$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: AvKcc5WX8NTvPz4iNHBFV3u71E49RKlcMyGv6+R6alI= Subject key identifier: 13:E6:ED:78:A7:C8:DA:9F:AF:94:A9:12:1A:E8:03:27:70:4B:A7:41 Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 0138 Signing time: Sun 27 Sep 2026 06:10:20 +0000 Manifest this update: Sun 27 Sep 2026 06:10:20 +0000 Manifest next update: Sun 04 Oct 2026 06:10:20 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: KlyLV477bNGhs6/1paWhuwIA1yXQM+V/dxN2U/OObKc=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Sep 27 06:10:20 2026 GMT Not After : Oct 4 06:10:20 2026 GMT Subject: CN=6ab8b34c-c68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:b3:75:36:3e:71:f3:3f:b1:6a:10:45:7e: 78:5c:41:48:e2:93:dc:28:2f:8e:e9:0f:2e:bd:b3: 75:14:ea:2f:9e:81:0a:c0:69:5c:da:22:cf:85:71: ca:a7:6b:1f:a7:15:d5:c5:1d:28:89:fc:43:e0:95: fb:33:09:87:1a:b3:22:d3:d2:47:19:b1:65:db:e4: ba:78:ba:cb:59:f0:8d:9c:56:c2:c0:2e:ac:d4:15: cd:d0:d6:52:6c:20:cc:65:9f:ba:c5:b7:31:47:fb: 1f:58:84:dd:98:df:43:ae:5e:9f:50:7c:ba:90:3d: 25:d8:1b:8a:2d:57:3c:07:80:07:1d:3f:19:8d:ed: d4:56:8d:75:b1:b9:e0:4e:70:6f:e0:60:12:2b:c3: bc:77:82:86:01:bf:87:d7:88:31:87:c2:a4:44:b3: 1c:6e:d9:34:5c:ba:82:93:1e:a9:c1:c3:2f:1e:f9: 67:97:4c:cf:0d:90:21:1d:2f:fd:dc:24:4f:9d:6f: 92:34:42:0e:77:b6:75:ea:9a:b6:37:ea:c9:c0:2b: 2d:05:7d:9d:d1:17:f9:f6:f5:6c:77:0a:26:88:d7: 04:31:f9:be:ae:a9:36:f3:59:11:de:dc:4e:5b:e9: 6d:2e:af:34:87:f3:d8:dc:d2:3d:fb:0b:bf:f3:75: 53:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E6:ED:78:A7:C8:DA:9F:AF:94:A9:12:1A:E8:03:27:70:4B:A7:41 X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:eb:05:03:ea:a4:11:18:7f:73:18:3c:c5:70:39:8f:1b:b5: 7a:6b:47:ac:a6:17:6d:58:87:d0:ec:c4:91:45:44:31:8b:ba: ab:d0:5d:e9:e6:65:7d:c3:5d:a7:6e:89:7c:1a:77:91:88:a7: 4b:1f:b8:a1:58:40:b4:87:09:67:58:60:20:0d:58:93:39:56: 6b:fb:0d:3c:28:78:44:21:5e:7e:bb:c4:0c:52:f6:13:aa:77: 4a:0b:07:4b:04:07:33:68:60:6f:94:d1:b6:96:97:65:c9:5e: 57:9a:27:6b:ab:f4:e9:02:e5:07:ad:9d:0b:59:15:10:44:ba: 37:b1:b0:e4:41:e5:d8:91:0a:6e:2a:a1:54:e2:0b:58:f5:a3: 8e:50:9a:9e:87:53:97:48:fa:b8:38:51:00:8c:8c:d1:1f:72: 35:1a:f2:69:52:71:b5:c0:2b:5c:94:29:81:e1:4e:cf:c1:82: 3a:52:7b:b9:53:7d:38:07:af:3c:32:a8:dc:74:2b:2d:41:78: 9b:58:0d:5e:1e:dc:06:ea:4a:62:72:24:c9:65:b5:c0:46:dc: 9a:64:c3:df:f1:a0:bd:52:ec:f6:3b:c5:ee:c7:e1:7f:c5:5c: cf:f2:b4:11:b0:ad:1a:25:29:5f:55:f4:69:65:c4:2f:a6:40: 7f:1e:66:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjYwOTI3MDYxMDIwWhcNMjYxMDA0MDYxMDIwWjAYMRYwFAYD VQQDEw02YWI4YjM0Yy1jNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAicSzdTY+cfM/sWoQRX54XEFI4pPcKC+O6Q8uvbN1FOovnoEKwGlc2iLPhXHK p2sfpxXVxR0oifxD4JX7MwmHGrMi09JHGbFl2+S6eLrLWfCNnFbCwC6s1BXN0NZS bCDMZZ+6xbcxR/sfWITdmN9Drl6fUHy6kD0l2BuKLVc8B4AHHT8Zje3UVo11sbng TnBv4GASK8O8d4KGAb+H14gxh8KkRLMcbtk0XLqCkx6pwcMvHvlnl0zPDZAhHS/9 3CRPnW+SNEIOd7Z16pq2N+rJwCstBX2d0Rf59vVsdwomiNcEMfm+rqk281kR3txO W+ltLq80h/PY3NI9+wu/83VTfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPm7Xin yNqfr5SpEhroAydwS6dBMB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo+sFA+qkERh/cxg8xXA5jxu1emtHrKYXbViH0OzEkUVEMYu6q9Bd6eZlfcNd p26JfBp3kYinSx+4oVhAtIcJZ1hgIA1YkzlWa/sNPCh4RCFefrvEDFL2E6p3SgsH SwQHM2hgb5TRtpaXZcleV5ona6v06QLlB62dC1kVEES6N7Gw5EHl2JEKbiqhVOIL WPWjjlCanodTl0j6uDhRAIyM0R9yNRryaVJxtcArXJQpgeFOz8GCOlJ7uVN9OAev PDKo3HQrLUF4m1gNXh7cBupKYnIkyWW1wEbcmmTD3/GgvVLs9jvF7sfhf8Vcz/K0 EbCtGiUpX1X0aWXEL6ZAfx5mNw== -----END CERTIFICATE-----Generated at Sun Sep 27 12:40:10 2026 by rpki-client