$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: tlceKuKFRDZlGFjwymairGZ2l2nz4o4xLlv6CXvZNcA= Subject key identifier: EC:32:0F:90:0B:AB:4D:16:88:D4:36:87:E5:68:ED:42:5F:B8:0F:F4 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 04C4 Signing time: Tue 27 Oct 2026 01:21:47 +0000 Manifest this update: Tue 27 Oct 2026 01:21:47 +0000 Manifest next update: Tue 03 Nov 2026 01:21:47 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: L9AirsXkMycoT1ckh3bEKlRirL+RY0cmljogV2n5xMo=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: vkD0HPyQAf9lwCEzMqH+93Ib4tig40Fj/qtTMCAMdbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Oct 27 01:21:47 2026 GMT Not After : Nov 3 01:21:47 2026 GMT Subject: CN=6adffcab-2b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:68:c5:84:ac:ce:07:fb:fa:e7:e1:f4:04: b0:be:d0:98:dc:95:4d:40:82:dc:cd:27:48:0d:94: 74:62:f8:09:4b:ab:9a:0a:83:9b:2f:93:b4:d5:bc: fc:9f:e9:57:90:1e:cd:5e:60:a4:63:31:e5:f4:b4: 2d:a1:dc:fb:40:2d:46:e6:ac:6b:31:20:bc:ac:6f: 90:d9:05:18:a2:0a:18:10:5d:7d:56:c3:70:b3:ab: 42:02:97:d1:e4:e6:69:23:be:75:89:4a:e8:37:60: 56:74:07:0d:39:be:ca:fe:21:59:66:e9:b9:35:fc: 3e:d9:db:bd:f8:2e:71:b9:fd:53:d3:2a:0f:89:d2: 51:36:15:0a:ff:a4:51:87:4a:35:71:1d:61:bb:72: 49:15:b1:db:f5:58:11:db:25:7b:bd:49:06:88:e7: da:06:c7:ef:b1:c4:5c:04:38:9a:62:d9:e7:80:f6: 6f:6a:d8:d8:ff:39:09:59:d3:b2:e1:65:05:66:69: 38:7d:88:a3:64:6b:70:13:db:9c:6e:10:2b:0e:00: 32:f8:ba:55:e4:47:85:23:c5:dc:2b:b4:98:61:9d: 0e:58:14:25:63:89:b1:0d:29:80:bf:ca:41:e2:5f: 39:de:e6:f1:f7:4b:96:a5:58:d8:b6:2e:6c:17:06: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:0F:90:0B:AB:4D:16:88:D4:36:87:E5:68:ED:42:5F:B8:0F:F4 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:2b:49:1b:47:a4:e7:c0:8b:43:77:0b:69:d3:ee:7c:ef:98: 00:1e:0e:21:d6:92:65:f0:25:fc:45:c7:db:4d:22:c9:35:94: 4f:4c:51:8e:bf:96:87:b5:5e:94:70:7c:a2:6b:57:e7:1d:a9: 5a:5d:e3:d1:96:a8:d6:0c:bc:36:60:bf:31:9a:c4:6b:54:c9: bf:6b:f4:f2:79:8c:84:2f:5c:66:2b:28:8e:7d:1b:5a:06:00: e5:45:46:da:c6:9e:a3:0f:9f:c8:54:ce:44:8c:bc:fc:fd:2f: 63:fb:d3:e7:aa:1b:41:fa:9b:fc:fc:82:63:77:bf:e2:77:fd: 64:a8:dc:41:6a:8f:1b:71:a6:1c:3a:29:ea:d8:f2:7a:a1:45: eb:79:70:5f:29:17:b3:b9:57:33:7b:fb:e7:0a:b1:26:ed:fb: 3e:f3:c3:ac:62:c4:5b:64:42:a3:0e:23:9e:2d:13:e5:af:ad: 61:6f:5c:f0:91:f3:e4:a7:12:e3:47:58:da:0b:23:13:7b:b8: 8e:f0:e6:73:4f:36:e4:66:72:21:5f:52:c1:d3:ed:51:63:60: 98:97:6e:a9:cb:e3:e5:4f:35:be:31:a0:71:23:94:8f:c5:5d: ea:47:04:83:fc:e4:33:68:8e:e1:54:0f:16:61:db:bc:5a:9f: ae:e4:61:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjYxMDI3MDEyMTQ3WhcNMjYxMTAzMDEyMTQ3WjAYMRYwFAYD VQQDEw02YWRmZmNhYi0yYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqNoxYSszgf7+ufh9ASwvtCY3JVNQILczSdIDZR0YvgJS6uaCoObL5O01bz8 n+lXkB7NXmCkYzHl9LQtodz7QC1G5qxrMSC8rG+Q2QUYogoYEF19VsNws6tCApfR 5OZpI751iUroN2BWdAcNOb7K/iFZZum5Nfw+2du9+C5xuf1T0yoPidJRNhUK/6RR h0o1cR1hu3JJFbHb9VgR2yV7vUkGiOfaBsfvscRcBDiaYtnngPZvatjY/zkJWdOy 4WUFZmk4fYijZGtwE9ucbhArDgAy+LpV5EeFI8XcK7SYYZ0OWBQlY4mxDSmAv8pB 4l853ubx90uWpVjYti5sFwZZ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwyD5AL q00WiNQ2h+Vo7UJfuA/0MB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUCtJG0ek58CLQ3cLadPufO+YAB4OIdaSZfAl/EXH200iyTWUT0xRjr+Wh7Ve lHB8omtX5x2pWl3j0Zao1gy8NmC/MZrEa1TJv2v08nmMhC9cZisojn0bWgYA5UVG 2saeow+fyFTORIy8/P0vY/vT56obQfqb/PyCY3e/4nf9ZKjcQWqPG3GmHDop6tjy eqFF63lwXykXs7lXM3v75wqxJu37PvPDrGLEW2RCow4jni0T5a+tYW9c8JHz5KcS 40dY2gsjE3u4jvDmc0825GZyIV9SwdPtUWNgmJduqcvj5U81vjGgcSOUj8Vd6kcE g/zkM2iO4VQPFmHbvFqfruRhGw== -----END CERTIFICATE-----Generated at Wed Oct 28 18:44:24 2026 by rpki-client