$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: 5yLo+5za2W5wPtAaUhQGcofGxZL2m4BDrC7oIOPmvwc= Subject key identifier: C3:18:E7:FB:F4:EE:38:91:E4:F0:2F:E0:65:0C:68:D6:7C:F7:A2:AE Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 025D Signing time: Mon 21 Sep 2026 02:14:52 +0000 Manifest this update: Mon 21 Sep 2026 02:14:52 +0000 Manifest next update: Mon 28 Sep 2026 02:14:52 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: 2x+Un3uNi33uW6gun5Ke+vjLaEC6RbQYPsBGC10ABFA=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 3: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) 4: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Sep 21 02:14:52 2026 GMT Not After : Sep 28 02:14:52 2026 GMT Subject: CN=6ab0931c-2233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:3b:7d:c1:14:46:a9:fc:33:07:89:a2:c9: 79:9c:93:ab:63:4c:9f:ed:c1:40:2e:9c:2e:ef:e1: ca:42:32:0b:bc:88:ad:7d:03:ba:49:fb:49:3f:cc: 0d:93:f2:8b:05:6e:04:3d:22:d6:a4:24:e2:11:d2: 66:fb:e1:8b:cb:db:88:fe:0c:60:ff:71:fc:cd:e0: c6:7d:9d:a4:04:f6:40:ad:ab:e1:72:e4:f4:2a:cf: 9e:44:f2:c1:11:ce:8d:f7:de:fc:85:8d:63:99:9c: 27:aa:64:c5:67:a1:20:dc:5e:5d:a5:87:34:33:a3: 67:71:85:dd:c9:78:cc:ed:2d:01:40:3e:3c:ed:03: c7:05:d7:65:b4:4c:8c:16:47:8b:3a:80:a2:f5:f3: 80:90:44:99:c2:66:c2:6c:a5:cd:95:42:28:1d:84: 3e:88:f2:4e:1a:b3:8c:03:b3:75:2b:76:15:28:72: 05:96:3a:ea:5f:02:3f:5f:57:78:75:ad:30:57:d5: 08:4a:b0:fb:4a:c0:27:ce:e0:b9:79:c5:0b:d9:23: ca:f6:01:98:bc:06:75:8d:41:2e:e9:78:7a:6e:5c: d3:4b:24:39:5d:e2:32:5b:e0:96:4d:20:84:e9:e7: e3:7e:4b:2d:ef:df:39:91:07:23:a6:00:1d:c2:08: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:E7:FB:F4:EE:38:91:E4:F0:2F:E0:65:0C:68:D6:7C:F7:A2:AE X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6d:7f:37:12:83:ed:ae:cc:94:4a:8e:a7:fd:61:08:0d:0c: 12:c1:50:25:0c:03:70:e3:cd:34:40:86:6f:01:75:bc:c0:dc: 48:93:5d:3b:0f:ff:af:d6:0a:42:49:b7:29:f0:3b:e3:51:bd: e4:87:3f:94:f3:98:35:1e:3f:12:18:47:07:c1:5d:f5:a9:a6: 63:7b:30:2d:30:ec:d8:42:1f:92:06:8a:57:7e:1c:f0:10:bc: 03:6e:d2:21:77:e8:be:83:48:4f:9f:c1:45:c2:10:c4:19:58: 23:97:88:7c:19:f7:17:83:a0:ff:aa:05:b0:a5:3e:36:e4:77: 8c:a5:6f:fc:73:aa:83:d3:6d:36:54:d9:55:9d:5a:c1:30:7f: 18:23:59:8f:43:dc:40:90:b6:aa:5b:cd:eb:6d:8f:63:42:25: 49:43:e6:a6:c0:5f:8a:ac:ff:95:10:ca:da:9b:7e:fd:6b:b3: 8b:d8:00:40:14:df:19:95:fa:74:24:91:3a:50:57:21:ec:06: 63:49:42:fb:98:09:65:72:41:26:5d:13:32:0e:49:d5:e7:0a: 91:74:8b:3e:88:68:25:7a:3c:0f:89:4b:93:5f:65:48:66:af: 71:2b:49:f2:d0:bb:2a:64:dc:dc:cd:dc:04:10:7b:35:8e:54: e0:d9:c1:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwOTIxMDIxNDUyWhcNMjYwOTI4MDIxNDUyWjAYMRYwFAYD VQQDEw02YWIwOTMxYy0yMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9o7fcEURqn8MweJosl5nJOrY0yf7cFALpwu7+HKQjILvIitfQO6SftJP8wN k/KLBW4EPSLWpCTiEdJm++GLy9uI/gxg/3H8zeDGfZ2kBPZAravhcuT0Ks+eRPLB Ec6N9978hY1jmZwnqmTFZ6Eg3F5dpYc0M6NncYXdyXjM7S0BQD487QPHBddltEyM FkeLOoCi9fOAkESZwmbCbKXNlUIoHYQ+iPJOGrOMA7N1K3YVKHIFljrqXwI/X1d4 da0wV9UISrD7SsAnzuC5ecUL2SPK9gGYvAZ1jUEu6Xh6blzTSyQ5XeIyW+CWTSCE 6efjfkst7985kQcjpgAdwggZkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMY5/v0 7jiR5PAv4GUMaNZ896KuMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPm1/NxKD7a7MlEqOp/1hCA0MEsFQJQwDcOPNNECGbwF1vMDcSJNdOw//r9YK Qkm3KfA741G95Ic/lPOYNR4/EhhHB8Fd9ammY3swLTDs2EIfkgaKV34c8BC8A27S IXfovoNIT5/BRcIQxBlYI5eIfBn3F4Og/6oFsKU+NuR3jKVv/HOqg9NtNlTZVZ1a wTB/GCNZj0PcQJC2qlvN622PY0IlSUPmpsBfiqz/lRDK2pt+/Wuzi9gAQBTfGZX6 dCSROlBXIewGY0lC+5gJZXJBJl0TMg5J1ecKkXSLPohoJXo8D4lLk19lSGavcStJ 8tC7KmTc3M3cBBB7NY5U4NnBjA== -----END CERTIFICATE-----Generated at Mon Sep 21 09:12:57 2026 by rpki-client