$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: Q+rTrMYeHiDthg/px3HBMiY89t9nDI4acWy1QGb432Y= Subject key identifier: 70:5F:7E:5E:D9:96:A1:3F:59:C8:AD:33:DA:1C:40:5C:39:48:9D:89 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: 0183 Signing time: Mon 05 Oct 2026 04:57:52 +0000 Manifest this update: Mon 05 Oct 2026 04:57:52 +0000 Manifest next update: Mon 12 Oct 2026 04:57:52 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: 2lHZrVKFypsDFXW8iArkvSc/AB7Y5NEMmErPYHAvlYQ=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: t/GwUUNb7tEahxNoYBzuYwEmPFEhCTW8k/WHCWvOMyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Oct 5 04:57:52 2026 GMT Not After : Oct 12 04:57:52 2026 GMT Subject: CN=6ac32e50-462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:ba:6c:ce:d1:e9:83:43:20:de:f5:7a:97: 40:62:5d:21:42:80:73:e9:b0:0b:0d:50:a4:64:5c: c2:f9:5a:af:16:22:09:1d:e2:1e:ae:bf:15:e5:a1: 86:ac:6f:de:df:2a:26:69:6f:bc:a5:4e:fc:0a:85: 4e:b2:52:b7:b3:d6:5f:06:53:ca:74:4e:e6:c3:dc: 92:41:32:b7:4e:2a:ba:5c:6e:55:ce:18:91:f2:d7: 03:bf:dc:0d:3e:e6:ca:97:9f:0b:a4:c6:55:00:30: b4:4e:c2:d1:0c:a9:b2:cb:35:aa:f3:5a:ae:1b:d3: f0:79:b9:43:87:75:18:b3:2b:1a:a7:2d:6e:61:22: 96:7b:d7:a3:43:03:13:32:33:b0:aa:29:50:f0:3d: c6:6f:27:fd:45:4a:a9:f9:ba:8d:96:de:4b:f1:c7: 56:e8:6f:20:93:5c:7a:9b:af:70:17:65:08:af:07: 69:b7:09:e2:f8:9b:73:87:53:bb:de:fa:db:90:7d: a2:f1:0a:30:be:29:cf:98:da:80:d8:40:64:c0:a3: b0:22:94:9f:d0:0e:53:11:db:cc:1b:c5:41:d8:4d: d4:27:28:e0:88:b1:ea:a5:f8:19:96:d7:a6:6d:cb: 54:bc:b3:3b:6c:90:7d:dd:88:59:76:45:2e:31:6e: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5F:7E:5E:D9:96:A1:3F:59:C8:AD:33:DA:1C:40:5C:39:48:9D:89 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c3:3a:a7:fe:e7:13:1b:fa:03:f5:22:5a:29:31:41:04:92: 08:51:80:5d:0b:7a:0c:43:cd:3f:ef:4f:e1:d3:c1:5f:4b:20: ce:9c:22:c7:98:c7:e0:c4:5a:ee:55:03:0c:d2:c9:28:f7:61: 7d:75:93:00:1e:63:21:bd:bd:14:41:31:9c:2c:1e:98:11:ca: bf:ff:40:20:2b:c3:34:e0:99:25:0d:6d:4a:03:f2:2d:49:ac: e6:b5:b3:81:47:bc:d8:ee:b2:16:e9:a9:9b:d8:9c:99:37:48: 2b:fa:11:7f:15:7a:a1:be:96:2f:13:33:d2:0e:15:2a:c6:9e: 78:b8:7e:10:6b:62:de:f4:76:40:4b:30:5a:b3:f5:1d:c3:b3: 05:46:b8:94:b5:dc:e9:c4:c6:9d:89:9a:7e:d6:04:94:ed:53: 22:db:4c:95:00:8b:e8:e2:83:e1:c4:df:28:e2:e9:9d:42:c5: 2c:5a:e7:7c:cc:9f:9f:ca:6a:81:ed:f7:14:92:7b:5a:90:b1: 07:40:1b:32:13:09:0d:fd:d5:c6:84:bf:f3:d1:0b:da:73:2f: ab:b4:ae:e8:c2:79:91:ca:34:73:5f:83:67:44:71:17:be:b3: ee:0c:4f:e5:c3:bc:ba:19:7c:58:e7:b3:8b:0b:b0:79:b7:5b: d7:b2:c5:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjYxMDA1MDQ1NzUyWhcNMjYxMDEyMDQ1NzUyWjAYMRYwFAYD VQQDEw02YWMzMmU1MC00NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHG6bM7R6YNDIN71epdAYl0hQoBz6bALDVCkZFzC+VqvFiIJHeIerr8V5aGG rG/e3yomaW+8pU78CoVOslK3s9ZfBlPKdE7mw9ySQTK3Tiq6XG5VzhiR8tcDv9wN PubKl58LpMZVADC0TsLRDKmyyzWq81quG9PweblDh3UYsysapy1uYSKWe9ejQwMT MjOwqilQ8D3Gbyf9RUqp+bqNlt5L8cdW6G8gk1x6m69wF2UIrwdptwni+Jtzh1O7 3vrbkH2i8QowvinPmNqA2EBkwKOwIpSf0A5TEdvMG8VB2E3UJyjgiLHqpfgZltem bctUvLM7bJB93YhZdkUuMW47gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBffl7Z lqE/WcitM9ocQFw5SJ2JMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju YXluOWVyeWZnYlNwSDlpb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgMM6p/7nExv6A/UiWikxQQSSCFGAXQt6DEPNP+9P4dPBX0sgzpwix5jH4MRa 7lUDDNLJKPdhfXWTAB5jIb29FEExnCwemBHKv/9AICvDNOCZJQ1tSgPyLUms5rWz gUe82O6yFumpm9icmTdIK/oRfxV6ob6WLxMz0g4VKsaeeLh+EGti3vR2QEswWrP1 HcOzBUa4lLXc6cTGnYmaftYElO1TIttMlQCL6OKD4cTfKOLpnULFLFrnfMyfn8pq ge33FJJ7WpCxB0AbMhMJDf3VxoS/89EL2nMvq7Su6MJ5kco0c1+DZ0RxF76z7gxP 5cO8uhl8WOeziwuwebdb17LFZQ== -----END CERTIFICATE-----Generated at Tue Oct 6 14:44:21 2026 by rpki-client