$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: 2Ozm4i7f4heYAK0Rw8ouRlll4VgLya3W6W+62ySc1/A= Subject key identifier: E4:0D:F4:22:1B:1A:4C:5A:88:9D:95:80:55:71:92:E5:58:1C:9D:61 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 01F8 Signing time: Wed 23 Sep 2026 03:07:07 +0000 Manifest this update: Wed 23 Sep 2026 03:07:07 +0000 Manifest next update: Wed 30 Sep 2026 03:07:07 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: Cnxs+hZfZil4vXjkaiLTGuXJZlHPp8pYaVnwKaupqc8=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: 2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Sep 23 03:07:07 2026 GMT Not After : Sep 30 03:07:07 2026 GMT Subject: CN=6ab3425b-9e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:96:60:60:0c:a3:0e:d3:8b:9b:bd:18:76: ad:c4:de:a6:73:54:d6:98:ee:fa:b9:cb:3d:ce:ce: af:87:6f:2c:fc:6f:c8:05:48:0c:d0:e0:b1:3e:59: 4d:95:6f:73:1c:3b:ec:49:0c:f2:28:6c:c5:19:77: a5:70:99:14:28:fd:95:7f:75:fe:d5:68:3e:da:0a: bd:ca:75:bd:94:ce:ae:51:ef:48:51:9a:02:3e:b1: 42:2b:32:9a:eb:79:5e:62:39:d9:03:f1:da:4a:5a: 4d:f3:40:93:9f:e0:2b:d4:ec:1a:88:7a:df:ab:a2: 24:ef:2b:b0:f8:aa:1e:ed:0b:56:ef:9d:32:90:b2: a9:e3:12:58:00:93:cf:fa:33:f8:a0:bc:21:0d:bc: 1b:71:80:aa:c4:e8:62:3d:84:8e:b0:22:60:01:ff: 8b:23:70:da:89:5c:82:f1:0b:8d:66:17:c9:a1:d7: e7:6b:17:d8:a9:88:35:1c:37:65:72:44:0e:95:54: a3:41:b7:2c:04:27:f0:24:e1:2e:a9:34:fc:fc:74: ed:4c:98:ae:f0:04:32:21:d5:57:b7:31:77:81:e9: 90:7f:62:be:18:0f:4f:90:b6:0b:82:0a:72:e7:f8: d4:0e:4e:0d:d4:5b:90:e4:97:6c:15:af:3d:e0:ac: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0D:F4:22:1B:1A:4C:5A:88:9D:95:80:55:71:92:E5:58:1C:9D:61 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e8:ef:38:c4:a5:75:b3:21:aa:e2:36:00:1d:ae:19:85:09: ef:61:b7:a2:73:ab:7e:f6:bf:83:8a:4f:11:32:a7:98:f7:47: af:69:fb:af:7e:c7:9d:ba:1c:86:34:2a:e7:54:c9:04:0a:4e: a9:77:3a:f9:f5:46:d1:d6:99:95:ff:0f:fe:73:8f:12:4f:43: f6:9d:cc:82:26:79:26:76:b9:a2:8a:bf:73:50:eb:fa:51:1f: f2:58:37:36:72:9f:4a:f3:7b:b4:79:48:91:14:ab:46:7e:79: 70:c3:31:94:37:f4:6b:dc:36:bb:44:b9:95:b0:6e:cf:f6:6e: 72:89:3b:da:55:fe:d4:d1:60:89:7b:62:8d:22:ad:89:de:14: 1c:bd:b8:9e:9f:de:82:38:b0:d5:27:cb:38:ae:3a:9e:37:3b: fc:ab:f6:97:82:a8:d2:d0:4c:7b:3f:9e:05:3a:b3:84:81:3c: df:9d:e3:69:e4:8c:1c:b8:00:0e:1a:2a:db:99:f8:0d:b4:b1: 7d:97:a9:bd:c8:ca:dd:8b:64:82:a9:8f:cc:8a:71:47:03:58: 6a:d2:e5:f3:df:4b:ee:57:24:08:2f:89:f1:6a:28:d3:b2:ea: c4:a3:a4:a8:2a:5a:fe:7b:c4:ba:00:1a:e1:4d:51:66:e4:60: ae:31:5a:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjYwOTIzMDMwNzA3WhcNMjYwOTMwMDMwNzA3WjAYMRYwFAYD VQQDEw02YWIzNDI1Yi05ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMWWYGAMow7Ti5u9GHatxN6mc1TWmO76ucs9zs6vh28s/G/IBUgM0OCxPllN lW9zHDvsSQzyKGzFGXelcJkUKP2Vf3X+1Wg+2gq9ynW9lM6uUe9IUZoCPrFCKzKa 63leYjnZA/HaSlpN80CTn+Ar1OwaiHrfq6Ik7yuw+Koe7QtW750ykLKp4xJYAJPP +jP4oLwhDbwbcYCqxOhiPYSOsCJgAf+LI3DaiVyC8QuNZhfJodfnaxfYqYg1HDdl ckQOlVSjQbcsBCfwJOEuqTT8/HTtTJiu8AQyIdVXtzF3gemQf2K+GA9PkLYLggpy 5/jUDk4N1FuQ5JdsFa894KygEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQN9CIb GkxaiJ2VgFVxkuVYHJ1hMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACejvOMSldbMhquI2AB2uGYUJ72G3onOrfva/g4pPETKnmPdHr2n7r37Hnboc hjQq51TJBApOqXc6+fVG0daZlf8P/nOPEk9D9p3MgiZ5Jna5ooq/c1Dr+lEf8lg3 NnKfSvN7tHlIkRSrRn55cMMxlDf0a9w2u0S5lbBuz/Zucok72lX+1NFgiXtijSKt id4UHL24np/egjiw1SfLOK46njc7/Kv2l4Ko0tBMez+eBTqzhIE8353jaeSMHLgA Dhoq25n4DbSxfZepvcjK3YtkgqmPzIpxRwNYatLl899L7lckCC+J8Woo07LqxKOk qCpa/nvEugAa4U1RZuRgrjFaeQ== -----END CERTIFICATE-----Generated at Thu Sep 24 01:48:33 2026 by rpki-client