$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: sklgfWZCsroLxOhjO9YMUgUW3+51xW/UlhPGKKYLeO8= Subject key identifier: 34:27:1A:F1:21:4F:3D:F2:2E:06:ED:A9:F0:DC:14:24:32:41:6B:57 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 038B Signing time: Fri 11 Sep 2026 00:33:06 +0000 Manifest this update: Fri 11 Sep 2026 00:33:05 +0000 Manifest next update: Fri 18 Sep 2026 00:33:05 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: hIa1zqgJmPIIX5hrGf0h1WoOfXRmIOsYJTOSy2pm/po=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: NnBviFT4TY6Qwr2zsDo63Z5Jckcd6G9/6LCOasbnkg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Sep 11 00:33:05 2026 GMT Not After : Sep 18 00:33:05 2026 GMT Subject: CN=6aa34c42-8037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:97:a1:c7:51:70:a8:c3:10:1c:3d:91:8d: b4:52:fe:93:3c:c5:74:6f:4d:5a:ee:62:34:a8:49: 12:06:ec:e5:fa:62:ad:ac:f9:94:8a:0d:49:26:20: 6b:4c:61:f2:7f:d4:9e:18:b4:be:f1:7d:32:42:1c: 3e:14:29:e0:21:51:dd:ad:4d:c1:43:1a:50:04:84: ab:12:30:1c:6c:f0:0e:9f:e5:90:eb:bd:90:7c:2a: e1:ac:10:b6:76:78:23:a1:85:7b:5d:2c:56:f2:d7: ce:31:63:e4:17:4e:29:fe:09:6b:00:16:27:03:33: f2:85:45:1b:d6:15:93:bd:d4:58:b6:57:27:92:c1: 3f:bc:2d:b9:d2:f7:1a:c0:a1:a1:e3:5d:5a:5f:67: e3:fd:18:33:76:8e:66:57:49:c0:4f:69:59:c2:bf: 2f:72:46:65:b5:ca:fd:f9:34:9c:c0:5b:73:1f:b6: b8:4c:02:b6:21:b7:a9:f9:48:81:82:81:67:bd:0c: 70:5c:57:ae:c3:8f:92:64:6d:07:6c:e7:f3:02:ac: 85:43:20:61:4e:59:c8:ce:23:02:19:3f:3f:0a:74: c6:c5:1e:c4:a5:7f:c4:8b:39:6a:13:47:2b:71:49: 44:80:c2:53:6d:fb:8e:e8:aa:3f:16:7d:1e:2e:48: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:27:1A:F1:21:4F:3D:F2:2E:06:ED:A9:F0:DC:14:24:32:41:6B:57 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f2:d0:d1:c2:55:00:75:38:18:0d:f6:36:70:9c:33:f8:96: a9:f1:b4:76:ca:0d:09:df:45:a1:e1:2e:2d:0e:62:7d:ef:53: e6:1d:dd:01:79:23:f6:21:3a:96:8f:83:e9:35:81:4a:36:fe: d1:18:e8:10:96:a4:b5:3a:03:7c:8e:6b:5f:02:d7:29:03:28: 85:0a:f3:d6:eb:a6:48:0c:e5:86:4f:b0:52:02:41:59:9b:94: 49:24:45:67:f2:81:bf:11:c6:92:f0:bf:a7:c9:25:27:d8:04: fb:9f:13:b4:59:29:2b:08:01:e9:df:6c:5a:bc:b2:ec:f0:7e: 61:0a:e8:67:2c:da:23:af:95:9c:8c:2c:19:c9:73:e2:42:f3: e4:bb:6c:5f:88:0e:63:f7:a2:eb:79:11:be:36:26:4f:64:88: 95:69:78:df:9f:23:75:46:94:79:55:a3:0a:0c:e2:29:64:4e: 3e:57:70:82:34:7b:fb:b4:4e:bd:f5:12:a4:96:72:72:43:e8: 01:b9:33:ee:25:81:96:27:0e:9e:b9:1f:43:64:12:49:09:8a: 69:9e:d4:f1:83:2d:de:3e:f3:e1:42:6f:da:5e:76:4a:0a:c0: ca:0e:ab:1d:75:e9:d4:95:ff:04:40:e4:4a:fb:77:54:de:1c: ab:02:48:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjYwOTExMDAzMzA1WhcNMjYwOTE4MDAzMzA1WjAYMRYwFAYD VQQDEw02YWEzNGM0Mi04MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+KXocdRcKjDEBw9kY20Uv6TPMV0b01a7mI0qEkSBuzl+mKtrPmUig1JJiBr TGHyf9SeGLS+8X0yQhw+FCngIVHdrU3BQxpQBISrEjAcbPAOn+WQ672QfCrhrBC2 dngjoYV7XSxW8tfOMWPkF04p/glrABYnAzPyhUUb1hWTvdRYtlcnksE/vC250vca wKGh411aX2fj/Rgzdo5mV0nAT2lZwr8vckZltcr9+TScwFtzH7a4TAK2Ibep+UiB goFnvQxwXFeuw4+SZG0HbOfzAqyFQyBhTlnIziMCGT8/CnTGxR7EpX/EizlqE0cr cUlEgMJTbfuO6Ko/Fn0eLkhCrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQnGvEh Tz3yLgbtqfDcFCQyQWtXMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdPLQ0cJVAHU4GA32NnCcM/iWqfG0dsoNCd9FoeEuLQ5ife9T5h3dAXkj9iE6 lo+D6TWBSjb+0RjoEJaktToDfI5rXwLXKQMohQrz1uumSAzlhk+wUgJBWZuUSSRF Z/KBvxHGkvC/p8klJ9gE+58TtFkpKwgB6d9sWryy7PB+YQroZyzaI6+VnIwsGclz 4kLz5LtsX4gOY/ei63kRvjYmT2SIlWl4358jdUaUeVWjCgziKWROPldwgjR7+7RO vfUSpJZyckPoAbkz7iWBlicOnrkfQ2QSSQmKaZ7U8YMt3j7z4UJv2l52SgrAyg6r HXXp1JX/BEDkSvt3VN4cqwJI2A== -----END CERTIFICATE-----Generated at Fri Sep 11 17:14:45 2026 by rpki-client