$ rpki-client -vvvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: 5iAbPdZzMI0Hlz7WKpZPIYla+a/9eX1baHeaCojmGzQ= Subject key identifier: 1D:63:FF:D7:C2:CC:12:BF:CA:FA:B4:51:6F:22:0F:0A:DE:AB:FE:F9 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0CDE Signing time: Thu 10 Sep 2026 18:25:55 +0000 Manifest this update: Thu 10 Sep 2026 18:25:54 +0000 Manifest next update: Thu 17 Sep 2026 18:25:54 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: bp1g7Mj3Y0UqNxB/I5ferM6DPFXB5W3yNUNE/34t65Y=) 2: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=) 3: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Sep 10 18:25:54 2026 GMT Not After : Sep 17 18:25:54 2026 GMT Subject: CN=6aa2f633-01b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:92:9f:30:6f:84:86:99:7c:ed:a4:51:5a: 41:7d:e4:cc:17:79:08:1f:9f:bc:50:2d:31:03:d3: fc:3f:d2:72:74:41:59:dc:d5:72:8d:ec:2f:60:25: 1f:27:71:50:84:64:67:c2:53:55:dd:2d:8d:46:b3: 14:66:ab:bd:a8:34:26:60:8f:fa:83:6e:1c:1a:7b: 29:3a:4f:3d:82:9d:88:d4:26:95:f9:b9:ac:b2:56: bf:34:27:e6:52:52:5e:a0:b5:9f:06:9f:09:c0:56: 52:48:ab:16:a7:27:08:f3:33:2e:90:42:17:e4:b5: 34:27:0c:e8:59:5c:8c:e9:2b:e3:7a:36:83:10:a1: 01:61:06:a5:69:ef:07:96:8e:7e:75:9e:18:3c:e0: 28:90:c4:75:5b:ba:b0:4b:78:9b:6a:df:37:fd:dd: bb:e7:11:79:c3:f5:04:56:c7:8e:f7:33:4f:8d:79: 69:1f:3f:01:97:eb:b3:9b:f8:2b:03:35:18:71:57: 3c:69:a7:c6:d0:f7:f0:f5:3d:32:d7:5b:d9:2b:94: 17:b3:8f:8b:c9:eb:0d:d1:76:36:84:3d:71:fc:ea: e1:1c:30:22:5b:e3:03:1f:05:5c:1e:79:b4:79:69: e1:97:c6:79:cc:4f:2b:4f:63:3f:7c:81:57:c2:86: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:63:FF:D7:C2:CC:12:BF:CA:FA:B4:51:6F:22:0F:0A:DE:AB:FE:F9 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:13:d8:2b:d1:95:60:c8:58:31:12:5b:92:51:d6:8e:85: e8:82:f5:66:ee:84:b0:02:8a:38:23:79:7b:e0:49:7b:7f:67: dd:3b:d0:75:2c:99:3a:4b:a3:75:f4:05:ed:b8:7f:ed:19:8a: e9:36:4e:a9:64:de:e9:8e:c6:a0:1c:ae:5c:ca:03:fc:cd:5d: 6c:4a:21:a4:d3:87:b9:8d:34:00:9f:13:d6:3d:7f:fd:a9:7c: ef:55:ec:8a:c5:c7:04:1c:43:2c:be:94:da:f8:57:97:9e:06: 40:c5:63:d4:ab:1d:9b:26:29:32:be:c9:7c:5d:89:b6:e4:05: 49:67:ca:8f:2a:72:fa:ad:cd:fb:56:05:48:c2:02:e1:72:7f: 1f:8b:c8:75:2e:d0:dc:6f:80:21:d3:8a:f7:f6:3b:e5:dc:c5: da:7b:59:0c:c2:29:fc:f3:fb:d7:42:4a:ef:e1:85:0b:77:b2: e8:4e:f8:ae:f3:11:81:29:6e:b3:ec:9a:f0:23:7b:1e:a5:f5: 46:77:17:bc:75:d7:52:c7:c2:7d:62:86:a3:94:44:24:fb:30: 5c:83:f1:11:ba:44:ee:ff:fb:63:42:db:c3:84:4c:c4:c3:ec: ec:e1:96:71:4f:61:9c:45:c7:e6:5c:07:5b:a0:99:f2:63:38: 44:16:27:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjYwOTEwMTgyNTU0WhcNMjYwOTE3MTgyNTU0WjAYMRYwFAYD VQQDEw02YWEyZjYzMy0wMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1KSnzBvhIaZfO2kUVpBfeTMF3kIH5+8UC0xA9P8P9JydEFZ3NVyjewvYCUf J3FQhGRnwlNV3S2NRrMUZqu9qDQmYI/6g24cGnspOk89gp2I1CaV+bmssla/NCfm UlJeoLWfBp8JwFZSSKsWpycI8zMukEIX5LU0JwzoWVyM6SvjejaDEKEBYQalae8H lo5+dZ4YPOAokMR1W7qwS3ibat83/d275xF5w/UEVseO9zNPjXlpHz8Bl+uzm/gr AzUYcVc8aafG0Pfw9T0y11vZK5QXs4+LyesN0XY2hD1x/OrhHDAiW+MDHwVcHnm0 eWnhl8Z5zE8rT2M/fIFXwoY3NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1j/9fC zBK/yvq0UW8iDwreq/75MB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIg0T2CvRlWDIWDESW5JR1o6F6IL1Zu6EsAKKOCN5e+BJe39n3TvQdSyZOkuj dfQF7bh/7RmK6TZOqWTe6Y7GoByuXMoD/M1dbEohpNOHuY00AJ8T1j1//al871Xs isXHBBxDLL6U2vhXl54GQMVj1KsdmyYpMr7JfF2JtuQFSWfKjypy+q3N+1YFSMIC 4XJ/H4vIdS7Q3G+AIdOK9/Y75dzF2ntZDMIp/PP710JK7+GFC3ey6E74rvMRgSlu s+ya8CN7HqX1RncXvHXXUsfCfWKGo5REJPswXIPxEbpE7v/7Y0Lbw4RMxMPs7OGW cU9hnEXH5lwHW6CZ8mM4RBYnsw== -----END CERTIFICATE-----Generated at Fri Sep 11 09:25:59 2026 by rpki-client