$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json) Hash identifier: Dn6TIH+KSMkHuQsCqXDndfYPnt8GpCkv/kWm/DiTTA8= Subject key identifier: 57:7B:CD:4A:B6:02:B4:16:4D:03:0A:AB:32:9A:B2:2A:17:01:5B:98 Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4 Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft Manifest number: 4C Signing time: Mon 21 Sep 2026 08:20:58 +0000 Manifest this update: Mon 21 Sep 2026 08:20:57 +0000 Manifest next update: Mon 28 Sep 2026 08:20:57 +0000 Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: jLHZrl32kah4rjFzvH1oKYVpmPizw/b8vOPT5iRcH5c=) 2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4 Validity Not Before: Sep 21 08:20:57 2026 GMT Not After : Sep 28 08:20:57 2026 GMT Subject: CN=6ab0e8e9-7ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:a3:24:f1:e5:9e:de:2b:a1:84:92:86:b2: a3:00:de:f1:79:88:8f:eb:7c:f8:82:dd:15:9b:66: 33:52:a4:70:b7:6a:cf:8b:25:d4:62:b6:7b:50:28: 0d:0e:67:85:36:2f:c0:96:e8:6f:da:f8:d3:71:78: c9:65:4a:87:3c:74:30:9f:70:5e:ca:35:4c:17:53: f8:32:ad:15:4c:e2:73:7b:3e:46:2a:13:0c:a7:ff: f0:9c:ff:22:e7:1f:ea:36:9b:03:bf:ac:8e:08:e0: 66:53:cf:a7:76:61:38:f5:f7:fe:b7:5b:66:3f:b6: e4:c5:bb:c4:f2:12:b3:6c:b0:74:cb:1e:8f:79:bb: d2:2a:40:a6:19:3e:54:a4:e0:2c:32:37:85:3e:fa: 46:d7:5b:23:e8:c1:a8:79:4c:ec:ac:58:e9:52:ee: 12:59:52:4b:cb:6a:59:ee:b6:8a:3a:fc:a2:00:c5: 4d:f1:e6:e3:ca:53:33:a0:a1:4f:74:1e:19:70:45: 98:f4:64:3e:d7:29:62:b3:1f:76:cf:f7:0f:9c:68: e7:6d:5d:1b:5c:18:f3:7e:d5:69:28:3a:6a:c3:5c: 09:6a:0e:0a:53:1c:5b:0d:a5:f9:56:a6:f3:72:94: dd:57:37:2e:47:ed:14:d7:e8:aa:1c:92:16:60:5c: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7B:CD:4A:B6:02:B4:16:4D:03:0A:AB:32:9A:B2:2A:17:01:5B:98 X509v3 Authority Key Identifier: keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:ec:d0:91:c5:65:96:70:b1:90:0b:70:ae:d7:ce:32:38:df: 33:38:56:48:63:26:ea:10:75:c6:f0:5f:df:54:6f:b2:ce:77: 74:37:2e:5a:96:e5:9c:1b:c5:e9:e2:25:85:22:1c:93:15:11: d4:d8:04:55:cb:04:6b:8c:64:32:43:90:d3:91:45:89:c2:93: 82:5d:7b:e8:fe:7c:dc:b8:77:1d:02:ff:49:49:e0:dd:45:23: 45:f2:78:fb:83:c3:3f:34:f0:cf:5d:87:68:d7:7f:a7:53:d6: 6f:33:93:11:df:4d:5c:90:fd:04:84:b5:9d:dc:cd:8c:fe:f5: 7b:db:19:2b:8a:aa:e1:e3:cb:b5:7d:e4:7e:7f:f1:8a:3e:f9: d4:d3:e0:13:e3:76:69:65:25:f4:ed:e2:50:25:a2:ad:06:02: 83:ff:79:73:83:47:06:58:26:ca:07:ff:db:d7:95:57:26:1d: cc:9e:a3:a6:92:59:28:20:e4:99:59:4d:36:68:4f:12:6a:cc: 69:ab:ac:5f:75:1c:33:3d:01:cc:21:c9:44:97:ac:bb:97:ba: 51:8c:22:1a:ee:77:ed:23:af:03:c3:5b:1f:25:74:6c:49:95: 60:2a:25:21:6f:89:c8:a1:5b:a9:b9:28:76:60:6a:8c:6c:ce: da:94:cd:57 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjdENzExMC8GA1UEBRMoQkQwRkIyRkFEODcxMjI4MzlBNzM4QzQ5NDE5Mzc5MDdF QTVDM0ZENDAeFw0yNjA5MjEwODIwNTdaFw0yNjA5MjgwODIwNTdaMBgxFjAUBgNV BAMTDTZhYjBlOGU5LTdlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9oKMk8eWe3iuhhJKGsqMA3vF5iI/rfPiC3RWbZjNSpHC3as+LJdRitntQKA0O Z4U2L8CW6G/a+NNxeMllSoc8dDCfcF7KNUwXU/gyrRVM4nN7PkYqEwyn//Cc/yLn H+o2mwO/rI4I4GZTz6d2YTj19/63W2Y/tuTFu8TyErNssHTLHo95u9IqQKYZPlSk 4CwyN4U++kbXWyPowah5TOysWOlS7hJZUkvLalnutoo6/KIAxU3x5uPKUzOgoU90 HhlwRZj0ZD7XKWKzH3bP9w+caOdtXRtcGPN+1WkoOmrDXAlqDgpTHFsNpflWpvNy lN1XNy5H7RTX6KockhZgXI+bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUV3vNSrYC tBZNAwqrMpqyKhcBW5gwHwYDVR0jBBgwFoAUvQ+y+thxIoOac4xJQZN5B+pcP9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGN0Q3LzgyMEUyQzc0NDQ2 QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9PYWM0eEpRWk41Qi1wY1A5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvdlEteS10aHhJb09hYzR4SlFaTjVCLXBjUDlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG N0Q3LzgyMEUyQzc0NDQ2QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9P YWM0eEpRWk41Qi1wY1A5US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDs7NCRxWWWcLGQC3Cu184yON8zOFZIYybqEHXG8F/fVG+yznd0Ny5aluWcG8Xp 4iWFIhyTFRHU2ARVywRrjGQyQ5DTkUWJwpOCXXvo/nzcuHcdAv9JSeDdRSNF8nj7 g8M/NPDPXYdo13+nU9ZvM5MR301ckP0EhLWd3M2M/vV72xkriqrh48u1feR+f/GK PvnU0+AT43ZpZSX07eJQJaKtBgKD/3lzg0cGWCbKB//b15VXJh3MnqOmklkoIOSZ WU02aE8Sasxpq6xfdRwzPQHMIclEl6y7l7pRjCIa7nftI68Dw1sfJXRsSZVgKiUh b4nIoVupuSh2YGqMbM7alM1X -----END CERTIFICATE-----Generated at Tue Sep 22 18:00:04 2026 by rpki-client