$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: 8LwPRqtULLtOxQYMTk3kq8C/fH09lyRNaeUeU7+fAA0= Subject key identifier: 5E:47:47:5C:F8:D1:39:53:B2:AF:F8:0E:F4:48:40:83:E6:4D:47:8D Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1338 Signing time: Mon 28 Sep 2026 17:05:53 +0000 Manifest this update: Mon 28 Sep 2026 17:05:53 +0000 Manifest next update: Mon 05 Oct 2026 17:05:53 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: a20hn7//7gC/4QYnUGL6qUPDyBELdJH46zdFHIBkP/s=) 2: 5C67E8E87B7411F1A3D02C1F63A30FBC.roa (hash: ORuMnxH7G7FX6h8tXJKoehvjLlQp1iQA/wSMC0O4y0s=) 3: 8302EB5A7B7511F1BA0904A763A30FBC.roa (hash: LkZnJ3QA5cnl1yBZi3+auFKRPPNbQMzrYVVyOZE6xyQ=) 4: CA04831060B811F19C6DC3147F47A888.roa (hash: rOz2RbSRemVOFrRimoMVT6/+5tzDGcbwoE9kdakjgFA=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: GwBzururP91LCAF7TSNIMtRqmicpSh1Gk2iqSgIOC/E=) 6: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=) 7: C8F89EF260B811F19C6DC3147F47A888.roa (hash: KeWwMhx4c7U/ZQPC2bJz74fYjPr5gQDtKF2jRuwLCqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4999 (0x1387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Sep 28 17:05:53 2026 GMT Not After : Oct 5 17:05:53 2026 GMT Subject: CN=6aba9e71-7646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:02:af:ad:61:9d:c2:46:04:4f:4d:dd:fb: bf:f0:b6:c0:a5:63:01:ce:80:a2:07:7b:67:b1:43: eb:b7:bd:2a:39:08:82:4d:91:5a:39:7c:59:80:69: 74:ad:98:9e:05:57:8e:e1:2b:e0:5e:30:c7:a7:54: 0d:e3:8a:e6:6c:1b:ea:69:68:9e:c3:11:ba:5f:34: d3:52:8d:1d:d7:82:a9:99:26:7e:f4:72:77:aa:fa: 19:1b:d3:44:c7:5d:75:3c:29:4e:4b:85:18:5c:7d: b0:7b:26:48:1a:2c:2c:d6:f1:34:d1:15:7c:76:0a: 9d:56:51:8c:39:14:1c:af:02:56:c5:f9:7c:b6:97: 01:6b:94:4f:da:c3:85:c2:b8:15:f2:1b:a6:b7:18: 94:b6:98:6d:6d:52:4f:2a:62:82:de:46:86:3c:fa: e6:3f:58:26:fd:b4:2e:1e:22:bc:c8:34:47:d5:26: 31:b8:62:3f:30:a5:10:76:14:14:05:56:04:b2:52: 6c:21:3d:08:25:0e:cf:39:43:c3:55:6a:6b:1e:4d: b2:51:5b:24:0c:ef:b2:77:22:17:48:a4:09:16:28: 6b:4a:d5:04:92:4a:30:bc:d8:43:3b:51:90:7b:52: 5d:9f:9c:7b:a9:a2:01:00:73:6c:03:f4:03:15:03: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:47:5C:F8:D1:39:53:B2:AF:F8:0E:F4:48:40:83:E6:4D:47:8D X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:09:8f:e8:29:ba:d2:1f:ce:d0:f8:09:12:36:1d:bf:f9:dc: 20:8b:35:d3:af:13:e2:2e:bd:a3:96:ee:6e:fd:fb:d6:bf:2a: 91:82:b1:d4:50:8e:fa:c2:1e:37:ff:7b:e8:da:ff:c0:60:c2: e9:fd:f7:10:f5:65:c4:10:df:42:a7:17:e6:9d:a7:2e:41:e9: d8:73:90:29:9c:1d:71:67:2c:88:12:2b:12:88:f1:cd:48:2b: b8:7d:23:c9:f0:b8:52:65:1a:2c:14:37:5e:1c:c6:11:12:78: ac:6d:c4:5c:c9:57:f5:26:e5:61:57:3e:0a:4e:95:36:e6:01: d3:2f:1b:ad:06:7b:6f:bd:26:ac:88:af:1e:88:9c:19:31:6f: f5:84:b0:84:81:63:3f:59:0e:39:6c:61:26:ca:65:8c:c7:82: 41:2a:57:9c:a1:1e:21:19:14:98:ad:7a:ed:7f:d8:e5:6b:64: 6d:96:b0:34:fc:cd:6e:14:77:de:03:2b:07:e6:fc:ed:fe:d3: 06:f0:61:15:a9:41:9a:a4:54:dc:54:c7:c1:6a:a1:53:9d:7c: ca:48:5e:53:cd:fe:d9:2b:67:6c:1e:b6:eb:54:eb:6b:eb:47: f0:66:7a:e6:69:b5:28:e5:63:de:61:9c:1c:58:8f:1c:e6:f7: f2:d7:69:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwOTI4MTcwNTUzWhcNMjYxMDA1MTcwNTUzWjAYMRYwFAYD VQQDEw02YWJhOWU3MS03NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSkCr61hncJGBE9N3fu/8LbApWMBzoCiB3tnsUPrt70qOQiCTZFaOXxZgGl0 rZieBVeO4SvgXjDHp1QN44rmbBvqaWiewxG6XzTTUo0d14KpmSZ+9HJ3qvoZG9NE x111PClOS4UYXH2weyZIGiws1vE00RV8dgqdVlGMORQcrwJWxfl8tpcBa5RP2sOF wrgV8humtxiUtphtbVJPKmKC3kaGPPrmP1gm/bQuHiK8yDRH1SYxuGI/MKUQdhQU BVYEslJsIT0IJQ7POUPDVWprHk2yUVskDO+ydyIXSKQJFihrStUEkkowvNhDO1GQ e1Jdn5x7qaIBAHNsA/QDFQMcdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5HR1z4 0TlTsq/4DvRIQIPmTUeNMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfwmP6Cm60h/O0PgJEjYdv/ncIIs1068T4i69o5bubv371r8qkYKx1FCO+sIe N/976Nr/wGDC6f33EPVlxBDfQqcX5p2nLkHp2HOQKZwdcWcsiBIrEojxzUgruH0j yfC4UmUaLBQ3XhzGERJ4rG3EXMlX9SblYVc+Ck6VNuYB0y8brQZ7b70mrIivHoic GTFv9YSwhIFjP1kOOWxhJspljMeCQSpXnKEeIRkUmK167X/Y5WtkbZawNPzNbhR3 3gMrB+b87f7TBvBhFalBmqRU3FTHwWqhU518ykheU83+2StnbB6261Tra+tH8GZ6 5mm1KOVj3mGcHFiPHOb38tdpQg== -----END CERTIFICATE-----Generated at Mon Sep 28 19:59:41 2026 by rpki-client