$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: U5Sunr1Wy2li0Y/5S4+OPKoiHssglBRExeCQFotzbH4= Subject key identifier: BF:3B:D8:52:88:C5:5B:C2:69:BA:BA:9E:AB:B0:0A:B9:49:51:E1:C3 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 052A Signing time: Tue 20 Oct 2026 23:46:33 +0000 Manifest this update: Tue 20 Oct 2026 23:46:32 +0000 Manifest next update: Tue 27 Oct 2026 23:46:32 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: k03wSC43sBVLonuzRiLlEVhYi3OmFDtuoTqnBewR47g=) 2: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=) 3: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=) 4: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 23:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Oct 20 23:46:32 2026 GMT Not After : Oct 27 23:46:32 2026 GMT Subject: CN=6ad7fd59-7ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:d3:e6:53:33:2f:8a:30:67:e3:14:9d:0a: d3:e9:5a:8b:0a:b4:52:b0:51:81:a5:b1:5e:92:92: 13:87:d0:4b:2d:f4:0a:ab:01:8b:bf:6f:c4:7d:1c: 1a:70:91:ee:79:5a:6b:c5:49:eb:f7:80:6f:23:55: 84:43:ec:94:85:8a:f5:6e:26:49:43:b5:b5:b8:5c: 5a:bf:a6:f8:a6:c4:2b:31:2a:e6:cf:64:d8:b1:8d: 2b:fd:7a:12:6e:29:27:68:b0:fa:2b:88:54:ce:68: 8b:ae:d1:60:fd:32:e6:0c:ee:02:77:39:4b:c2:ba: 4b:2b:5e:7a:14:7b:73:98:f6:31:bd:c3:0c:6e:25: 8d:83:7c:7f:8e:d9:e3:50:dd:e8:3f:d4:f2:d9:3c: bd:c9:5f:7c:00:9d:c5:6d:75:8a:41:8b:7e:ec:b2: 6e:42:4d:68:db:54:1b:0a:50:37:5b:8f:55:9d:c4: d0:87:d9:63:1f:54:46:56:a3:b4:4d:5e:25:5e:eb: 31:fb:e0:6b:0d:1b:eb:b0:4c:28:9a:95:24:35:76: 0c:2f:74:39:9e:8f:6a:58:2e:b5:4d:5e:da:b6:0a: 40:27:66:bd:90:71:58:da:13:3c:85:88:5e:af:58: ef:55:73:10:d7:03:00:92:a1:07:31:7c:bd:b7:80: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:D8:52:88:C5:5B:C2:69:BA:BA:9E:AB:B0:0A:B9:49:51:E1:C3 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:38:71:42:17:90:44:f5:54:5e:60:db:48:28:22:f0:7a:e4: 9f:77:2a:f2:50:9e:9b:d6:2a:a5:6b:2e:2c:4c:ef:3b:1e:ee: 76:35:cc:3d:f8:f0:57:65:e5:28:8a:9c:f3:b4:4f:2f:9e:87: e8:09:69:68:c4:04:fc:44:b7:c3:a3:c4:03:a6:39:a7:71:21: 08:01:24:69:5c:e2:fa:0c:4f:28:fd:8a:07:21:67:6d:a9:2f: f8:f3:05:ed:8b:d7:c5:eb:d6:51:16:c5:2f:c6:6d:b4:b6:a8: 9e:ee:76:0b:67:07:f2:54:7d:f0:10:ac:92:92:07:4e:02:b0: 65:b4:d9:c7:5d:43:40:5c:08:bf:da:dd:a9:89:79:3d:c5:4e: 0b:6f:ed:94:5d:93:ef:7a:04:10:24:d0:2d:6b:1e:55:88:eb: 8c:b4:8b:73:57:24:92:0d:98:ca:c2:ab:ca:73:14:5c:0f:60: 6a:84:7b:d3:68:73:23:e9:a4:51:6b:44:99:79:e0:65:4f:d4: dd:b8:37:4d:9d:3e:f5:01:92:2b:25:68:a4:64:4f:4f:c3:81: fc:67:dd:ff:b4:3a:88:e5:38:32:ee:7f:4e:db:d6:ce:09:a6: e3:41:01:2e:97:12:45:86:de:46:d7:e3:a9:56:ba:15:f5:0e: a3:24:69:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYxMDIwMjM0NjMyWhcNMjYxMDI3MjM0NjMyWjAYMRYwFAYD VQQDEw02YWQ3ZmQ1OS03ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruHT5lMzL4owZ+MUnQrT6VqLCrRSsFGBpbFekpITh9BLLfQKqwGLv2/EfRwa cJHueVprxUnr94BvI1WEQ+yUhYr1biZJQ7W1uFxav6b4psQrMSrmz2TYsY0r/XoS biknaLD6K4hUzmiLrtFg/TLmDO4CdzlLwrpLK156FHtzmPYxvcMMbiWNg3x/jtnj UN3oP9Ty2Ty9yV98AJ3FbXWKQYt+7LJuQk1o21QbClA3W49VncTQh9ljH1RGVqO0 TV4lXusx++BrDRvrsEwompUkNXYML3Q5no9qWC61TV7atgpAJ2a9kHFY2hM8hYhe r1jvVXMQ1wMAkqEHMXy9t4C8DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL872FKI xVvCabq6nquwCrlJUeHDMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAezhxQheQRPVUXmDbSCgi8Hrkn3cq8lCem9YqpWsuLEzvOx7udjXMPfjwV2Xl KIqc87RPL56H6AlpaMQE/ES3w6PEA6Y5p3EhCAEkaVzi+gxPKP2KByFnbakv+PMF 7YvXxevWURbFL8ZttLaonu52C2cH8lR98BCskpIHTgKwZbTZx11DQFwIv9rdqYl5 PcVOC2/tlF2T73oEECTQLWseVYjrjLSLc1ckkg2YysKrynMUXA9gaoR702hzI+mk UWtEmXngZU/U3bg3TZ0+9QGSKyVopGRPT8OB/Gfd/7Q6iOU4Mu5/TtvWzgmm40EB LpcSRYbeRtfjqVa6FfUOoyRp4Q== -----END CERTIFICATE-----Generated at Wed Oct 21 21:13:26 2026 by rpki-client