$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: HU/2XuD/obUzZ1+704d7METCWZo1hDnHMNOdgB3VLQY= Subject key identifier: 2C:75:B4:D0:1D:4A:09:74:6E:88:29:2B:F3:A1:F7:40:E4:E3:47:F0 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0992 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 097E Signing time: Tue 06 Oct 2026 20:11:14 +0000 Manifest this update: Tue 06 Oct 2026 20:11:13 +0000 Manifest next update: Tue 13 Oct 2026 20:11:13 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: kwIQv/g+ZDFj91K8cWoiuQoqLyQEVWlejEvi8QShFU0=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: 00gQhpdm0DGJO/AQ/2cxeV1F7zOqgqX/nHAnGUfY5fk=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: OerNxvvq3phHMkXzM6uc+sc+f5PWAHWyBJri0cIQ79g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Oct 6 20:11:13 2026 GMT Not After : Oct 13 20:11:13 2026 GMT Subject: CN=6ac555e2-c16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:bf:2c:f8:b6:1f:4e:2a:54:1a:91:cb:4d: 1a:fe:6e:2b:6e:b6:43:34:06:97:62:fd:92:f8:34: 76:a6:8b:d7:c6:5c:31:2d:a9:f1:9e:c9:b7:20:01: a2:bf:eb:a7:74:ba:c6:27:01:84:43:e4:33:9c:4b: 67:a2:8b:da:7a:58:79:3a:c5:f2:74:6e:ca:94:e7: b4:e1:d8:bc:20:8f:70:98:3d:63:2b:eb:b4:08:c2: 03:17:d1:fc:42:a1:b6:97:ef:9c:e1:92:f7:fd:40: bd:4a:e6:6f:93:d9:d2:af:da:85:08:93:6f:ae:04: f3:bb:da:71:6a:30:85:b5:48:1f:0a:00:39:2c:bf: b9:f3:86:0a:87:f7:8b:71:3f:fe:a1:8e:8a:a1:a9: cc:8d:cc:dd:49:67:8b:4d:3e:e3:81:eb:52:e3:58: a6:e3:5c:2a:5e:3e:c4:eb:eb:21:99:31:f8:0f:f7: a9:c3:2c:bd:b8:db:33:92:96:2b:06:09:87:6a:1e: 0d:6d:e8:74:2a:8f:69:bc:e5:a6:2a:c0:35:6a:f5: 31:4f:ae:b5:b8:2f:d2:3e:59:a6:9f:82:47:85:48: e0:75:60:ad:f4:da:1b:40:58:11:30:b3:ae:d0:14: 68:55:37:2f:f5:26:1d:dc:ab:fe:c1:be:57:f0:2a: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:75:B4:D0:1D:4A:09:74:6E:88:29:2B:F3:A1:F7:40:E4:E3:47:F0 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:53:30:67:d6:78:6a:f5:1a:53:35:1a:4c:02:0a:71:32:77: 10:dc:ee:cf:c5:f6:38:4e:c3:9d:af:d9:d0:eb:ef:84:71:09: 3d:6b:54:8e:12:12:6d:37:10:ee:11:1d:df:98:55:9c:41:78: 90:ca:fd:47:a9:20:d9:68:28:04:e1:a7:22:8a:0f:d0:cb:5d: 49:31:9e:af:cb:56:c2:db:d4:38:e9:eb:42:91:91:7a:c4:68: 12:58:f3:4c:d6:99:83:c2:7a:e1:42:c5:f9:9b:11:84:5a:f0: 15:43:15:4c:ba:9e:8e:bb:4b:86:c4:17:f5:26:e2:4d:bc:b3: 5b:ee:4c:13:92:f0:98:03:c0:30:c9:e6:de:84:96:67:1a:12: 68:ed:87:5d:94:01:1b:63:03:3b:5a:5d:5c:06:a0:7a:5c:f9: 2a:3f:cd:0f:48:f1:03:ab:0b:66:66:9e:e8:fa:df:93:5b:7e: c8:4e:96:c2:1e:2f:7b:6d:62:38:a0:e3:73:e1:d6:9c:25:26: 81:a7:ac:13:fc:0f:57:20:51:c1:a2:51:24:e9:77:4e:76:52: d6:ca:3f:04:48:02:10:99:13:58:e7:6c:a2:dc:f3:f0:77:f5: 22:dd:d1:e5:ef:db:58:20:22:3b:7a:8e:db:29:14:14:ba:ad: 77:4e:5d:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjYxMDA2MjAxMTEzWhcNMjYxMDEzMjAxMTEzWjAYMRYwFAYD VQQDEw02YWM1NTVlMi1jMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHO/LPi2H04qVBqRy00a/m4rbrZDNAaXYv2S+DR2povXxlwxLanxnsm3IAGi v+undLrGJwGEQ+QznEtnoovaelh5OsXydG7KlOe04di8II9wmD1jK+u0CMIDF9H8 QqG2l++c4ZL3/UC9SuZvk9nSr9qFCJNvrgTzu9pxajCFtUgfCgA5LL+584YKh/eL cT/+oY6KoanMjczdSWeLTT7jgetS41im41wqXj7E6+shmTH4D/epwyy9uNszkpYr BgmHah4Nbeh0Ko9pvOWmKsA1avUxT661uC/SPlmmn4JHhUjgdWCt9NobQFgRMLOu 0BRoVTcv9SYd3Kv+wb5X8Cqa0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx1tNAd Sgl0bogpK/Oh90Dk40fwMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFMwZ9Z4avUaUzUaTAIKcTJ3ENzuz8X2OE7Dna/Z0OvvhHEJPWtUjhISbTcQ 7hEd35hVnEF4kMr9R6kg2WgoBOGnIooP0MtdSTGer8tWwtvUOOnrQpGResRoEljz TNaZg8J64ULF+ZsRhFrwFUMVTLqejrtLhsQX9SbiTbyzW+5ME5LwmAPAMMnm3oSW ZxoSaO2HXZQBG2MDO1pdXAagelz5Kj/ND0jxA6sLZmae6Prfk1t+yE6Wwh4ve21i OKDjc+HWnCUmgaesE/wPVyBRwaJRJOl3TnZS1so/BEgCEJkTWOdsotzz8Hf1It3R 5e/bWCAiO3qO2ykUFLqtd05d6g== -----END CERTIFICATE-----Generated at Thu Oct 8 14:14:52 2026 by rpki-client