$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: VidVeK2tuvulWpE7dTZEaBDV5NI+MZ15xqOcfnFmgBA= Subject key identifier: 89:25:D6:9E:6E:15:77:0B:E9:AC:9A:30:87:DD:1F:78:59:CA:1A:17 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0D1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0D0D Signing time: Sun 04 Oct 2026 18:25:39 +0000 Manifest this update: Sun 04 Oct 2026 18:25:38 +0000 Manifest next update: Sun 11 Oct 2026 18:25:38 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: wFhmg2AuavK5h5FXCvRbuc4ZLUAi3YGRrTuIsR57SP8=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Fc0EoN7FBo1h+1UnkvkkpWbLnVe4ZgVu2lP55njdUjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Oct 4 18:25:38 2026 GMT Not After : Oct 11 18:25:38 2026 GMT Subject: CN=6ac29a22-0ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:25:80:fb:50:a2:9e:fa:bd:be:bd:ed:04: f1:9b:2c:89:a5:ee:25:51:89:d5:ea:df:eb:75:04: c8:d0:6b:39:ca:43:91:34:c5:0f:d1:1c:36:fa:73: c7:74:f2:40:cf:1f:da:84:16:bf:43:57:53:33:9d: e1:6d:b9:df:4c:e1:64:80:5c:21:94:9f:ba:45:97: af:01:61:a9:f0:f2:6d:ee:44:88:7e:c0:2f:5a:01: c6:1e:f9:db:00:07:09:12:77:c2:56:94:c8:ae:2e: e5:bc:8f:e2:61:e2:8b:26:dc:ae:6d:e8:d4:ab:d5: 41:01:96:40:5c:e3:1d:c9:1f:0e:90:45:ad:ae:32: e6:cd:9b:db:6b:6b:34:03:62:67:8c:49:d3:86:c6: 8b:42:48:4d:ea:3e:c6:63:75:f9:51:b1:7d:c6:c9: 85:f9:70:d2:35:61:07:be:82:2a:28:65:61:17:df: df:a8:63:10:e5:84:99:f2:07:b9:30:4d:c1:3f:f3: 4e:00:7f:9b:c6:10:3e:5f:6a:7c:60:bc:1b:c7:dc: 0c:39:70:0a:01:bf:83:39:5d:e8:10:8b:7a:96:30: 05:04:5d:37:47:15:70:9b:41:ee:aa:a7:8b:7d:a6: a4:3d:07:80:81:8e:d6:21:50:0e:f6:86:a4:bb:2c: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:D6:9E:6E:15:77:0B:E9:AC:9A:30:87:DD:1F:78:59:CA:1A:17 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b5:8a:96:5f:1d:37:d2:b7:d1:c3:4d:78:2c:9a:c3:13:be: 08:15:8b:03:0d:bf:e7:c0:70:f1:0b:9a:c1:77:8a:d8:05:0f: ed:8f:27:26:4f:00:a6:68:1b:1f:3e:09:89:bf:dd:fb:4e:cf: 2d:1c:23:bd:a4:9e:f8:31:d9:a4:cb:c1:d8:80:f5:a4:01:ee: 84:aa:84:10:23:a7:90:11:e9:de:5b:10:44:87:9c:0c:8d:45: 48:6b:cd:0d:c2:b0:a5:89:da:44:86:42:d9:d0:b7:9a:3f:c3: 70:0c:7b:ac:8b:79:2e:07:73:9a:13:ce:fa:08:be:2e:f2:8b: d6:d1:eb:d9:22:f4:a1:46:bc:ce:5b:15:2b:9f:9c:98:e2:fb: 1c:99:e1:9f:18:c3:fd:de:e0:e0:5a:7a:e6:3e:50:63:09:15: 64:b3:a2:da:3e:8e:84:94:f1:e3:74:7d:93:9c:e1:e9:21:1e: d6:f7:f6:2a:f3:59:2b:3e:65:e0:df:d1:ad:ef:5e:0e:f7:ab: 69:c9:30:32:e1:66:50:97:a6:87:27:c0:8d:ca:27:c8:08:04: 88:02:8e:81:f5:54:ed:66:9a:cf:b0:2b:3f:c7:6f:2f:93:50: 3a:33:6a:47:a5:b2:b0:a0:fb:28:cd:86:e1:60:7a:5b:68:a5: d1:29:63:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjYxMDA0MTgyNTM4WhcNMjYxMDExMTgyNTM4WjAYMRYwFAYD VQQDEw02YWMyOWEyMi0wYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpUlgPtQop76vb697QTxmyyJpe4lUYnV6t/rdQTI0Gs5ykORNMUP0Rw2+nPH dPJAzx/ahBa/Q1dTM53hbbnfTOFkgFwhlJ+6RZevAWGp8PJt7kSIfsAvWgHGHvnb AAcJEnfCVpTIri7lvI/iYeKLJtyubejUq9VBAZZAXOMdyR8OkEWtrjLmzZvba2s0 A2JnjEnThsaLQkhN6j7GY3X5UbF9xsmF+XDSNWEHvoIqKGVhF9/fqGMQ5YSZ8ge5 ME3BP/NOAH+bxhA+X2p8YLwbx9wMOXAKAb+DOV3oEIt6ljAFBF03RxVwm0HuqqeL faakPQeAgY7WIVAO9oakuyxdcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkl1p5u FXcL6ayaMIfdH3hZyhoXMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7WKll8dN9K30cNNeCyawxO+CBWLAw2/58Bw8QuawXeK2AUP7Y8nJk8Apmgb Hz4Jib/d+07PLRwjvaSe+DHZpMvB2ID1pAHuhKqEECOnkBHp3lsQRIecDI1FSGvN DcKwpYnaRIZC2dC3mj/DcAx7rIt5LgdzmhPO+gi+LvKL1tHr2SL0oUa8zlsVK5+c mOL7HJnhnxjD/d7g4Fp65j5QYwkVZLOi2j6OhJTx43R9k5zh6SEe1vf2KvNZKz5l 4N/Rre9eDverackwMuFmUJemhyfAjconyAgEiAKOgfVU7Waaz7ArP8dvL5NQOjNq R6WysKD7KM2G4WB6W2il0SljvA== -----END CERTIFICATE-----Generated at Tue Oct 6 06:54:41 2026 by rpki-client