$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: vWMNLHS27Jbyi+gJ6b1NSl/tf7YjvvubHhZLJExaR+U= Subject key identifier: 16:F8:85:60:D3:29:EE:AC:61:8E:78:A5:1B:56:D8:4D:7D:D7:D5:15 Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 064A Signing time: Tue 22 Sep 2026 22:25:50 +0000 Manifest this update: Tue 22 Sep 2026 22:25:49 +0000 Manifest next update: Tue 29 Sep 2026 22:25:49 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: hFwQORnpjLYzeawxx5ihl/YahePwhrqrekfmgQ3aOgQ=) 2: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=) 3: 928880FE8B0F11F182DCACFD3211F970.roa (hash: 97DMfE8QWEUEG5Cfx4YrvAURPmPn7eR9nJeGo/mBqD0=) 4: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Sep 22 22:25:49 2026 GMT Not After : Sep 29 22:25:49 2026 GMT Subject: CN=6ab3006d-875a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:aa:99:02:15:c5:19:98:b7:e6:5f:4a:19: 27:60:a5:26:7a:1b:0f:e1:d9:b9:b0:ef:57:26:7a: cc:b6:fa:74:02:09:59:15:0a:d6:3e:d1:7d:67:26: 91:6b:eb:1a:2a:88:25:d0:e5:f6:a4:de:bf:d5:17: 65:77:f2:6b:72:71:46:9f:23:85:9d:cc:86:93:8d: 80:5c:aa:f7:03:ee:d4:a3:99:0a:e4:e0:82:b8:93: 3b:04:2f:04:07:52:cb:d7:30:d3:f8:26:f0:49:3f: eb:49:c2:45:1b:5d:f4:43:2d:c2:30:ef:6c:9b:25: 96:a4:c4:e9:c8:c0:00:0b:ca:38:c1:6d:a9:2b:6f: 25:37:bd:6a:ab:86:14:1e:a4:ab:96:5d:c2:ea:5c: 36:4d:33:dd:0c:a9:c3:c1:eb:62:65:e6:3f:33:b8: f0:60:b0:98:b6:8d:a4:60:8e:ba:5d:68:33:ab:25: b4:14:b5:44:16:0f:c3:3c:b3:87:c2:ea:59:96:e6: 8e:66:fd:a0:11:23:18:bf:a4:32:dd:99:08:b9:5d: 6f:d3:c5:18:64:7c:46:29:18:cd:4b:39:f6:26:74: 23:bf:4e:31:57:5f:7e:a1:11:20:49:21:7f:89:6d: 2c:30:09:c4:cd:cf:b9:ac:a3:b2:21:61:d4:c1:68: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F8:85:60:D3:29:EE:AC:61:8E:78:A5:1B:56:D8:4D:7D:D7:D5:15 X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dd:8a:67:86:da:9c:1a:a9:66:ab:8b:24:18:bb:1e:ca:c3: b7:d6:85:ba:55:20:14:c0:0f:27:65:73:b3:9d:5e:b0:54:ae: 98:77:44:14:06:85:33:58:ef:17:92:c9:21:9a:23:ed:19:b5: 64:32:63:13:1b:10:aa:19:2f:35:f2:dc:c6:35:23:59:93:72: c3:04:ef:63:a5:ea:6c:c8:87:29:1c:15:ef:8f:da:1b:7f:38: 39:69:b5:51:b9:d2:75:6e:57:01:71:03:98:c3:dc:4d:5a:eb: 88:68:1c:dd:be:8d:77:91:5b:58:26:a7:51:e6:6b:74:2f:e8: bf:2c:2e:75:9d:af:46:85:a7:8c:1c:c3:1c:6b:78:98:25:50: e4:24:de:75:42:84:26:25:8b:ea:e4:36:0c:36:7f:05:58:db: c5:b5:92:63:7f:fb:98:8e:44:13:65:35:26:f5:85:35:f4:cd: 0a:8e:73:06:f6:8a:d7:45:e7:90:3a:00:4e:14:28:ae:41:87: 10:95:1f:5a:58:4d:0a:e5:e5:92:6e:65:a9:79:6a:5b:98:49: ec:0f:2a:16:bf:35:4e:11:75:a8:fe:38:aa:dc:95:6b:fe:b9: f2:f2:61:26:ae:d3:07:5a:d5:66:7f:aa:dc:0c:d9:b5:16:a5: ae:ad:11:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjYwOTIyMjIyNTQ5WhcNMjYwOTI5MjIyNTQ5WjAYMRYwFAYD VQQDEw02YWIzMDA2ZC04NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IuqmQIVxRmYt+ZfShknYKUmehsP4dm5sO9XJnrMtvp0AglZFQrWPtF9ZyaR a+saKogl0OX2pN6/1Rdld/JrcnFGnyOFncyGk42AXKr3A+7Uo5kK5OCCuJM7BC8E B1LL1zDT+CbwST/rScJFG130Qy3CMO9smyWWpMTpyMAAC8o4wW2pK28lN71qq4YU HqSrll3C6lw2TTPdDKnDwetiZeY/M7jwYLCYto2kYI66XWgzqyW0FLVEFg/DPLOH wupZluaOZv2gESMYv6Qy3ZkIuV1v08UYZHxGKRjNSzn2JnQjv04xV19+oREgSSF/ iW0sMAnEzc+5rKOyIWHUwWhgIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBb4hWDT Ke6sYY54pRtW2E1919UVMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjt2KZ4banBqpZquLJBi7HsrDt9aFulUgFMAPJ2Vzs51esFSumHdEFAaFM1jv F5LJIZoj7Rm1ZDJjExsQqhkvNfLcxjUjWZNywwTvY6XqbMiHKRwV74/aG384OWm1 UbnSdW5XAXEDmMPcTVrriGgc3b6Nd5FbWCanUeZrdC/ovywudZ2vRoWnjBzDHGt4 mCVQ5CTedUKEJiWL6uQ2DDZ/BVjbxbWSY3/7mI5EE2U1JvWFNfTNCo5zBvaK10Xn kDoAThQorkGHEJUfWlhNCuXlkm5lqXlqW5hJ7A8qFr81ThF1qP44qtyVa/658vJh Jq7TB1rVZn+q3AzZtRalrq0REg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:15:28 2026 by rpki-client