$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft File: vYWifqA3zhvaSwsh9PBA2bHT53g.mft (raw, json) Hash identifier: nF1mbFZSXBg8YjQXTPfFkPs0ouj6JryERELM5TOkXvA= Subject key identifier: 00:11:91:68:BC:D9:E1:FE:91:FE:25:D6:9E:F9:C5:D8:8A:9F:AF:DD Authority key identifier: BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78 Certificate issuer: /CN=A91FCA43/serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft Manifest number: 18 Signing time: Mon 21 Sep 2026 09:06:31 +0000 Manifest this update: Mon 21 Sep 2026 09:06:31 +0000 Manifest next update: Mon 28 Sep 2026 09:06:31 +0000 Files and hashes: 1: vYWifqA3zhvaSwsh9PBA2bHT53g.crl (hash: 8gXCuOK+27hkXFpzpn5iM0w33o6NQWlAysSoVT5Bytc=) 2: m0_tJMWIkob__qWztDFwuI7BAqU.asa (hash: l1AjCWVrvXraVZ9Z8MnHg0my36XZ8gwtH5FBbkfxpK8=) 3: BF0C3468A27A11F1846886F86811F970.roa (hash: HiBw6l9Sxo7Rrs0kPz6lX0/bPt6FCdr2birEHDIBD+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA43, serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778 Validity Not Before: Sep 21 09:06:31 2026 GMT Not After : Sep 28 09:06:31 2026 GMT Subject: CN=6ab0f397-32aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:10:29:8a:ee:04:9e:52:95:56:df:29:20: 01:e9:fd:b7:f5:b8:4b:f4:3e:c0:1c:61:48:cd:f2: 6b:05:e2:f3:05:24:4f:31:2d:2c:9a:f8:4d:52:1f: 85:23:33:8e:cd:59:b2:90:8f:da:68:76:eb:79:24: 75:a0:51:3c:a8:a8:3b:00:78:be:ae:36:b4:fb:3d: 4a:09:5c:2d:82:d4:fb:e5:2e:36:0e:25:88:97:5e: d1:f4:8c:d2:c1:5b:df:ab:bb:c6:24:bd:87:00:93: b7:78:93:89:ab:3b:92:d5:4d:48:ff:b7:0d:1c:5b: 96:3c:8b:c7:e5:1b:15:04:71:44:6d:38:cc:72:55: 16:d0:f9:c1:ae:07:87:8f:2c:ae:5f:45:d8:43:c8: c9:a1:be:fc:b9:34:f9:e0:9d:78:07:14:38:87:5c: bb:33:39:a8:e5:05:91:75:7c:3d:dc:81:36:4f:75: 74:bf:a8:ec:97:6f:e8:01:5e:03:48:0e:58:44:c4: 7d:61:8f:da:8e:8e:2d:72:4b:03:42:6b:13:6c:5f: b8:30:c9:f0:68:94:e0:b9:ee:75:0f:09:1c:58:a6: 74:23:62:5d:e3:70:1d:2f:ca:fa:9b:37:71:03:af: 44:10:07:f2:da:3b:0f:bb:cd:75:a8:47:ad:fc:75: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:91:68:BC:D9:E1:FE:91:FE:25:D6:9E:F9:C5:D8:8A:9F:AF:DD X509v3 Authority Key Identifier: keyid:BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c5:ce:e9:b5:86:79:ce:3a:36:5f:4a:ee:6b:27:e1:b8:92: 48:ea:77:92:0b:3a:4c:d8:fd:ef:ba:df:58:da:c0:77:f0:f9: