$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: fL0fgj3mK2bnXpIbEDIIql2viWEn70QxOgSAf+m2Lss= Subject key identifier: 8F:80:CF:DD:4B:79:7C:15:84:2A:8C:9D:3B:1E:B9:20:E9:06:D9:16 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0465 Signing time: Tue 27 Oct 2026 00:03:20 +0000 Manifest this update: Tue 27 Oct 2026 00:03:20 +0000 Manifest next update: Tue 03 Nov 2026 00:03:20 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: ZWewGOdmAibPb26eiikOUwOJjvDCFUUpmFKn1TGzzMQ=) 2: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=) 3: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Oct 27 00:03:20 2026 GMT Not After : Nov 3 00:03:20 2026 GMT Subject: CN=6adfea48-0f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:3f:e7:19:04:a8:2d:f8:61:8b:6a:53:2f: ad:26:17:60:3e:d8:d3:6b:f6:d2:6e:ae:af:11:d6: 2b:13:4c:e5:9c:78:5f:00:d5:21:c5:cc:a8:50:42: 8d:f4:30:be:54:02:ca:08:35:17:02:fa:e3:3f:e7: aa:bb:e5:8b:b2:8c:48:a9:f4:a9:24:e7:5b:bd:e2: 2c:7a:6e:67:b9:dd:28:4d:1f:07:6d:c4:9e:b6:0e: 1b:91:7e:ad:1a:06:86:80:91:c5:27:44:9e:f9:39: 66:cb:ad:f0:a5:8e:38:a4:8b:3a:ac:a7:89:5f:0c: 12:38:5b:bf:f5:e4:f5:47:64:8c:d2:6d:bb:7b:3f: 10:02:f2:8f:57:1b:2b:51:fd:ce:46:ec:d6:ec:b3: c1:b9:a1:2d:23:84:4f:4d:73:d2:72:94:9c:32:6a: 02:b5:45:fb:a0:ec:7d:2b:10:af:27:c9:9d:02:36: c3:3f:f9:43:42:a3:b2:4b:c5:6f:89:a7:08:e0:b2: 21:a8:0d:49:7f:2f:71:3f:f9:d2:9f:8f:bc:1d:30: b5:14:1f:bf:e8:81:dd:45:0f:69:fe:2e:84:94:25: 17:c9:4a:4e:88:88:c4:07:9e:26:50:d1:0f:a4:f2: bb:ca:84:97:d4:d0:90:f9:0b:54:f0:a5:fc:07:d6: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:CF:DD:4B:79:7C:15:84:2A:8C:9D:3B:1E:B9:20:E9:06:D9:16 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:37:d7:0f:fd:79:65:fa:d5:06:5a:fc:09:53:02:e7:39:5d: 54:9a:92:7a:7f:41:e7:2d:d4:5e:5c:ce:85:99:3f:8a:e6:0e: 27:d6:b2:f2:85:9c:7d:36:74:75:43:ac:11:f3:e0:48:1a:04: ee:b4:6c:3a:1f:62:9c:d6:72:d5:84:61:05:77:e8:db:94:27: 33:78:04:70:3b:d1:58:e1:5a:38:67:8d:88:b8:99:b8:fa:a4: ae:c3:e1:fd:af:8f:72:4d:e3:be:a4:43:fd:fb:16:1e:8a:9d: 5a:e0:1b:7e:f2:61:6b:81:1f:9a:d9:91:58:c0:76:14:15:b3: b6:80:0a:45:53:42:a4:38:fb:65:2a:5d:e2:41:2a:13:e4:cf: 70:f9:6a:cf:5f:d0:b7:81:e9:a5:fe:9d:24:f0:5d:0e:6d:7a: 83:96:99:f7:8f:f6:79:d9:90:fc:f6:43:1d:10:b0:86:ee:62: b6:21:d4:a1:fa:8b:14:f0:2c:14:e2:56:39:43:3a:1f:e8:c1: e3:8a:32:cd:8f:0f:d9:e1:47:67:a2:b5:02:78:d1:ba:13:3b: e2:8a:e9:ab:e2:8f:80:c1:94:0b:c8:2c:cb:31:df:d7:e4:83: 13:85:68:19:2d:fe:63:85:77:a1:d7:20:91:7a:21:b4:6f:ed: aa:80:1a:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYxMDI3MDAwMzIwWhcNMjYxMTAzMDAwMzIwWjAYMRYwFAYD VQQDEw02YWRmZWE0OC0wZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLs/5xkEqC34YYtqUy+tJhdgPtjTa/bSbq6vEdYrE0zlnHhfANUhxcyoUEKN 9DC+VALKCDUXAvrjP+equ+WLsoxIqfSpJOdbveIsem5nud0oTR8HbcSetg4bkX6t GgaGgJHFJ0Se+Tlmy63wpY44pIs6rKeJXwwSOFu/9eT1R2SM0m27ez8QAvKPVxsr Uf3ORuzW7LPBuaEtI4RPTXPScpScMmoCtUX7oOx9KxCvJ8mdAjbDP/lDQqOyS8Vv iacI4LIhqA1Jfy9xP/nSn4+8HTC1FB+/6IHdRQ9p/i6ElCUXyUpOiIjEB54mUNEP pPK7yoSX1NCQ+QtU8KX8B9br5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+Az91L eXwVhCqMnTseuSDpBtkWMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACTfXD/15ZfrVBlr8CVMC5zldVJqSen9B5y3UXlzOhZk/iuYOJ9ay8oWcfTZ0 dUOsEfPgSBoE7rRsOh9inNZy1YRhBXfo25QnM3gEcDvRWOFaOGeNiLiZuPqkrsPh /a+Pck3jvqRD/fsWHoqdWuAbfvJha4EfmtmRWMB2FBWztoAKRVNCpDj7ZSpd4kEq E+TPcPlqz1/Qt4Hppf6dJPBdDm16g5aZ94/2edmQ/PZDHRCwhu5itiHUofqLFPAs FOJWOUM6H+jB44oyzY8P2eFHZ6K1AnjRuhM74orpq+KPgMGUC8gsyzHf1+SDE4Vo GS3+Y4V3odcgkXohtG/tqoAaWQ== -----END CERTIFICATE-----Generated at Tue Oct 27 15:37:17 2026 by rpki-client