: 0a:73:23:c5:6e:03:6d:4c:af:c1:d4:4b:a6:71:9b:ec:4c:db: 19:3e:5d:01:57:44:c7:06:85:c3:6c:d5:aa:dd:85:da:b7:2a: 8c:05:03:bb:1e:aa:9b:c1:e5:b2:d4:ef:5c:e6:38:26:1a:86: b3:29:64:b9:7d:cc:a2:db:72:88:4c:f8:88:c7:03:c4:12:31: 6a:30:63:f6:1d:60:c1:46:a6:7d:bc:93:8a:03:cd:80:4b:42: 8c:20:d4:b1:49:27:43:18:ff:7c:b4:e5:f8:fb:7a:e8:9b:f2: 20:c0:61:bc:c4:e5:54:e8:63:a0:06:fd:e0:73:18:79:20:c7: 4b:03:f6:96:9d:96:ca:dd:4a:54:6c:b3:c7:cd:cf:9f:ea:18: 95:8e:b9:f9:4d:4b:c9:da:49:8a:0b:51:bc:be:52:65:68:2c: 07:d4:e2:ae:83:a0:e6:fb:f7:f8:b8:f5:b8:95:0f:f0:bc:9a: 16:19:f5:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYwOTIyMjMyMDQzWhcNMjYwOTI5MjMyMDQzWjAYMRYwFAYD VQQDEw02YWIzMGQ0Yi1kZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S0mKBiUarqCwv6MHMDpR8Qj2StsmiRrWPIYNdcbdzjUG36cIwx0U8FJskp9 78szwrWB50o1hGZRqXMF4qMqbRR3WH0nsMtrUehSfB6D4S5ivC1upFsXo+WGvpxt JzCdsJVskullzcX5WaJ+ooCdTuH7OvZeRRKgcb8zDxP/91X9wgdul9SRZr64Fdnf 8sbfMr0YfgyK/t4hWJbg7dzA26StqDcnc+Gf+SRrjb2JrSrWFhCaboPXAzIExzKT wDmxnZweGwC00jspBJ7zqIuSSi/6xvSMvLqJTlzSHMBSFSJ+DOL8PeLa85makc0G ouJ/oFL+3/fPBi9PjP7+nSN/mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcWfVZ5 DCOijrnQnakDXWd6RRrGMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxHB0d84KBVrUxlQaC+KztJXMRlZQw6kKz6zHjsuwvIM8VrGWsKP9Vxjp1tqf 0NUPHy/dsN8sENEyhLJqMxvUqgB8Y9si+gNmCnMjxW4DbUyvwdRLpnGb7EzbGT5d AVdExwaFw2zVqt2F2rcqjAUDux6qm8HlstTvXOY4JhqGsylkuX3MottyiEz4iMcD xBIxajBj9h1gwUamfbyTigPNgEtCjCDUsUknQxj/fLTl+Pt66JvyIMBhvMTlVOhj oAb94HMYeSDHSwP2lp2Wyt1KVGyzx83Pn+oYlY65+U1LydpJigtRvL5SZWgsB9Ti roOg5vv3+Lj1uJUP8LyaFhn15w== -----END CERTIFICATE-----Generated at Wed Sep 23 21:39:29 2026 by rpki-client