e2:00:5f:be:0b:17:17:5d:e4:b4:f5:ba:ee:46:60:f0:cc:fa: 4a:72:31:db:ff:0a:e3:18:cc:4c:55:28:01:10:8e:e0:6b:36: 86:6d:95:6e:79:0d:a8:22:4f:bb:46:de:a4:9c:cd:1a:91:ee: 97:f2:99:87:c9:a2:8a:10:a7:9b:5f:f3:b0:53:cf:5c:e1:00: 46:de:8f:a2:0b:31:98:2a:2e:f0:1a:e9:4f:a8:f4:75:d6:2e: df:69:24:e3:9f:13:9b:44:d6:32:a4:7c:a1:75:20:91:04:3b: 92:55:14:23:6b:6c:3d:25:6d:5c:f8:d9:d5:3f:c7:76:90:2c: 73:b2:b5:55:ab:3e:2a:8e:6a:15:bf:7a:39:ea:d0:09:50:94: b3:98:19:16:c6:c4:db:61:0e:a1:62:e9:8d:a1:57:17:12:92: dc:b7:67:2f:6d:f1:c8:c8:ca:ac:f5:7e:26:3b:25:1a:a2:5b: 19:de:88:7d:66:7f:d9:ea:1b:1d:7b:74:12:df:88:53:5f:a7: 47:6b:40:71:0f:99:17:fd:0e:d2:70:09:00:d3:81:fa:a4:93: da:d5:e2:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0E0MzExMC8GA1UEBRMoQkQ4NUEyN0VBMDM3Q0UxQkRBNEIwQjIxRjRGMDQwRDlC MUQzRTc3ODAeFw0yNjA5MjEwOTA2MzFaFw0yNjA5MjgwOTA2MzFaMBgxFjAUBgNV BAMTDTZhYjBmMzk3LTMyYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqihApiu4EnlKVVt8pIAHp/bf1uEv0PsAcYUjN8msF4vMFJE8xLSya+E1SH4Uj M47NWbKQj9podut5JHWgUTyoqDsAeL6uNrT7PUoJXC2C1PvlLjYOJYiXXtH0jNLB W9+ru8YkvYcAk7d4k4mrO5LVTUj/tw0cW5Y8i8flGxUEcURtOMxyVRbQ+cGuB4eP LK5fRdhDyMmhvvy5NPngnXgHFDiHXLszOajlBZF1fD3cgTZPdXS/qOyXb+gBXgNI DlhExH1hj9qOji1ySwNCaxNsX7gwyfBolOC57nUPCRxYpnQjYl3jcB0vyvqbN3ED r0QQB/LaOw+7zXWoR638dZJ7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUABGRaLzZ 4f6R/iXWnvnF2Iqfr90wHwYDVR0jBBgwFoAUvYWifqA3zhvaSwsh9PBA2bHT53gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQzLzI5NEI5NkRBQTIw NzExRjFBMjI2Qjc2NTQ2MTFGOTcwL3ZZV2lmcUEzemh2YVN3c2g5UEJBMmJIVDUz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdllXaWZxQTN6aHZhU3dzaDlQQkEyYkhUNTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTQzLzI5NEI5NkRBQTIwNzExRjFBMjI2Qjc2NTQ2MTFGOTcwL3ZZV2lmcUEzemh2 YVN3c2g5UEJBMmJIVDUzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfxc7ptYZ5zjo2X0ruayfhuJJI6neSCzpM2P3vut9Y2sB38PniAF++CxcXXeS0 9bruRmDwzPpKcjHb/wrjGMxMVSgBEI7gazaGbZVueQ2oIk+7Rt6knM0ake6X8pmH yaKKEKebX/OwU89c4QBG3o+iCzGYKi7wGulPqPR11i7faSTjnxObRNYypHyhdSCR BDuSVRQja2w9JW1c+NnVP8d2kCxzsrVVqz4qjmoVv3o56tAJUJSzmBkWxsTbYQ6h YumNoVcXEpLct2cvbfHIyMqs9X4mOyUaolsZ3oh9Zn/Z6hsde3QS34hTX6dHa0Bx D5kX/Q7ScAkA04H6pJPa1eKa -----END CERTIFICATE-----Generated at Tue Sep 22 15:12:37 2026 by rpki-client