$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0FEC/7C892BC8B26011F1AB3E26186D11F970/VsgSgBpqQOVkve0uD4H5ulCW2xY.mft File: VsgSgBpqQOVkve0uD4H5ulCW2xY.mft (raw, json) Hash identifier: b/nFS7evie5puaon/e30E1eZhm2xkjtmHOHq8byKhr0= Subject key identifier: 47:90:26:38:AC:0D:3A:D7:30:33:0E:E5:D5:51:B0:C2:68:9D:9C:30 Authority key identifier: 56:C8:12:80:1A:6A:40:E5:64:BD:ED:2E:0F:81:F9:BA:50:96:DB:16 Certificate issuer: /CN=A91A0FEC/serialNumber=56C812801A6A40E564BDED2E0F81F9BA5096DB16 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsgSgBpqQOVkve0uD4H5ulCW2xY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FEC/7C892BC8B26011F1AB3E26186D11F970/VsgSgBpqQOVkve0uD4H5ulCW2xY.mft Manifest number: 09 Signing time: Tue 29 Sep 2026 09:53:39 +0000 Manifest this update: Tue 29 Sep 2026 09:53:39 +0000 Manifest next update: Tue 06 Oct 2026 09:53:39 +0000 Files and hashes: 1: VsgSgBpqQOVkve0uD4H5ulCW2xY.crl (hash: NQ9XeYcBt0weC//pSMDBzViusStI347HOe8lBqkSUxg=) 2: 28E50518B26111F184CF80BF6D11F970.roa (hash: 3kG/OW/bK9Pt2fSpt02QI6a34c6BWmY2smfJT42l0+o=) 3: kKCdAZrV89hN2YEhn0eTdxtczPg.asa (hash: YJr+kA9YpB5K867Gv30NSpCU/S71944xgrgqzJxviNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FEC/7C892BC8B26011F1AB3E26186D11F970/VsgSgBpqQOVkve0uD4H5ulCW2xY.crl rsync://rpki.apnic.net/member_repository/A91A0FEC/7C892BC8B26011F1AB3E26186D11F970/VsgSgBpqQOVkve0uD4H5ulCW2xY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsgSgBpqQOVkve0uD4H5ulCW2xY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 09:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FEC, serialNumber=56C812801A6A40E564BDED2E0F81F9BA5096DB16 Validity Not Before: Sep 29 09:53:39 2026 GMT Not After : Oct 6 09:53:39 2026 GMT Subject: CN=6abb8aa3-66e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:ed:c8:9e:0a:23:24:cb:26:39:af:4a:d6: 31:07:f5:ba:4d:1e:cd:8b:b2:8d:b0:43:e2:a9:8a: 59:14:1c:d2:13:74:32:52:94:18:de:4e:8a:ec:31: 03:2d:82:4e:99:ef:cd:98:d2:fc:93:8d:2f:c3:34: a3:92:42:b4:a3:ff:aa:bb:3f:68:d2:df:a2:24:57: 27:c6:91:38:0c:9b:13:31:2d:95:1a:e0:01:0a:cb: cb:49:3d:a6:95:5b:f2:0f:61:25:16:6c:4f:dc:c7: 34:4b:8d:b3:81:9c:11:61:d7:e7:6c:7c:76:32:a4: 80:0e:ec:27:ab:2f:15:29:da:06:15:9b:c5:6a:4d: 32:fa:da:b6:70:26:0f:be:b7:b4:e2:75:b1:0e:bc: eb:53:39:3f:31:ac:a8:9f:db:99:d6:b3:78:71:7b: 14:6d:e4:a8:c2:d5:18:37:c0:c8:08:be:b6:9e:f3: 33:61:a2:17:bc:33:0a:40:94:ea:a7:2a:fc:08:51: cb:9b:cf:65:e6:0c:b2:b2:9b:df:5a:59:cc:7a:27: 06:b5:9c:12:c0:a0:38:3b:11:a1:b1:a1:8b:ef:2b: fe:a1:84:c9:01:ab:66:37:8c:da:8f:42:0a:fd:0d: c6:45:cf:dc:32:94:0d:59:8f:5b:8e:0b:33:d4:be: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:26:38:AC:0D:3A:D7:30:33:0E:E5:D5:51:B0:C2:68:9D:9C:30 X509v3 Authority Key Identifier: