$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: qXET76Fm1qYAOTDlhLfeV3Jp+XLvzsrtI4iZGQpDM/U= Subject key identifier: 71:26:67:21:8A:7E:24:F8:CC:9C:F0:5F:AC:4D:55:CE:76:E1:C4:9E Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0D38 Signing time: Sun 20 Sep 2026 18:08:45 +0000 Manifest this update: Sun 20 Sep 2026 18:08:45 +0000 Manifest next update: Sun 27 Sep 2026 18:08:45 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: T15Nl8pOSH1hzU0LI+c+2aETb8toNE+Pg8/NAJMt66o=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: 6i+0csobfxcLhowCrLQuJdS1e1VNTQamZWFCkNPd7So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Sep 20 18:08:45 2026 GMT Not After : Sep 27 18:08:45 2026 GMT Subject: CN=6ab0212d-be3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:00:3b:93:b3:3b:ce:4b:4a:d7:c3:e5:ba: 0b:2b:f7:d5:76:a5:b9:1e:d0:ec:cd:00:43:c0:83: 93:da:87:1e:6f:6d:53:5b:ea:41:bb:10:fe:89:8e: 75:bf:9c:3d:0d:fe:ad:2a:53:dd:ce:82:d1:ab:c4: 66:98:a7:bd:9f:34:f4:8d:d8:7f:c7:8a:5c:f0:92: c0:42:7b:ec:39:0b:db:b8:ef:58:67:61:81:17:ac: 8d:21:09:b4:2e:dc:2e:9b:01:fa:0c:cb:85:98:d2: fa:7d:72:17:d9:69:62:37:3c:63:6c:55:75:43:d5: a1:8c:64:c6:05:98:ec:c3:e3:f7:06:e9:12:f6:92: b4:4f:23:87:53:9f:e1:8b:36:41:85:0c:37:f7:94: 6c:69:15:ed:16:d2:f4:ff:fe:f0:f7:78:dc:22:9c: d9:8d:03:42:07:75:6f:fd:90:7a:a9:33:f5:d4:92: a3:b6:d0:51:09:09:bc:47:2f:8a:ae:c2:08:f2:a3: 7a:61:0e:bb:e3:73:76:c7:74:0e:3e:93:e5:6c:ce: 47:98:29:3b:6a:23:4f:b8:8f:63:5d:f8:47:2b:6a: d1:28:7e:76:0f:87:ab:a5:91:c7:8f:03:17:23:f6: f6:f7:6c:71:c7:39:8f:cc:fc:76:5d:c5:1d:c0:da: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:26:67:21:8A:7E:24:F8:CC:9C:F0:5F:AC:4D:55:CE:76:E1:C4:9E X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7d:6b:6c:ff:a2:21:ea:02:80:40:93:4a:44:1c:92:da:6e: 1e:0e:90:23:cc:20:16:9e:9e:ab:a8:24:2c:a8:48:a6:88:19: e1:84:dc:7b:ba:44:f2:74:c8:97:d4:68:cf:2a:1a:e1:43:e5: c6:7b:14:b3:41:41:37:0f:31:2c:04:dc:5f:ad:08:43:ed:f8: c6:46:96:73:0e:8f:b3:28:8c:2e:ea:d4:54:5b:1d:6b:75:29: 04:b8:ea:af:8e:a4:95:e7:06:56:c2:58:58:b4:43:06:7a:c3: 46:49:33:47:0f:07:cc:4e:98:1d:12:89:c4:b9:5e:bb:00:cc: fe:70:83:5f:dd:f8:0a:96:7e:8b:95:c4:57:1f:d1:40:74:6f: 97:9d:24:15:2c:97:4f:86:4d:d3:e7:43:8a:c0:20:3d:51:60: 22:11:15:6a:12:6a:e2:92:dc:f8:0f:22:a6:b8:9d:8a:e0:b2: 09:8d:ff:d7:ac:dc:9e:20:3c:aa:cb:36:e2:2e:3c:e8:14:06: 98:d0:47:06:80:5a:d2:fb:4b:64:6b:a9:33:1a:b0:74:7a:04: bf:ac:30:b4:f4:36:20:95:a1:04:a4:89:a1:cc:e7:76:9f:41: 90:6a:96:df:a0:09:ef:68:bd:da:57:dd:68:84:1b:31:34:c9: 83:90:32:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjYwOTIwMTgwODQ1WhcNMjYwOTI3MTgwODQ1WjAYMRYwFAYD VQQDEw02YWIwMjEyZC1iZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoU0AO5OzO85LStfD5boLK/fVdqW5HtDszQBDwIOT2oceb21TW+pBuxD+iY51 v5w9Df6tKlPdzoLRq8RmmKe9nzT0jdh/x4pc8JLAQnvsOQvbuO9YZ2GBF6yNIQm0 LtwumwH6DMuFmNL6fXIX2WliNzxjbFV1Q9WhjGTGBZjsw+P3BukS9pK0TyOHU5/h izZBhQw395RsaRXtFtL0//7w93jcIpzZjQNCB3Vv/ZB6qTP11JKjttBRCQm8Ry+K rsII8qN6YQ6743N2x3QOPpPlbM5HmCk7aiNPuI9jXfhHK2rRKH52D4erpZHHjwMX I/b292xxxzmPzPx2XcUdwNp83QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEmZyGK fiT4zJzwX6xNVc524cSeMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO31rbP+iIeoCgECTSkQcktpuHg6QI8wgFp6eq6gkLKhIpogZ4YTce7pE8nTI l9Rozyoa4UPlxnsUs0FBNw8xLATcX60IQ+34xkaWcw6PsyiMLurUVFsda3UpBLjq r46klecGVsJYWLRDBnrDRkkzRw8HzE6YHRKJxLleuwDM/nCDX934CpZ+i5XEVx/R QHRvl50kFSyXT4ZN0+dDisAgPVFgIhEVahJq4pLc+A8ipridiuCyCY3/16zcniA8 qss24i486BQGmNBHBoBa0vtLZGupMxqwdHoEv6wwtPQ2IJWhBKSJoczndp9BkGqW 36AJ72i92lfdaIQbMTTJg5Ay8A== -----END CERTIFICATE-----Generated at Tue Sep 22 14:09:33 2026 by rpki-client