$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: XlBZZ06qT2kaJxGEGBDQIlX+Iu3BZwkaZQdgnb37F6c= Subject key identifier: D2:23:F4:EF:0E:63:2D:E8:87:A5:C8:59:84:B1:27:E9:FC:18:B1:3C Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 0136 Signing time: Wed 23 Sep 2026 05:30:22 +0000 Manifest this update: Wed 23 Sep 2026 05:30:22 +0000 Manifest next update: Wed 30 Sep 2026 05:30:22 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: JXP6KNPCBk82VDmPlNOAiTjo1lcKSRZ93VyJN+V+Yds=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Sep 23 05:30:22 2026 GMT Not After : Sep 30 05:30:22 2026 GMT Subject: CN=6ab363ee-d449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:e4:87:8f:1e:e7:b2:5f:24:b9:3a:f9:dd: c5:a7:20:c9:57:8e:49:78:64:e8:1d:6e:82:44:f9: f3:11:20:6f:f8:fd:69:e3:2a:b6:6f:de:de:81:16: 4f:ec:ca:51:86:c8:ec:6c:e7:d2:c4:d2:42:71:18: e5:ad:e6:4b:99:93:19:2d:bd:7f:88:3e:5e:5d:a8: 82:a6:07:48:67:bb:bb:1a:2e:f9:39:f0:38:19:68: 0c:18:31:03:1c:23:d9:b0:f1:19:20:63:5a:ab:a8: c7:80:78:ae:09:18:31:2d:40:ff:c6:e9:01:3e:c5: 15:80:e9:df:7a:10:e0:ec:8b:f0:22:1f:ca:2a:9d: 7d:2e:26:26:6f:30:7b:c9:8d:a3:74:5c:1e:e6:aa: 2a:1b:88:01:04:a5:1f:3c:c0:4a:e4:72:70:38:33: 54:c4:99:11:44:91:8e:04:1a:d3:7d:f3:fb:26:43: 17:d9:de:8a:5d:10:a0:f8:c8:74:a4:ff:1a:b7:87: 49:19:6b:54:c2:b0:db:cc:87:3f:ee:16:90:b2:12: e6:91:23:cd:a2:49:48:8a:50:ad:b9:b8:81:53:03: 1e:94:f3:6d:ee:fa:6f:9d:92:4e:b3:94:13:4d:32: f5:9a:73:26:7b:e7:bb:76:d8:ea:81:90:f4:d7:60: 94:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:23:F4:EF:0E:63:2D:E8:87:A5:C8:59:84:B1:27:E9:FC:18:B1:3C X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:10:64:3f:95:69:24:6f:2b:f2:a7:f5:f6:e2:b3:33:5c:e4: bb:01:d1:7c:cb:69:16:7d:51:7b:6f:85:97:d8:09:57:d0:bc: 28:d2:22:eb:b5:54:fa:fc:79:47:17:9e:03:af:68:66:b2:9d: c9:0f:99:06:3b:8a:9f:d6:94:41:e7:b5:60:57:06:ea:08:87: 73:ea:7b:22:87:36:9c:35:7d:a9:f9:89:fb:9b:23:9f:9b:1d: a2:dd:b6:e5:3c:3a:d9:b4:2e:55:41:4d:b9:f4:50:2e:07:a8: d7:13:7e:ff:12:72:39:b8:f6:52:ea:b7:26:8d:ee:f0:90:1d: 19:4d:f0:c9:94:a0:ae:10:2a:5e:3d:77:7a:1b:c1:7c:28:ba: 39:72:05:51:c5:b1:58:62:1c:5e:af:bd:bf:2b:0c:62:c3:47: 2e:eb:3b:11:ce:bc:02:eb:e5:a1:5c:4f:69:7f:9b:b7:60:ff: bf:6d:65:99:93:51:20:15:c6:fe:7b:07:93:8d:73:69:4b:16: b5:e3:5d:26:8d:29:7e:cf:2e:83:50:59:21:b2:4e:65:50:fc: 1b:ce:48:80:e0:ca:b9:bf:7b:84:78:14:72:50:de:14:96:45: f1:61:79:00:29:a4:1b:bf:0f:72:a3:e0:06:c9:64:2e:9f:c5: ac:40:23:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjYwOTIzMDUzMDIyWhcNMjYwOTMwMDUzMDIyWjAYMRYwFAYD VQQDEw02YWIzNjNlZS1kNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dHkh48e57JfJLk6+d3FpyDJV45JeGToHW6CRPnzESBv+P1p4yq2b97egRZP 7MpRhsjsbOfSxNJCcRjlreZLmZMZLb1/iD5eXaiCpgdIZ7u7Gi75OfA4GWgMGDED HCPZsPEZIGNaq6jHgHiuCRgxLUD/xukBPsUVgOnfehDg7IvwIh/KKp19LiYmbzB7 yY2jdFwe5qoqG4gBBKUfPMBK5HJwODNUxJkRRJGOBBrTffP7JkMX2d6KXRCg+Mh0 pP8at4dJGWtUwrDbzIc/7haQshLmkSPNoklIilCtubiBUwMelPNt7vpvnZJOs5QT TTL1mnMme+e7dtjqgZD012CUBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIj9O8O Yy3oh6XIWYSxJ+n8GLE8MB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxBkP5VpJG8r8qf19uKzM1zkuwHRfMtpFn1Re2+Fl9gJV9C8KNIi67VU+vx5 RxeeA69oZrKdyQ+ZBjuKn9aUQee1YFcG6giHc+p7Ioc2nDV9qfmJ+5sjn5sdot22 5Tw62bQuVUFNufRQLgeo1xN+/xJyObj2Uuq3Jo3u8JAdGU3wyZSgrhAqXj13ehvB fCi6OXIFUcWxWGIcXq+9vysMYsNHLus7Ec68AuvloVxPaX+bt2D/v21lmZNRIBXG /nsHk41zaUsWteNdJo0pfs8ug1BZIbJOZVD8G85IgODKub97hHgUclDeFJZF8WF5 ACmkG78PcqPgBslkLp/FrEAjhA== -----END CERTIFICATE-----Generated at Thu Sep 24 14:36:49 2026 by rpki-client