$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: F19L8Oix64pUdFNYS7oQaGbSffQ4pYNrbz55C9/5jrs= Subject key identifier: B5:7D:CA:DF:C2:F6:B4:63:5B:55:14:85:A4:AC:9B:0B:21:16:4E:03 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0D5F Signing time: Thu 08 Oct 2026 18:08:08 +0000 Manifest this update: Thu 08 Oct 2026 18:08:08 +0000 Manifest next update: Thu 15 Oct 2026 18:08:08 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: KvTTBSf4Ah3RO/9WlSTr7pXR90Cbn05+oC3N4dbmkSs=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Oct 8 18:08:08 2026 GMT Not After : Oct 15 18:08:08 2026 GMT Subject: CN=6ac7dc08-a459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:23:3a:16:2e:67:7a:aa:b4:f4:69:2c:ad:90: 27:c6:e5:6c:5f:9b:c6:e6:fc:6d:1b:ed:f8:a8:59: 31:32:7e:15:aa:f4:65:07:9a:6a:2a:92:17:db:55: b8:28:60:09:28:70:78:ab:67:58:2e:2c:d8:20:e5: fe:42:ba:3d:b6:19:6f:15:ed:2c:bb:1a:9b:40:aa: d9:b3:80:fe:95:a8:97:f2:f0:77:fc:f7:72:c8:dc: 95:db:f7:e3:b6:43:c3:47:fb:d9:75:03:14:b6:ba: 11:a2:8d:93:76:b0:95:bf:25:3f:68:8a:7e:63:62: af:36:fc:c3:25:94:4d:40:6e:aa:ef:87:77:a6:a1: c2:8c:b2:92:ec:ad:bf:a6:be:71:58:fa:95:52:27: 40:fc:7f:1f:13:91:5a:96:28:ee:1e:b6:ec:85:eb: a3:ac:ea:b6:79:15:cc:86:b7:6a:14:6d:85:c5:b0: 2c:91:af:d2:ab:63:46:73:be:12:9a:93:44:82:ae: ac:2e:dc:79:25:b3:1c:e6:d4:e7:43:e6:0b:eb:88: fb:d1:bf:cb:a9:4b:2b:7d:04:7b:43:5a:a6:08:f7: 67:df:2a:15:93:55:3c:9e:d8:d5:55:95:ed:b1:ba: 9b:89:91:8a:fb:c3:cc:5f:08:e0:61:cc:be:8d:1b: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:CA:DF:C2:F6:B4:63:5B:55:14:85:A4:AC:9B:0B:21:16:4E:03 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ea:1b:fa:fa:4a:36:1b:c3:68:1a:b4:5d:84:f7:f8:1c:33: ea:4a:50:a7:ec:de:62:f8:e3:7d:2d:b2:84:e6:3b:c2:5f:90: 34:6f:bd:9b:b2:17:d8:65:fa:2d:96:28:c3:4d:52:9c:1b:35: 02:89:3c:f3:c0:0d:2d:b6:d7:be:68:7f:3a:2f:8f:2f:97:81: 97:84:35:e1:bd:a2:35:6a:88:fe:81:fa:20:75:25:46:23:c1: e3:86:11:aa:ba:d4:f5:c3:f6:01:7b:49:39:e4:49:2c:50:d6: c1:11:1a:cb:4a:46:59:eb:43:38:43:85:40:f3:47:da:6f:8d: 7f:c6:8a:ee:4f:b2:3d:6d:72:3f:e0:c6:88:55:ee:a1:e9:bb: 9c:d9:13:e1:2f:3b:84:dd:47:6b:19:6e:cd:57:00:06:4d:a5: 4c:df:f0:3c:86:2a:11:f1:2e:97:22:b7:68:43:bd:4a:47:7b: 6c:57:ef:a9:10:61:d7:84:4d:b1:79:05:c8:f0:7e:f7:fe:4b: a1:63:cc:bd:27:f5:d5:be:66:55:fb:7d:17:1f:5e:b8:3f:79: 41:71:b3:6b:d6:c1:c1:7a:76:79:70:af:bc:70:1b:70:4d:21: d0:f8:98:0b:8e:0c:cf:21:66:5a:ce:3a:a6:92:38:b2:88:21: 57:90:67:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYxMDA4MTgwODA4WhcNMjYxMDE1MTgwODA4WjAYMRYwFAYD VQQDEw02YWM3ZGMwOC1hNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SM6Fi5neqq09GksrZAnxuVsX5vG5vxtG+34qFkxMn4VqvRlB5pqKpIX21W4 KGAJKHB4q2dYLizYIOX+Qro9thlvFe0suxqbQKrZs4D+laiX8vB3/PdyyNyV2/fj tkPDR/vZdQMUtroRoo2TdrCVvyU/aIp+Y2KvNvzDJZRNQG6q74d3pqHCjLKS7K2/ pr5xWPqVUidA/H8fE5FalijuHrbsheujrOq2eRXMhrdqFG2FxbAska/Sq2NGc74S mpNEgq6sLtx5JbMc5tTnQ+YL64j70b/LqUsrfQR7Q1qmCPdn3yoVk1U8ntjVVZXt sbqbiZGK+8PMXwjgYcy+jRvg1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLV9yt/C 9rRjW1UUhaSsmwshFk4DMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFOob+vpKNhvDaBq0XYT3+Bwz6kpQp+zeYvjjfS2yhOY7wl+QNG+9m7IX2GX6 LZYow01SnBs1Aok888ANLbbXvmh/Oi+PL5eBl4Q14b2iNWqI/oH6IHUlRiPB44YR qrrU9cP2AXtJOeRJLFDWwREay0pGWetDOEOFQPNH2m+Nf8aK7k+yPW1yP+DGiFXu oem7nNkT4S87hN1HaxluzVcABk2lTN/wPIYqEfEulyK3aEO9Skd7bFfvqRBh14RN sXkFyPB+9/5LoWPMvSf11b5mVft9Fx9euD95QXGza9bBwXp2eXCvvHAbcE0h0PiY C44MzyFmWs46ppI4soghV5Bn9w== -----END CERTIFICATE-----Generated at Sat Oct 10 14:17:20 2026 by rpki-client