$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: DBzzV88jMhyxyHBduHhIHtWAIx/yqh/HsQJbilWO3C0= Subject key identifier: 65:FD:CA:49:BE:8A:1A:41:93:F6:1C:79:72:F6:8C:22:5E:F2:AC:0B Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0D38 Signing time: Mon 26 Oct 2026 18:16:02 +0000 Manifest this update: Mon 26 Oct 2026 18:16:02 +0000 Manifest next update: Mon 02 Nov 2026 18:16:02 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: smaMvvQz1K8a6nNL9t/BcQy37JxQaNHoodNefUmdlvU=) 2: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: CGowp4w2GBQ9qV/GHYQUjgIY+WC1P2t6NRtsfQxE+ag=) 3: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: DCzIu7CILC93Y/AaTkM9+LUyGULYyH1ab9eTUGXE5NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Oct 26 18:16:02 2026 GMT Not After : Nov 2 18:16:02 2026 GMT Subject: CN=6adf98e2-d3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:3d:69:ab:a9:62:5b:b9:c2:28:3b:94:3a: 99:19:2a:a2:7e:2d:78:b0:26:7c:b4:d3:a9:6b:49: c2:ac:6b:bf:23:d4:ee:f9:70:68:ab:a0:d2:f7:11: 43:97:7b:16:7e:a0:f1:68:60:a1:9d:16:77:7e:1d: 22:7f:77:ae:e0:1d:72:13:74:eb:73:86:c5:33:70: b4:65:2f:e4:8b:4a:cc:07:a2:e4:e4:35:6a:af:55: 7f:b2:b9:e4:78:06:97:d6:9d:40:40:52:0f:75:51: 0f:1d:01:19:26:aa:5e:d5:f5:65:a8:ad:e6:4b:dc: 4f:3b:ff:1f:a8:4d:17:b1:8e:42:56:6f:9a:b5:15: cb:08:57:6c:43:a3:32:88:b4:66:a5:91:e3:18:52: 36:1a:f5:c5:62:8d:d6:e9:7a:53:cc:03:52:37:3e: e4:e2:f1:92:37:b6:59:7c:de:bd:43:38:11:25:eb: fc:28:ee:02:91:e2:6a:55:29:bd:35:43:68:80:38: fd:f3:aa:5c:ed:24:4a:86:b9:5a:41:f6:ee:58:31: 32:eb:7d:1d:6a:c7:af:9e:83:64:89:78:c8:d2:ba: a9:3c:d0:16:84:74:7a:6d:eb:0a:73:cd:95:4b:1d: 21:69:29:d8:d5:04:1b:b2:fd:c4:13:38:b0:d9:1f: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FD:CA:49:BE:8A:1A:41:93:F6:1C:79:72:F6:8C:22:5E:F2:AC:0B X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b5:a9:a1:72:a2:a9:28:67:6a:94:19:34:87:15:d5:92:86: f9:c7:ee:61:eb:ca:1d:a3:82:d3:c0:b5:c7:b1:da:4b:50:76: fd:33:8a:db:f1:80:8a:be:07:d3:2e:77:6e:6a:59:bf:40:a6: 83:1d:7d:a2:e4:6e:55:e5:f4:f7:a7:fa:66:be:f8:33:73:25: c5:75:8c:08:ad:8b:25:07:12:fe:01:51:0f:11:c2:21:ee:10: 01:6d:08:12:b4:0b:10:a8:c1:95:eb:d9:dd:43:46:06:d0:f5: 4f:4b:94:ec:7f:9e:44:07:f2:da:9e:9e:1e:e9:30:ea:ad:d1: 2b:06:ec:4a:12:2d:a5:d6:16:fc:97:bd:2e:ab:d9:07:67:b5: e3:f5:08:7e:4c:7f:81:4b:5e:d1:6e:8a:9f:ba:88:93:5c:cc: 5c:43:df:29:71:30:94:38:19:28:12:1c:07:f0:28:a4:66:49: c0:bb:0d:9e:8d:a2:c1:1d:b5:6c:ab:42:5c:88:c7:80:ec:75: c6:4a:20:5c:6b:de:fe:fa:73:86:d3:4b:cc:de:ab:49:b4:36: dd:83:b8:52:c5:fc:11:3f:c2:13:5d:04:82:bb:62:ce:05:50: 5c:ee:ea:dc:54:02:e1:94:b7:1c:bb:06:4b:16:0f:3d:3e:66: 43:25:65:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYxMDI2MTgxNjAyWhcNMjYxMTAyMTgxNjAyWjAYMRYwFAYD VQQDEw02YWRmOThlMi1kM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSg9aaupYlu5wig7lDqZGSqifi14sCZ8tNOpa0nCrGu/I9Tu+XBoq6DS9xFD l3sWfqDxaGChnRZ3fh0if3eu4B1yE3Trc4bFM3C0ZS/ki0rMB6Lk5DVqr1V/srnk eAaX1p1AQFIPdVEPHQEZJqpe1fVlqK3mS9xPO/8fqE0XsY5CVm+atRXLCFdsQ6My iLRmpZHjGFI2GvXFYo3W6XpTzANSNz7k4vGSN7ZZfN69QzgRJev8KO4CkeJqVSm9 NUNogDj986pc7SRKhrlaQfbuWDEy630dasevnoNkiXjI0rqpPNAWhHR6besKc82V Sx0haSnY1QQbsv3EEziw2R9cRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGX9ykm+ ihpBk/YceXL2jCJe8qwLMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7WpoXKiqShnapQZNIcV1ZKG+cfuYevKHaOC08C1x7HaS1B2/TOK2/GAir4H 0y53bmpZv0Cmgx19ouRuVeX096f6Zr74M3MlxXWMCK2LJQcS/gFRDxHCIe4QAW0I ErQLEKjBlevZ3UNGBtD1T0uU7H+eRAfy2p6eHukw6q3RKwbsShItpdYW/Je9LqvZ B2e14/UIfkx/gUte0W6Kn7qIk1zMXEPfKXEwlDgZKBIcB/AopGZJwLsNno2iwR21 bKtCXIjHgOx1xkogXGve/vpzhtNLzN6rSbQ23YO4UsX8ET/CE10EgrtizgVQXO7q 3FQC4ZS3HLsGSxYPPT5mQyVl1g== -----END CERTIFICATE-----Generated at Tue Oct 27 09:15:09 2026 by rpki-client