$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: w1kQZA+EMS67vfOapvzNnjwzchlW+BEVBslXz5enWCs= Subject key identifier: 1F:41:EB:DB:C3:A9:66:17:F5:82:33:CD:51:A3:24:DD:E6:5D:F0:89 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 044B Signing time: Fri 04 Sep 2026 23:59:24 +0000 Manifest this update: Fri 04 Sep 2026 23:59:23 +0000 Manifest next update: Fri 11 Sep 2026 23:59:23 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: J40nvZtdisj9MUzXSGalHhH7JpIeFjRZUnPTQWDhiLA=) 2: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=) 4: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Sep 4 23:59:23 2026 GMT Not After : Sep 11 23:59:23 2026 GMT Subject: CN=6a9b5b5b-5905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:f2:91:55:8e:b8:22:4b:4c:f0:aa:07:c3: 14:cf:89:9a:ab:55:69:52:73:c1:a2:b9:41:7d:f4: 46:11:24:b7:c5:97:fc:28:fd:dd:37:f6:ae:f1:c8: 77:8a:1c:fe:2f:43:85:54:bc:46:ce:5a:99:9a:5a: 47:47:27:16:fb:bb:bd:ab:05:31:f4:93:09:6d:1c: d0:c1:89:fa:4b:dd:fe:7a:26:25:e7:4d:17:b4:58: e1:78:4b:df:4c:4c:76:00:a5:18:27:47:6d:88:e4: 78:72:0a:74:a9:7a:ed:79:b9:96:22:fa:d2:60:8f: ed:9a:83:4e:1e:95:4e:61:f3:aa:22:33:cc:ec:b4: 0d:4b:53:5d:53:38:e4:06:13:b4:f3:11:78:ca:62: 17:87:4e:f4:21:51:ff:96:5a:82:cf:1e:94:e4:34: ab:f9:22:cc:1c:69:0c:a6:e5:85:6e:fb:35:79:34: ae:e3:6f:bf:30:d6:63:ea:a1:3a:74:08:a6:0a:91: 92:73:42:18:97:83:3d:6d:5d:eb:26:ce:69:d9:05: a2:ab:6c:fb:86:f9:d0:51:1c:fa:a8:c7:7e:36:6e: b2:b8:50:c2:9c:ba:b6:f1:61:8b:a6:da:46:0e:8f: 02:af:8b:0c:13:3e:d3:03:70:a1:46:04:a1:bc:98: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:41:EB:DB:C3:A9:66:17:F5:82:33:CD:51:A3:24:DD:E6:5D:F0:89 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0c:33:78:e9:d7:e9:b7:6c:8b:6d:8c:3e:d8:f5:80:96:88: ae:60:72:e2:13:bb:99:34:4c:ec:5f:36:30:1d:0c:55:ca:19: 56:71:b3:ff:8b:12:2d:49:8c:12:7d:98:29:7d:bc:1a:ff:7c: aa:33:21:41:1b:db:a3:bb:8d:29:de:ab:ba:d5:55:73:24:e1: 0f:51:c3:7f:f4:ec:ba:05:6b:61:6b:ba:f0:b1:6b:50:c4:02: e0:cc:d9:96:74:3d:3f:b8:a4:f1:a7:38:31:d9:c2:21:a9:01: 52:79:af:e5:de:13:7b:83:f8:bd:2b:aa:12:ec:36:e6:a5:48: 5a:de:78:64:fa:8e:cb:38:1c:0e:92:8f:43:1d:b2:3b:57:bc: 7c:ae:33:a6:f0:d6:b7:20:4e:5a:5e:99:11:38:9f:4d:39:e0: 90:9f:17:81:13:96:f7:d5:18:1d:66:8e:90:52:de:e3:64:1b: 62:a6:ce:8e:c3:11:f2:e7:bd:36:97:15:60:95:8d:a6:af:d2: 9c:2c:f1:71:37:4c:ad:94:5b:be:f4:d9:f7:db:2e:b4:36:b7: ac:16:d2:1b:89:ab:b0:87:31:bb:7f:44:2e:c4:80:a2:18:ac: b2:c9:da:ab:4a:c3:23:3b:7f:30:1c:ae:08:52:c8:7c:f8:b9: 9f:15:1c:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwOTA0MjM1OTIzWhcNMjYwOTExMjM1OTIzWjAYMRYwFAYD VQQDEw02YTliNWI1Yi01OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ7ykVWOuCJLTPCqB8MUz4maq1VpUnPBorlBffRGESS3xZf8KP3dN/au8ch3 ihz+L0OFVLxGzlqZmlpHRycW+7u9qwUx9JMJbRzQwYn6S93+eiYl500XtFjheEvf TEx2AKUYJ0dtiOR4cgp0qXrtebmWIvrSYI/tmoNOHpVOYfOqIjPM7LQNS1NdUzjk BhO08xF4ymIXh070IVH/llqCzx6U5DSr+SLMHGkMpuWFbvs1eTSu42+/MNZj6qE6 dAimCpGSc0IYl4M9bV3rJs5p2QWiq2z7hvnQURz6qMd+Nm6yuFDCnLq28WGLptpG Do8Cr4sMEz7TA3ChRgShvJiOJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9B69vD qWYX9YIzzVGjJN3mXfCJMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOwwzeOnX6bdsi22MPtj1gJaIrmBy4hO7mTRM7F82MB0MVcoZVnGz/4sSLUmM En2YKX28Gv98qjMhQRvbo7uNKd6rutVVcyThD1HDf/TsugVrYWu68LFrUMQC4MzZ lnQ9P7ik8ac4MdnCIakBUnmv5d4Te4P4vSuqEuw25qVIWt54ZPqOyzgcDpKPQx2y O1e8fK4zpvDWtyBOWl6ZETifTTngkJ8XgROW99UYHWaOkFLe42QbYqbOjsMR8ue9 NpcVYJWNpq/SnCzxcTdMrZRbvvTZ99sutDa3rBbSG4mrsIcxu39ELsSAohisssna q0rDIzt/MByuCFLIfPi5nxUcKA== -----END CERTIFICATE-----Generated at Sat Sep 5 07:33:59 2026 by rpki-client