$ rpki-client -vvvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: GN5MOz5RprScOy0Yp/Q/tdI79syNxEqTsaOrxoEb3oU= Subject key identifier: 89:67:FB:7F:9C:BA:68:B1:E5:54:AD:E8:50:4F:F8:10:B7:EF:41:A9 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: 018C Signing time: Tue 29 Sep 2026 04:58:33 +0000 Manifest this update: Tue 29 Sep 2026 04:58:32 +0000 Manifest next update: Tue 06 Oct 2026 04:58:32 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: iZUyiKRgtX/l+N3S83HIa94XZHi8ABodJKTfucswFG4=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: FhlQPzHqzyHEsTCRhj+QxZMQM2lLAuEx3Q/b46+pZ5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 04:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Sep 29 04:58:32 2026 GMT Not After : Oct 6 04:58:32 2026 GMT Subject: CN=6abb4579-bafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:dd:59:7d:69:73:21:90:1e:34:c6:b1:64: 91:24:3e:08:cd:80:33:aa:7d:a7:b6:17:9b:14:fb: 9c:c9:35:32:a0:66:de:b7:68:9c:12:77:93:5d:2c: 82:a5:21:09:fc:10:60:54:48:cc:c2:61:6c:55:63: 99:04:7a:16:3e:17:d7:ac:4d:38:13:97:54:45:d4: 7b:e7:c9:20:95:85:cf:1f:5e:b0:53:75:7f:f0:58: dd:15:c1:63:b6:09:59:9c:80:b4:83:00:38:af:ef: b5:44:37:09:c1:03:1e:f2:64:d0:d1:5e:a2:03:60: 8a:91:1f:bb:7b:22:a3:fc:cc:94:b2:5d:77:fa:be: 10:27:6c:75:31:fd:7c:81:0d:5b:03:33:f5:33:3f: 62:ed:f2:3d:e5:ce:39:b3:9c:3c:21:f1:20:e4:64: 03:b7:80:4e:6d:b2:d5:2d:1f:64:b0:bb:69:38:79: 77:50:ba:7d:4d:21:f8:6e:67:23:81:a7:99:3a:8e: a1:dd:fd:b2:16:70:6c:49:8b:ee:3d:8e:3a:b6:4d: 29:d9:14:c4:d1:36:7a:1d:cf:68:4b:b7:6d:b2:b5: 13:1c:48:98:4e:e5:57:38:e8:4d:18:60:72:d1:d5: 16:80:1c:c1:80:76:96:97:8d:f1:03:12:e1:a7:08: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:67:FB:7F:9C:BA:68:B1:E5:54:AD:E8:50:4F:F8:10:B7:EF:41:A9 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:55:7c:be:73:80:c7:f7:28:53:e6:bb:d5:9f:4e:4a:87:a8: 82:6f:47:c1:e8:89:c1:ab:54:91:f2:54:e9:eb:98:8a:7b:4e: b5:b0:65:b6:1c:e4:d0:72:48:17:bf:d7:b9:f7:16:07:92:39: d3:00:c6:66:7b:41:c6:4c:53:ce:9c:ad:cb:68:05:47:f2:f3: be:f4:6d:78:46:22:06:70:d3:4f:37:72:90:23:83:1c:8d:c0: 80:6a:ae:48:72:dd:77:60:c3:81:54:c7:46:c6:13:e9:27:69: e5:b0:14:aa:b7:64:9c:16:73:61:d8:e2:32:42:d7:c1:9c:ef: 56:2b:67:18:0c:32:cc:41:30:08:03:7f:a6:7b:5b:da:d8:da: 8a:c6:cb:62:a3:e7:7b:9f:50:19:67:98:98:01:2b:0a:ac:9d: 56:74:b9:7e:41:ad:b7:46:51:e2:b6:3b:b7:e9:ca:2a:fb:73: 9e:85:a6:c6:f5:1e:e0:e0:f6:12:13:90:d5:23:d2:b2:c0:df: 60:fd:50:8c:84:71:a4:a2:fb:6a:ac:0c:c7:2d:b7:a2:6a:da: d0:11:ec:2c:96:20:4a:b9:83:26:ee:4e:2f:f8:bc:90:6e:a7: c5:ea:cd:4c:4b:50:96:0e:1a:76:60:cd:15:4d:ea:04:73:d5: 5a:ec:be:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjYwOTI5MDQ1ODMyWhcNMjYxMDA2MDQ1ODMyWjAYMRYwFAYD VQQDEw02YWJiNDU3OS1iYWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLfdWX1pcyGQHjTGsWSRJD4IzYAzqn2nthebFPucyTUyoGbet2icEneTXSyC pSEJ/BBgVEjMwmFsVWOZBHoWPhfXrE04E5dURdR758kglYXPH16wU3V/8FjdFcFj tglZnIC0gwA4r++1RDcJwQMe8mTQ0V6iA2CKkR+7eyKj/MyUsl13+r4QJ2x1Mf18 gQ1bAzP1Mz9i7fI95c45s5w8IfEg5GQDt4BObbLVLR9ksLtpOHl3ULp9TSH4bmcj gaeZOo6h3f2yFnBsSYvuPY46tk0p2RTE0TZ6Hc9oS7dtsrUTHEiYTuVXOOhNGGBy 0dUWgBzBgHaWl43xAxLhpwjwbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIln+3+c umix5VSt6FBP+BC370GpMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL1V8vnOAx/coU+a71Z9OSoeogm9HweiJwatUkfJU6euYintOtbBlthzk0HJI F7/XufcWB5I50wDGZntBxkxTzpyty2gFR/LzvvRteEYiBnDTTzdykCODHI3AgGqu SHLdd2DDgVTHRsYT6Sdp5bAUqrdknBZzYdjiMkLXwZzvVitnGAwyzEEwCAN/pntb 2tjaisbLYqPne59QGWeYmAErCqydVnS5fkGtt0ZR4rY7t+nKKvtznoWmxvUe4OD2 EhOQ1SPSssDfYP1QjIRxpKL7aqwMxy23omra0BHsLJYgSrmDJu5OL/i8kG6nxerN TEtQlg4admDNFU3qBHPVWuy+6A== -----END CERTIFICATE-----Generated at Tue Sep 29 16:46:39 2026 by rpki-client