$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: DK+8deKrlNzXpRrBFs/yNGrUL8B0OzPOHoeK8fbEoSA= Subject key identifier: 76:A4:27:84:75:0C:EB:E1:4B:4E:96:8C:57:91:43:90:76:55:E4:C0 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 025D Signing time: Sun 25 Oct 2026 02:48:58 +0000 Manifest this update: Sun 25 Oct 2026 02:48:57 +0000 Manifest next update: Sun 01 Nov 2026 02:48:57 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: BOy8y7H1cclt+b3Tv889Li0asltFwbuhuoZRecTlTtc=) 2: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: PsUZYEFQ3YDAk7SEhruCNoeg40A0hC1loDNctnkPink=) 3: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: cMVoIEw+TpzHoIqDpumZq8IhMLK4MbPk8VbE2szvauI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Oct 25 02:48:57 2026 GMT Not After : Nov 1 02:48:57 2026 GMT Subject: CN=6add6e19-a6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:7f:3a:8b:62:dd:bc:5b:49:b5:d6:a3:fe: 60:66:2e:0f:b5:5d:1f:20:3a:1e:16:fb:3c:c1:0d: 55:4a:88:ed:e9:58:c7:6b:a6:2e:04:33:e5:d1:b7: 4f:2f:fa:c5:58:42:26:45:b5:fb:0d:9a:90:67:8f: 19:a1:fd:f3:36:81:ae:52:43:84:21:29:86:99:98: dc:15:7b:92:54:7a:2c:86:34:9a:ae:32:2e:48:a3: b5:e8:8d:e3:3e:5f:38:da:9e:e9:3d:ff:2e:14:c8: fb:60:8b:33:9f:14:80:00:ad:f5:fa:9a:7c:a1:46: 38:d5:cd:49:5d:7d:12:79:30:a7:b4:1c:c0:b0:80: fd:d0:35:c5:f3:cb:a4:f4:db:0a:75:ac:1c:ce:2c: 87:3d:1b:88:e4:45:0c:15:af:78:d0:fb:95:7b:7c: 45:6e:83:16:4e:7d:96:73:8b:7e:3b:78:b5:72:0f: b3:8c:db:73:83:9a:aa:d8:f8:2c:d9:c0:0f:40:10: 5a:36:58:8a:54:1e:57:63:f8:80:8a:54:96:54:43: 99:a2:8c:dd:d2:88:f9:1f:fd:6a:4f:47:a8:55:77: 9d:ce:66:89:66:15:50:48:20:9d:3c:81:eb:ff:fc: cb:c9:74:de:41:8f:19:92:44:b2:12:57:a3:89:e6: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A4:27:84:75:0C:EB:E1:4B:4E:96:8C:57:91:43:90:76:55:E4:C0 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bf:74:95:83:a3:d6:a1:a0:06:ee:03:f8:90:af:c0:12:4e: 16:33:c3:4b:19:2d:78:83:9b:f7:e2:69:e6:b4:37:2b:47:a6: 39:a7:91:79:f7:73:63:02:20:16:20:a6:6f:f3:6c:01:5f:f5: c4:97:1d:c5:dd:64:62:8a:b6:a7:64:b0:f1:11:82:aa:8e:7b: 04:f6:5f:eb:58:0b:33:f1:fd:0e:a1:d7:06:49:ab:bd:71:8f: 2f:ca:e4:a2:4b:a2:88:d5:d6:e6:12:c1:c8:7a:b9:16:93:e4: 88:f3:5c:2b:f1:1b:ac:fd:e2:42:b1:7c:f0:92:e4:97:c4:9b: 5e:19:fb:91:a5:d8:d3:04:b1:f2:62:18:39:f7:11:c2:cc:73: a4:1e:81:05:95:80:e4:a7:1f:f2:dc:98:15:97:b5:e1:48:b4: 1b:b6:28:d0:06:d9:88:e7:0a:16:9c:c5:77:61:fb:49:5d:0f: 66:58:d1:ef:5c:8b:62:c1:b5:55:04:77:5b:37:7e:87:b5:c0: fa:fe:6e:1e:c0:34:8e:93:ea:2b:5e:59:20:ab:4c:b7:5b:db: ab:fe:a7:4a:0a:a2:e6:99:e2:31:13:ee:a8:11:a3:f5:2b:f2: 6b:e1:4b:1e:3e:4c:82:09:56:0f:89:22:ab:0c:d2:37:04:c5: dd:16:da:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjYxMDI1MDI0ODU3WhcNMjYxMTAxMDI0ODU3WjAYMRYwFAYD VQQDEw02YWRkNmUxOS1hNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowh/Ooti3bxbSbXWo/5gZi4PtV0fIDoeFvs8wQ1VSojt6VjHa6YuBDPl0bdP L/rFWEImRbX7DZqQZ48Zof3zNoGuUkOEISmGmZjcFXuSVHoshjSarjIuSKO16I3j Pl842p7pPf8uFMj7YIsznxSAAK31+pp8oUY41c1JXX0SeTCntBzAsID90DXF88uk 9NsKdawcziyHPRuI5EUMFa940PuVe3xFboMWTn2Wc4t+O3i1cg+zjNtzg5qq2Pgs 2cAPQBBaNliKVB5XY/iAilSWVEOZoozd0oj5H/1qT0eoVXedzmaJZhVQSCCdPIHr //zLyXTeQY8ZkkSyElejieZcLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHakJ4R1 DOvhS06WjFeRQ5B2VeTAMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsr90lYOj1qGgBu4D+JCvwBJOFjPDSxkteIOb9+Jp5rQ3K0emOaeRefdzYwIg FiCmb/NsAV/1xJcdxd1kYoq2p2Sw8RGCqo57BPZf61gLM/H9DqHXBkmrvXGPL8rk okuiiNXW5hLByHq5FpPkiPNcK/EbrP3iQrF88JLkl8SbXhn7kaXY0wSx8mIYOfcR wsxzpB6BBZWA5Kcf8tyYFZe14Ui0G7Yo0AbZiOcKFpzFd2H7SV0PZljR71yLYsG1 VQR3Wzd+h7XA+v5uHsA0jpPqK15ZIKtMt1vbq/6nSgqi5pniMRPuqBGj9Svya+FL Hj5MgglWD4kiqwzSNwTF3RbaLw== -----END CERTIFICATE-----Generated at Mon Oct 26 19:05:41 2026 by rpki-client