$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json) Hash identifier: XT4RvrNEuDQqodwNdoU2fAEkuRlb08DW0fAK1ojVR40= Subject key identifier: F4:5D:78:A5:C5:8C:97:94:14:AF:52:AA:40:B1:F5:80:77:84:20:03 Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft Manifest number: E2 Signing time: Mon 21 Sep 2026 06:32:50 +0000 Manifest this update: Mon 21 Sep 2026 06:32:49 +0000 Manifest next update: Mon 28 Sep 2026 06:32:49 +0000 Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: RdSCi/OyXRXi4CjJfjTtBUIq1tTSElmJUmbAttg1EJ4=) 2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: y+sTsz0tA3g3DzsQDXuqpBvyUzmJcH4SyCIepVtJQs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: Sep 21 06:32:49 2026 GMT Not After : Sep 28 06:32:49 2026 GMT Subject: CN=6ab0cf91-15c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:21:c3:d1:57:93:34:3f:b2:9a:3b:54:11: 61:da:9a:12:e1:d9:a0:9b:34:6a:05:94:3d:2e:c1: bc:74:bf:89:72:b2:7d:9d:7d:ad:f1:f5:db:39:7c: a6:62:ef:d9:9f:d8:91:b4:07:be:1a:ff:1b:48:b7: d3:6a:7b:4d:ab:a6:ec:e0:a5:ca:a4:7c:0c:c3:61: 6f:b7:c3:f5:80:b6:97:1f:a0:68:6f:99:c8:9c:26: ce:5d:4d:8a:9c:76:6c:37:f7:bf:f6:4b:f6:5a:82: 36:03:df:e6:1c:5f:02:fa:12:84:5e:b4:91:87:78: 95:c2:51:15:9e:da:27:a7:a3:69:15:4a:ef:c4:d8: 6a:31:51:88:14:68:eb:7d:0f:95:d3:33:da:77:87: 42:66:52:5b:44:06:88:83:c8:2f:75:92:43:d1:b7: 1e:3c:25:d4:2a:dd:76:2f:f7:7e:10:87:40:b3:19: 66:bc:06:0e:4a:b3:98:2e:99:8c:d3:4e:cc:9d:43: 64:1a:b7:3d:b1:79:57:56:42:4f:59:5a:46:c8:22: 80:d0:8e:17:01:81:be:72:c8:9d:5f:d8:d1:cb:43: fe:ba:02:27:94:ad:32:1b:99:8f:7d:b9:1c:8a:3a: a7:1c:cf:05:e4:f4:ee:ba:0f:e8:66:34:c2:79:d8: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5D:78:A5:C5:8C:97:94:14:AF:52:AA:40:B1:F5:80:77:84:20:03 X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b5:54:c5:c2:c8:b7:cd:c4:84:db:ab:24:57:31:5e:a9:bf: 31:66:a1:f1:22:ba:f3:18:8d:e7:b5:2a:de:3a:a9:9d:35:4a: ca:3d:18:1b:8e:a4:e3:e3:77:6d:34:dc:8d:7a:f6:c0:ad:f9: b6:50:0f:c6:e3:98:43:6a:d2:56:03:36:42:26:9a:28:43:47: ca:0e:fe:d7:36:81:94:02:38:2a:ec:a4:8b:2a:b6:68:b8:cf: 20:a0:07:e5:cd:13:3d:e8:1e:89:a1:0e:62:94:76:18:47:38: ca:70:ab:81:2f:b5:13:14:07:f7:70:4e:5a:70:4a:44:c3:ad: f5:cf:b7:76:8f:ac:9d:ea:25:e8:46:c2:4c:38:15:4d:e6:f3: 79:d2:d7:82:51:88:f6:7a:28:9c:11:f8:85:4b:9f:a4:f4:83: 20:6d:7a:a1:0d:a6:e3:7c:b7:5d:b7:3c:34:e4:6d:92:7a:a9: 0a:77:82:1f:12:dd:22:cc:85:21:9f:43:bb:1e:04:ed:ea:32: 01:c1:7d:7c:95:11:61:64:4e:67:a0:bd:52:11:e3:d4:a5:c4: 54:94:77:4a:d6:c1:c3:40:aa:c3:bc:64:9c:cd:61:f6:c9:bf: 94:1a:e7:6a:b6:00:87:45:28:c8:da:52:a9:18:ee:33:a7:2d: 1e:d8:29:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQzRjIxMTAvBgNVBAUTKDU1Nzg5QTM0MTZFN0VGNTE1Q0UwOEYwNUEzNkYxREVE ODM0NDRDMDkwHhcNMjYwOTIxMDYzMjQ5WhcNMjYwOTI4MDYzMjQ5WjAYMRYwFAYD VQQDEw02YWIwY2Y5MS0xNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKQhw9FXkzQ/spo7VBFh2poS4dmgmzRqBZQ9LsG8dL+JcrJ9nX2t8fXbOXym Yu/Zn9iRtAe+Gv8bSLfTantNq6bs4KXKpHwMw2Fvt8P1gLaXH6Bob5nInCbOXU2K nHZsN/e/9kv2WoI2A9/mHF8C+hKEXrSRh3iVwlEVntonp6NpFUrvxNhqMVGIFGjr fQ+V0zPad4dCZlJbRAaIg8gvdZJD0bcePCXUKt12L/d+EIdAsxlmvAYOSrOYLpmM 007MnUNkGrc9sXlXVkJPWVpGyCKA0I4XAYG+csidX9jRy0P+ugInlK0yG5mPfbkc ijqnHM8F5PTuug/oZjTCedgMcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRdeKXF jJeUFK9SqkCx9YB3hCADMB8GA1UdIwQYMBaAFFV4mjQW5+9RXOCPBaNvHe2DREwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80MTgwNTA5NDYw QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcxRmM0SThGbzI4ZDdZTkVU QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDNGMi80MTgwNTA5NDYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcx RmM0SThGbzI4ZDdZTkVUQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV7VUxcLIt83EhNurJFcxXqm/MWah8SK68xiN57Uq3jqpnTVKyj0YG46k4+N3 bTTcjXr2wK35tlAPxuOYQ2rSVgM2QiaaKENHyg7+1zaBlAI4Kuykiyq2aLjPIKAH 5c0TPegeiaEOYpR2GEc4ynCrgS+1ExQH93BOWnBKRMOt9c+3do+sneol6EbCTDgV TebzedLXglGI9noonBH4hUufpPSDIG16oQ2m43y3Xbc8NORtknqpCneCHxLdIsyF IZ9Dux4E7eoyAcF9fJURYWROZ6C9UhHj1KXEVJR3StbBw0Cqw7xknM1h9sm/lBrn arYAh0UoyNpSqRjuM6ctHtgpPw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:46:11 2026 by rpki-client