$ rpki-client -vvvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: xK9lDxb0PWqgsfPn3cqFk51cEOPKHhO3gvA20LTYXoA= Subject key identifier: 31:0F:72:52:E2:34:0C:95:19:ED:7C:F3:6F:31:73:6D:8E:2F:F2:93 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0CF8 Signing time: Sat 31 Oct 2026 18:38:41 +0000 Manifest this update: Sat 31 Oct 2026 18:38:41 +0000 Manifest next update: Sat 07 Nov 2026 18:38:41 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: s8OtgQ05oRHxpz1XqpR0oNmo8786dQLjbQYaMpAwENk=) 2: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=) 3: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 18:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Oct 31 18:38:41 2026 GMT Not After : Nov 7 18:38:41 2026 GMT Subject: CN=6ae635b1-ec33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:2f:f3:64:39:d6:21:ae:24:45:45:da:19: ad:51:29:dc:af:62:1c:7e:3b:61:5f:ff:2a:9f:bc: a3:11:be:7b:66:4d:74:9a:13:a3:8d:b4:c6:0c:e3: 32:9d:dd:f4:49:63:72:b7:cf:e4:67:f9:80:09:c7: a4:20:1c:98:2d:ad:36:4b:c7:d8:0e:fe:66:b7:73: fb:0e:08:ae:2e:f6:5d:96:69:93:cd:31:17:d8:c0: 2d:40:b5:ad:60:31:96:07:71:c6:99:3d:d7:30:e2: 88:f7:aa:61:df:d7:1c:2f:ff:fd:e5:f3:ba:8e:cb: 74:83:31:ca:fb:51:8b:27:50:2f:4e:d5:c9:ca:81: b9:88:1c:dd:c2:12:45:ed:1b:02:b6:0b:e2:c0:1f: 86:de:fb:8a:0a:aa:43:01:08:38:31:9a:f3:83:97: c0:b9:b3:5c:5b:73:29:16:a3:e0:24:50:b6:ee:f6: 5e:c5:92:d4:aa:6d:23:03:20:52:1a:3d:66:c7:de: 2a:5a:56:1f:2c:90:1b:ee:15:e0:71:2c:b1:a0:bf: 2c:bf:c3:b7:52:95:b3:db:41:d0:73:7e:d5:bb:5f: e1:7f:91:8b:f8:fb:dc:68:9b:e9:8f:44:74:db:b1: c2:23:fe:db:4f:12:b1:9a:f7:dd:6e:92:49:c2:e6: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0F:72:52:E2:34:0C:95:19:ED:7C:F3:6F:31:73:6D:8E:2F:F2:93 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5d:22:d1:f0:f0:dc:e3:69:6e:eb:17:b7:80:2c:8c:56:46: 3b:5f:ae:7d:8c:c7:db:93:46:fb:15:a6:bd:33:e5:6b:8a:ba: 1f:ff:81:97:37:12:06:b8:e8:24:a8:af:74:d4:87:1e:4f:f6: f7:e8:c1:78:a0:b6:bf:8c:b6:4c:cf:87:7c:c4:21:c6:65:29: 02:11:28:f5:5f:f7:e6:48:8b:76:fa:ab:27:95:9d:b8:6a:7e: 88:3f:6f:5a:a9:ef:cd:75:d5:86:88:0c:85:14:01:9e:22:8f: a9:db:bf:7b:8a:2c:9e:57:2b:49:dd:1f:5a:c3:ec:14:c4:7c: 85:6c:e0:eb:82:1e:85:e2:95:01:5e:4a:2a:bd:93:e3:6c:49: b7:e8:23:46:b0:95:1e:a7:1d:a6:66:29:92:40:5d:74:32:b9: 8c:a6:e0:7e:13:10:32:5b:7f:df:27:02:77:42:fe:cb:df:6c: 40:12:04:00:2f:64:07:ea:a9:ba:13:0a:89:32:58:e7:de:39: 7b:03:0b:1b:bb:77:57:3c:05:01:26:76:a1:a5:ae:ca:d0:19: 83:9e:26:71:2d:55:22:dd:c9:7b:4f:47:0b:8c:f2:21:45:a3: 78:15:83:0e:67:16:22:38:af:f7:c8:25:3a:4e:8a:19:41:7d: e2:df:b0:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjYxMDMxMTgzODQxWhcNMjYxMTA3MTgzODQxWjAYMRYwFAYD VQQDEw02YWU2MzViMS1lYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UQv82Q51iGuJEVF2hmtUSncr2IcfjthX/8qn7yjEb57Zk10mhOjjbTGDOMy nd30SWNyt8/kZ/mACcekIByYLa02S8fYDv5mt3P7DgiuLvZdlmmTzTEX2MAtQLWt YDGWB3HGmT3XMOKI96ph39ccL//95fO6jst0gzHK+1GLJ1AvTtXJyoG5iBzdwhJF 7RsCtgviwB+G3vuKCqpDAQg4MZrzg5fAubNcW3MpFqPgJFC27vZexZLUqm0jAyBS Gj1mx94qWlYfLJAb7hXgcSyxoL8sv8O3UpWz20HQc37Vu1/hf5GL+PvcaJvpj0R0 27HCI/7bTxKxmvfdbpJJwuYDUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEPclLi NAyVGe18828xc22OL/KTMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApF0i0fDw3ONpbusXt4AsjFZGO1+ufYzH25NG+xWmvTPla4q6H/+BlzcSBrjo JKivdNSHHk/29+jBeKC2v4y2TM+HfMQhxmUpAhEo9V/35kiLdvqrJ5WduGp+iD9v WqnvzXXVhogMhRQBniKPqdu/e4osnlcrSd0fWsPsFMR8hWzg64IeheKVAV5KKr2T 42xJt+gjRrCVHqcdpmYpkkBddDK5jKbgfhMQMlt/3ycCd0L+y99sQBIEAC9kB+qp uhMKiTJY5945ewMLG7t3VzwFASZ2oaWuytAZg54mcS1VIt3Je09HC4zyIUWjeBWD DmcWIjiv98glOk6KGUF94t+wkA== -----END CERTIFICATE-----Generated at Sun Nov 1 08:35:40 2026 by rpki-client