$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: fkmFL2JEoFiAlL4NZzJrRf6rxFzaLWM4AJescRYYkig= Subject key identifier: 10:1F:3C:F9:06:EA:8A:E7:70:5C:B6:23:C0:BA:05:A2:88:CA:B4:FF Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 35CB Signing time: Thu 22 Oct 2026 14:38:27 +0000 Manifest this update: Thu 22 Oct 2026 14:38:27 +0000 Manifest next update: Thu 29 Oct 2026 14:38:27 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: cozXyK6Is9ObWnEX13i5Korf4yz33agfTneoYn4B74s=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: vtwMWBWJtSed875G1+wbpC+RKkrgpx2zfwNszIXKaRQ=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: f1IGNhieFlad+lglHYXuxHBK/1cZW7IPzK8JCgEL25o=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: PuiDctOuJlf4lt6A2dYZ1tgkERX2Xujv7L8tOvTc9eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 14:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13831 (0x3607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Oct 22 14:38:27 2026 GMT Not After : Oct 29 14:38:27 2026 GMT Subject: CN=6ada1fe3-5caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:96:a5:92:a6:d0:00:81:45:d7:a0:0b:76: 94:56:af:b0:4c:d0:0b:1a:ba:a3:31:4b:e4:94:38: 30:35:37:3c:26:31:e4:59:bd:6c:26:54:ad:67:ba: 07:38:4f:79:d1:f9:da:42:52:21:ff:27:06:fe:b1: b9:d7:e6:9d:8d:af:00:bf:0b:b3:b3:73:c5:25:0a: b2:c8:f7:93:59:ff:d6:eb:1e:ac:76:1f:86:b9:c1: 79:6b:b1:5f:12:cd:a8:7e:28:2a:68:b4:cc:e9:23: 8b:37:3f:44:2a:2c:40:1f:ea:9e:e2:2a:34:77:70: 31:9e:7e:ee:4e:48:f4:e6:2e:21:32:39:4e:03:59: 3e:94:9c:b4:c1:6a:60:23:d5:90:7f:d8:83:1c:3c: 13:b0:86:de:ea:82:22:7c:a1:75:c8:d0:9c:b5:55: cb:ec:d8:4d:ee:cd:72:4c:61:5b:03:82:82:05:91: 39:7a:46:a4:b4:8c:f3:3f:a8:e0:b1:95:9a:01:3f: a2:85:e9:1e:41:10:8e:1a:37:16:4e:ce:e8:3c:aa: 8d:02:f9:a4:58:df:78:d6:95:9a:9b:3a:60:f7:cf: 20:62:ef:66:48:e2:4a:80:14:a4:75:eb:37:73:b1: 88:6c:41:30:d8:6a:46:2a:de:aa:6c:4d:a6:83:d3: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:3C:F9:06:EA:8A:E7:70:5C:B6:23:C0:BA:05:A2:88:CA:B4:FF X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5a:85:d0:fe:bf:03:b2:74:d9:8b:88:87:e6:b7:78:67:be: 82:02:54:3a:e6:da:17:4b:38:cd:7e:7b:a2:6b:17:14:72:65: fa:93:0b:1f:5d:cd:46:ab:60:28:cc:32:c8:5b:8e:f2:f3:d1: 67:7b:ab:6e:0f:88:bd:fa:1e:42:bf:5d:ea:44:4e:10:9c:ce: ce:53:f5:4b:55:32:a6:89:63:21:96:35:03:c4:5a:b4:cc:52: 18:cf:99:b2:ae:f4:ff:4b:36:cb:5b:09:f2:8b:24:a4:f9:89: 30:45:d0:8a:0a:4e:04:cc:0d:41:f6:02:b6:2f:f8:e1:0d:78: 35:08:40:fd:e3:4f:27:2a:02:15:f1:f6:e6:9a:3a:eb:83:60: fc:6a:c7:55:0d:71:e1:54:77:4b:ab:bd:b8:56:5a:9f:8d:37: 0d:82:30:13:9d:19:c9:cc:86:12:2f:b9:01:60:83:6e:96:81: eb:14:32:d7:5a:2d:ec:f9:0e:09:42:3a:45:24:fe:8e:83:52: 76:05:ae:62:35:64:2d:74:64:97:c0:04:05:b8:47:ba:bf:45: b9:9b:d7:7d:ef:d4:6c:06:df:1d:4b:b8:d6:22:94:53:71:23: 2f:de:97:82:72:ee:ec:3a:a9:23:49:58:eb:b1:7f:66:2d:1f: 89:47:0f:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYxMDIyMTQzODI3WhcNMjYxMDI5MTQzODI3WjAYMRYwFAYD VQQDEw02YWRhMWZlMy01Y2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23OWpZKm0ACBRdegC3aUVq+wTNALGrqjMUvklDgwNTc8JjHkWb1sJlStZ7oH OE950fnaQlIh/ycG/rG51+adja8Avwuzs3PFJQqyyPeTWf/W6x6sdh+GucF5a7Ff Es2ofigqaLTM6SOLNz9EKixAH+qe4io0d3Axnn7uTkj05i4hMjlOA1k+lJy0wWpg I9WQf9iDHDwTsIbe6oIifKF1yNCctVXL7NhN7s1yTGFbA4KCBZE5ekaktIzzP6jg sZWaAT+ihekeQRCOGjcWTs7oPKqNAvmkWN941pWamzpg988gYu9mSOJKgBSkdes3 c7GIbEEw2GpGKt6qbE2mg9MckQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAfPPkG 6orncFy2I8C6BaKIyrT/MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVqF0P6/A7J02YuIh+a3eGe+ggJUOubaF0s4zX57omsXFHJl+pMLH13NRqtg KMwyyFuO8vPRZ3urbg+IvfoeQr9d6kROEJzOzlP1S1UypoljIZY1A8RatMxSGM+Z sq70/0s2y1sJ8oskpPmJMEXQigpOBMwNQfYCti/44Q14NQhA/eNPJyoCFfH25po6 64Ng/GrHVQ1x4VR3S6u9uFZan403DYIwE50ZycyGEi+5AWCDbpaB6xQy11ot7PkO CUI6RST+joNSdgWuYjVkLXRkl8AEBbhHur9FuZvXfe/UbAbfHUu41iKUU3EjL96X gnLu7DqpI0lY67F/Zi0fiUcPpw== -----END CERTIFICATE-----Generated at Sat Oct 24 11:07:21 2026 by rpki-client