$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: u93DXiezF+vBF6tDAbpGBpU5dzSFLe5+ib+WykdfoIo= Subject key identifier: BD:0D:75:CD:C3:95:C8:D1:5D:E4:50:88:31:96:9B:BB:D9:4B:5E:5C Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 0228 Signing time: Fri 25 Sep 2026 02:54:12 +0000 Manifest this update: Fri 25 Sep 2026 02:54:12 +0000 Manifest next update: Fri 02 Oct 2026 02:54:12 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: 3sak2anxOv62hyosFothLR6ckZMxFeAeUiqgJw4kJXA=) 2: 3DA5441A070611F1ACA42273223D8C67.roa (hash: 5bZH49LJAnGshgObn97HVHbZgrl3zidwMemvnAadtsI=) 3: 06CB0AC26AE011F1AF7EC1267047A888.roa (hash: 91FFd5VQ1GUvnVFlmIU8+Ug11oAeUUwOUC9UDvOOWe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Sep 25 02:54:12 2026 GMT Not After : Oct 2 02:54:12 2026 GMT Subject: CN=6ab5e254-1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:13:24:9f:bf:a0:a4:3e:c7:c5:a0:bb:01: 13:06:77:7d:1c:49:a5:b4:4b:9f:47:74:82:b2:bc: 4f:01:06:29:39:43:d4:14:b4:48:f1:91:c3:fa:ee: d8:0d:0d:b0:bd:e3:04:1d:d3:50:68:4c:2e:ce:88: 84:dc:3f:79:d9:0a:b7:25:a7:ec:5f:54:4e:d6:84: 48:f8:fc:59:0c:f8:cf:f3:d7:71:97:86:80:bb:6f: a3:10:9f:a1:df:2c:9a:20:db:9c:f4:dc:ad:82:b1: 77:bd:ac:45:c9:82:3f:f6:20:94:65:1e:d0:75:9c: 2b:d5:06:c6:f5:d5:58:ab:2e:da:1b:5c:98:5d:89: 85:7a:dd:be:b1:8e:54:79:39:e7:a6:0d:97:9b:03: 82:d4:16:ab:30:a0:18:ec:bb:b8:e9:7d:14:91:4e: c2:c7:aa:04:8d:f2:81:13:1c:8c:c3:68:2f:8e:77: f2:3f:60:a1:3a:15:60:9e:91:13:f3:f9:75:ac:00: cc:b5:4d:9c:aa:68:79:6d:dd:c1:3a:5f:de:b6:b3: 54:ea:b3:b3:6a:7e:4f:76:17:7f:c0:0e:22:2b:34: 23:aa:ce:c0:cd:7f:2f:70:41:53:24:5e:ec:bb:df: 11:85:03:69:5e:f8:18:99:ea:fa:e6:b1:f9:e6:42: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:75:CD:C3:95:C8:D1:5D:E4:50:88:31:96:9B:BB:D9:4B:5E:5C X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:38:aa:9e:61:d3:11:b4:5c:33:44:dc:95:e4:c0:3b:d9: 04:c8:96:80:8f:01:20:b7:5f:5d:dc:18:b3:35:82:1e:59:e4: 48:82:6d:d5:59:38:12:49:51:e9:75:d5:48:83:18:25:4c:18: c1:46:5c:08:b0:b0:fc:3b:42:b6:ac:47:c2:10:af:b2:99:f7: b8:03:81:27:0b:cd:f0:29:4a:26:ac:f2:12:02:96:83:9c:02: 88:c2:bb:b0:85:bf:e4:79:bd:7b:7e:65:63:aa:28:6a:71:3e: 2e:d9:1f:ea:d5:7f:0b:d7:2c:4b:d5:d3:49:0e:e1:01:c6:1d: 38:55:67:69:8b:cb:ae:ba:94:a9:d6:07:06:81:60:2c:e9:d6: 18:dd:00:63:ba:a9:93:a1:64:20:27:e9:10:d8:c4:cb:8a:93: 6f:4c:89:bc:27:47:92:c4:f0:8a:d0:1e:81:99:e9:65:5d:78: 67:a8:6e:1a:7f:68:24:71:86:d5:61:53:55:da:2a:22:ea:5e: 93:b6:58:4b:46:8a:94:43:2c:62:c3:99:b3:0f:eb:53:59:d1: 10:26:33:4c:ba:13:d2:54:76:6a:da:f6:a1:78:07:ec:5b:48: 75:94:b8:3f:b3:52:83:f3:1d:08:4d:c8:50:2c:46:73:0d:b9: 5f:07:b2:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjYwOTI1MDI1NDEyWhcNMjYxMDAyMDI1NDEyWjAYMRYwFAYD VQQDEw02YWI1ZTI1NC0xZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdYTJJ+/oKQ+x8WguwETBnd9HEmltEufR3SCsrxPAQYpOUPUFLRI8ZHD+u7Y DQ2wveMEHdNQaEwuzoiE3D952Qq3JafsX1RO1oRI+PxZDPjP89dxl4aAu2+jEJ+h 3yyaINuc9NytgrF3vaxFyYI/9iCUZR7QdZwr1QbG9dVYqy7aG1yYXYmFet2+sY5U eTnnpg2XmwOC1BarMKAY7Lu46X0UkU7Cx6oEjfKBExyMw2gvjnfyP2ChOhVgnpET 8/l1rADMtU2cqmh5bd3BOl/etrNU6rOzan5Pdhd/wA4iKzQjqs7AzX8vcEFTJF7s u98RhQNpXvgYmer65rH55kJbhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0Ndc3D lcjRXeRQiDGWm7vZS15cMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAipc4qp5h0xG0XDNE3JXkwDvZBMiWgI8BILdfXdwYszWCHlnkSIJt1Vk4EklR 6XXVSIMYJUwYwUZcCLCw/DtCtqxHwhCvspn3uAOBJwvN8ClKJqzyEgKWg5wCiMK7 sIW/5Hm9e35lY6ooanE+Ltkf6tV/C9csS9XTSQ7hAcYdOFVnaYvLrrqUqdYHBoFg LOnWGN0AY7qpk6FkICfpENjEy4qTb0yJvCdHksTwitAegZnpZV14Z6huGn9oJHGG 1WFTVdoqIupek7ZYS0aKlEMsYsOZsw/rU1nRECYzTLoT0lR2atr2oXgH7FtIdZS4 P7NSg/MdCE3IUCxGcw25XweyhQ== -----END CERTIFICATE-----Generated at Sat Sep 26 19:52:30 2026 by rpki-client