$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: P8w6/jQBmvMLCx6b3iTMSjdU9mH6FsAPqF4TyYRTx3Y= Subject key identifier: CA:37:4C:3F:FC:FF:D5:F9:DE:22:11:25:BF:8D:CE:DD:9E:0D:92:6A Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1437 Signing time: Tue 22 Sep 2026 16:49:24 +0000 Manifest this update: Tue 22 Sep 2026 16:49:24 +0000 Manifest next update: Tue 29 Sep 2026 16:49:24 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: t6nU8ojN9RW869SeLoMrQSd513wLUWJJqfr5kfjBL+4=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: vzjzm42ih0JuLqajby6+Lr3dFdD3i/kb+bMCNKPWSA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5186 (0x1442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Sep 22 16:49:24 2026 GMT Not After : Sep 29 16:49:24 2026 GMT Subject: CN=6ab2b194-85c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:a7:79:5a:74:93:5d:31:f3:dc:21:db:97: 71:26:c9:05:ae:48:cf:b8:59:dc:93:e0:9d:17:b0: ce:32:1d:62:87:ab:da:d9:72:b2:53:3b:5d:56:71: f0:5e:a7:d4:c4:15:a5:f1:06:a0:26:62:09:ab:99: 4b:ea:36:7c:38:a3:f1:c8:1a:d2:15:11:e6:f7:b5: 47:27:c6:7f:d4:03:08:cd:ea:af:4f:b8:3f:08:e9: e3:f4:8c:6d:13:fb:00:14:7e:75:57:fd:29:32:f2: bf:8b:00:ac:c9:89:85:0b:32:6d:9a:b4:d2:44:c3: 28:d3:79:f6:43:71:f9:40:ab:31:7d:f4:63:be:70: e4:e0:dc:83:fd:4f:52:da:b7:8b:bd:01:1e:6a:92: 96:29:b5:a9:b0:c9:02:a8:e9:3b:ff:a7:92:2d:19: 08:72:9c:3a:f3:5d:78:b7:62:d0:b8:d5:33:8d:2f: 53:df:ef:0b:8a:18:dc:84:3a:3c:2e:99:5f:ce:1a: 22:9b:49:a4:a4:f8:7e:31:51:fa:c7:4e:ba:19:19: 89:8f:43:03:54:98:0e:e8:33:04:b2:a7:6b:40:ad: d6:ee:7f:38:5b:ca:cb:07:e4:7f:03:b4:6c:09:5c: 2d:57:3e:51:26:c3:e3:1d:a5:33:2c:4b:f3:95:e5: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:37:4C:3F:FC:FF:D5:F9:DE:22:11:25:BF:8D:CE:DD:9E:0D:92:6A X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:18:bf:f6:7d:4e:5b:a0:9e:54:dc:34:f2:61:03:54:cf:d2: 5c:0a:d9:34:65:14:1a:e1:66:0f:98:0e:e8:67:57:c5:a5:47: 0e:a5:0b:8b:d8:db:58:fe:a3:1e:69:d5:ee:2c:50:99:f6:47: ac:ac:4c:b3:57:76:fc:49:b0:8e:05:99:ff:e0:65:62:f1:02: 88:c6:0d:65:a9:30:c9:48:0e:79:96:37:20:9b:da:99:63:6b: c2:87:dd:3e:95:ee:ef:5a:b1:5a:47:b1:21:38:6a:0b:21:33: b2:6f:60:7e:2c:57:a7:86:42:78:03:ac:dc:76:d2:2a:eb:d7: 93:d0:3a:f1:a4:b8:d0:56:c6:6f:03:29:45:20:30:51:ac:57: d8:64:19:4f:36:e9:56:ec:55:25:1c:58:16:c1:92:40:1f:07: 33:46:b1:1c:ac:cf:aa:5c:21:e9:82:ed:40:1a:14:39:c9:b2: f5:eb:5d:ac:03:1b:49:1b:e9:ba:41:03:24:85:1a:c1:96:81: bf:b7:df:0d:d0:53:62:a7:bd:5b:98:bc:59:b4:a1:1f:51:40: 8c:10:6e:66:3d:7c:98:a5:aa:fe:be:95:81:41:b1:1a:36:51: 05:24:7f:a0:d9:a1:1d:cc:a0:69:48:42:41:1d:65:b4:71:e5: 8b:2a:5f:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYwOTIyMTY0OTI0WhcNMjYwOTI5MTY0OTI0WjAYMRYwFAYD VQQDEw02YWIyYjE5NC04NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4uneVp0k10x89wh25dxJskFrkjPuFnck+CdF7DOMh1ih6va2XKyUztdVnHw XqfUxBWl8QagJmIJq5lL6jZ8OKPxyBrSFRHm97VHJ8Z/1AMIzeqvT7g/COnj9Ixt E/sAFH51V/0pMvK/iwCsyYmFCzJtmrTSRMMo03n2Q3H5QKsxffRjvnDk4NyD/U9S 2reLvQEeapKWKbWpsMkCqOk7/6eSLRkIcpw68114t2LQuNUzjS9T3+8LihjchDo8 Lplfzhoim0mkpPh+MVH6x066GRmJj0MDVJgO6DMEsqdrQK3W7n84W8rLB+R/A7Rs CVwtVz5RJsPjHaUzLEvzleWzSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMo3TD/8 /9X53iIRJb+Nzt2eDZJqMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAghi/9n1OW6CeVNw08mEDVM/SXArZNGUUGuFmD5gO6GdXxaVHDqULi9jbWP6j HmnV7ixQmfZHrKxMs1d2/EmwjgWZ/+BlYvECiMYNZakwyUgOeZY3IJvamWNrwofd PpXu71qxWkexIThqCyEzsm9gfixXp4ZCeAOs3HbSKuvXk9A68aS40FbGbwMpRSAw UaxX2GQZTzbpVuxVJRxYFsGSQB8HM0axHKzPqlwh6YLtQBoUOcmy9etdrAMbSRvp ukEDJIUawZaBv7ffDdBTYqe9W5i8WbShH1FAjBBuZj18mKWq/r6VgUGxGjZRBSR/ oNmhHcygaUhCQR1ltHHliypfRg== -----END CERTIFICATE-----Generated at Thu Sep 24 04:41:15 2026 by rpki-client