keyid:56:C8:12:80:1A:6A:40:E5:64:BD:ED:2E:0F:81:F9:BA:50:96:DB:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FEC/7C892BC8B26011F1AB3E26186D11F970/VsgSgBpqQOVkve0uD4H5ulCW2xY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsgSgBpqQOVkve0uD4H5ulCW2xY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FEC/7C892BC8B26011F1AB3E26186D11F970/VsgSgBpqQOVkve0uD4H5ulCW2xY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:41:03:41:3c:4b:76:56:e0:57:06:4c:2b:64:97:0f:6d: 50:ec:fc:cc:7b:3a:e9:b3:58:23:ad:bf:15:3d:fe:8c:ab:0c: a4:13:42:03:95:34:50:6e:86:d8:73:1a:90:93:6b:e1:2d:1c: 33:c2:af:c8:f3:ca:ec:c5:d1:26:bc:4b:3c:44:07:c5:41:36: 3b:06:d0:99:1a:e9:74:4b:02:98:15:54:ac:3a:9f:3b:d0:6f: 33:d1:79:3a:e9:e5:8e:c1:09:00:61:28:e1:9f:79:d6:81:38: 0f:4b:29:df:9d:97:f7:ad:23:90:76:3c:dd:d5:da:94:ba:d9: e5:e0:34:ba:9c:d7:94:42:f7:ee:5c:01:ce:a1:ce:05:e8:9a: 3e:f8:6e:36:e3:2e:c4:08:4e:30:58:97:63:17:94:7c:10:9c: 79:1f:32:99:c3:23:70:95:5f:1f:4e:42:d5:3a:8d:a0:80:c4: 22:95:52:89:14:d4:68:29:68:90:44:d2:f4:33:6d:b6:1b:0b: c5:8e:5b:b6:66:74:94:18:16:ca:ef:a5:99:d6:8d:77:62:43: d0:76:c7:b4:39:8c:82:c9:15:cc:0f:43:ea:4e:19:7a:bd:8b: 44:ac:38:a8:20:14:97:e3:da:fc:7a:06:3c:a0:6e:d7:72:a4: 01:52:8d:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEZFQzExMC8GA1UEBRMoNTZDODEyODAxQTZBNDBFNTY0QkRFRDJFMEY4MUY5QkE1 MDk2REIxNjAeFw0yNjA5MjkwOTUzMzlaFw0yNjEwMDYwOTUzMzlaMBgxFjAUBgNV BAMTDTZhYmI4YWEzLTY2ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClhO3IngojJMsmOa9K1jEH9bpNHs2Lso2wQ+KpilkUHNITdDJSlBjeTorsMQMt gk6Z782Y0vyTjS/DNKOSQrSj/6q7P2jS36IkVyfGkTgMmxMxLZUa4AEKy8tJPaaV W/IPYSUWbE/cxzRLjbOBnBFh1+dsfHYypIAO7CerLxUp2gYVm8VqTTL62rZwJg++ t7TidbEOvOtTOT8xrKif25nWs3hxexRt5KjC1Rg3wMgIvrae8zNhohe8MwpAlOqn KvwIUcubz2XmDLKym99aWcx6Jwa1nBLAoDg7EaGxoYvvK/6hhMkBq2Y3jNqPQgr9 DcZFz9wylA1Zj1uOCzPUvmZHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR5AmOKwN OtcwMw7l1VGwwmidnDAwHwYDVR0jBBgwFoAUVsgSgBpqQOVkve0uD4H5ulCW2xYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwRkVDLzdDODkyQkM4QjI2 MDExRjFBQjNFMjYxODZEMTFGOTcwL1ZzZ1NnQnBxUU9Wa3ZlMHVENEg1dWxDVzJ4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnNnU2dCcHFRT1ZrdmUwdUQ0SDV1bENXMnhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw RkVDLzdDODkyQkM4QjI2MDExRjFBQjNFMjYxODZEMTFGOTcwL1ZzZ1NnQnBxUU9W a3ZlMHVENEg1dWxDVzJ4WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzj0EDQTxLdlbgVwZMK2SXD21Q7PzMezrps1gjrb8VPf6MqwykE0IDlTRQbobY cxqQk2vhLRwzwq/I88rsxdEmvEs8RAfFQTY7BtCZGul0SwKYFVSsOp870G8z0Xk6 6eWOwQkAYSjhn3nWgTgPSynfnZf3rSOQdjzd1dqUutnl4DS6nNeUQvfuXAHOoc4F 6Jo++G424y7ECE4wWJdjF5R8EJx5HzKZwyNwlV8fTkLVOo2ggMQilVKJFNRoKWiQ RNL0M222GwvFjlu2ZnSUGBbK76WZ1o13YkPQdse0OYyCyRXMD0PqThl6vYtErDio IBSX49r8egY8oG7XcqQBUo0G -----END CERTIFICATE-----Generated at Wed Sep 30 22:39:54 2026 by rpki-client