$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: NLrWaVOntdqLj0lXalyrAk6j297ljiPOh05uwgtw9Dg= Subject key identifier: CE:20:D5:4A:74:46:29:88:27:11:39:5F:3E:44:40:96:52:27:E5:A4 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 143D Signing time: Sun 04 Oct 2026 16:55:03 +0000 Manifest this update: Sun 04 Oct 2026 16:55:02 +0000 Manifest next update: Sun 11 Oct 2026 16:55:02 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: Ov+4qKDVt7mSsMsXP0XwmWXqMor74jQj0O2if7fjzzg=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: vzjzm42ih0JuLqajby6+Lr3dFdD3i/kb+bMCNKPWSA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5192 (0x1448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Oct 4 16:55:02 2026 GMT Not After : Oct 11 16:55:02 2026 GMT Subject: CN=6ac284e6-2a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a2:d7:16:15:b4:2e:9a:23:13:61:a2:3a:81: 77:7e:d8:1b:a4:fc:28:43:95:65:c1:a0:fa:18:b3: 9e:77:2b:b2:e0:07:37:19:a7:cc:a7:c5:f4:e4:14: b2:e3:18:f6:cf:19:d1:e9:54:15:c0:22:4a:a2:1a: b2:f9:50:fb:36:9d:a2:cb:3f:9a:5b:ec:ca:35:11: e7:d8:3c:43:74:0d:e6:54:56:14:11:9e:8f:b9:8d: 05:38:2d:5e:55:79:53:de:76:bb:65:f2:e2:34:64: aa:d7:05:c8:76:75:7a:da:d8:f7:ae:47:2d:9c:53: ad:55:88:6e:e0:6f:0b:79:25:af:b5:b5:97:3f:92: 08:83:a5:c1:4c:fe:58:79:a3:6b:33:d9:a9:85:0e: 09:26:34:b6:3b:ae:c9:92:bb:b6:f8:58:86:a5:68: ed:a7:3e:60:16:ac:b0:d8:82:0f:cf:5a:01:f4:69: 72:72:10:b9:e5:11:43:3c:2f:5c:b6:26:1e:36:c6: 88:f9:94:3b:67:b6:a3:a5:2b:d0:02:31:c7:05:21: f0:c3:7e:6d:e3:8f:59:46:ba:9e:bb:90:24:19:ca: 9b:3f:9c:13:7f:12:10:f9:c1:b3:95:4d:66:78:ec: 2a:b2:a4:0f:31:5f:bd:fa:66:97:3e:2d:ce:06:b2: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:D5:4A:74:46:29:88:27:11:39:5F:3E:44:40:96:52:27:E5:A4 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9f:22:52:26:d2:21:58:f2:11:c7:78:4c:8b:ed:9e:a4:f0: fa:40:c2:a7:c6:09:13:3e:2c:3c:1f:e7:17:38:9c:04:a3:3f: c0:0c:a8:19:5a:ed:c1:0f:8f:45:46:91:fe:be:17:a4:ef:70: 7d:2a:75:f5:92:03:5e:dc:c5:16:54:5c:81:a6:76:e7:4c:27: 4b:13:1d:ab:88:87:1f:4f:49:06:2a:35:99:b7:11:d3:5f:f6: 64:1c:91:ab:73:b4:d8:19:82:5c:06:ae:da:5f:ef:df:71:4a: 10:bd:a1:8a:e9:46:d0:90:b4:48:c6:66:ea:07:d4:cd:81:66: 2a:13:da:6f:5f:88:fe:82:22:ac:ae:f1:e4:08:d3:3b:cf:a0: a6:2a:8c:14:42:8d:7b:da:34:28:dd:ff:45:48:a0:80:3d:67: 77:e7:dc:bf:51:37:e6:11:49:a5:7c:34:6d:7f:83:3d:23:69: 00:72:29:b9:c3:c6:fd:7a:a8:33:a2:67:01:6e:8e:f0:45:8e: 03:76:8f:22:82:e7:6c:1c:d7:a4:67:8e:2b:84:81:c4:a6:c0: 35:51:15:33:49:16:3d:cf:15:1c:ab:96:f7:c1:8c:84:e3:f9: 3b:ca:54:0a:77:a5:7d:d4:26:1f:ed:56:ce:4c:e7:dd:7f:e1: 63:3f:9c:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYxMDA0MTY1NTAyWhcNMjYxMDExMTY1NTAyWjAYMRYwFAYD VQQDEw02YWMyODRlNi0yYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qLXFhW0LpojE2GiOoF3ftgbpPwoQ5VlwaD6GLOedyuy4Ac3GafMp8X05BSy 4xj2zxnR6VQVwCJKohqy+VD7Np2iyz+aW+zKNRHn2DxDdA3mVFYUEZ6PuY0FOC1e VXlT3na7ZfLiNGSq1wXIdnV62tj3rkctnFOtVYhu4G8LeSWvtbWXP5IIg6XBTP5Y eaNrM9mphQ4JJjS2O67Jkru2+FiGpWjtpz5gFqyw2IIPz1oB9GlychC55RFDPC9c tiYeNsaI+ZQ7Z7ajpSvQAjHHBSHww35t449ZRrqeu5AkGcqbP5wTfxIQ+cGzlU1m eOwqsqQPMV+9+maXPi3OBrJddwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4g1Up0 RimIJxE5Xz5EQJZSJ+WkMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJ8iUibSIVjyEcd4TIvtnqTw+kDCp8YJEz4sPB/nFzicBKM/wAyoGVrtwQ+P RUaR/r4XpO9wfSp19ZIDXtzFFlRcgaZ250wnSxMdq4iHH09JBio1mbcR01/2ZByR q3O02BmCXAau2l/v33FKEL2hiulG0JC0SMZm6gfUzYFmKhPab1+I/oIirK7x5AjT O8+gpiqMFEKNe9o0KN3/RUiggD1nd+fcv1E35hFJpXw0bX+DPSNpAHIpucPG/Xqo M6JnAW6O8EWOA3aPIoLnbBzXpGeOK4SBxKbANVEVM0kWPc8VHKuW98GMhOP5O8pU CnelfdQmH+1Wzkzn3X/hYz+cdQ== -----END CERTIFICATE-----Generated at Tue Oct 6 08:50:07 2026 by rpki-client