$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: Xn3kectoFjiBFbKSzUv8xVnabmzAG5I9b4AaDoIqg7M= Subject key identifier: 20:65:95:57:DA:F3:33:43:4F:72:2B:46:45:64:2F:F5:5F:C2:F4:4F Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 02E3 Signing time: Sun 13 Sep 2026 00:54:14 +0000 Manifest this update: Sun 13 Sep 2026 00:54:14 +0000 Manifest next update: Sun 20 Sep 2026 00:54:14 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: fieae4HsYte42g/M6PwyOd0OL95wkxmWsI4vS0wt1Ag=) 2: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: c+rgLPv7uhR0sgis57QLeIpTo3mpCxApvYMQGknvhqw=) 3: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: NcHl9AJMYCFpUIi+eqsBTaf+YrjXdd3uK3fAP8cyrek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Sep 2026 00:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: Sep 13 00:54:14 2026 GMT Not After : Sep 20 00:54:14 2026 GMT Subject: CN=6aa5f436-c1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:e9:cf:59:07:f5:09:f8:6e:0a:2c:b5:b3: 3b:5e:83:1d:42:1a:86:36:a7:77:14:23:30:21:87: 29:c1:a7:97:e1:3a:d6:0c:b0:95:f3:f0:f4:b4:fc: ce:46:d3:67:01:13:54:bc:bf:34:49:00:ab:de:e8: fa:d6:de:40:aa:61:30:95:7c:0b:b2:b5:ce:a9:18: 1b:22:5c:f8:03:b3:50:bf:b5:ca:af:ae:5e:99:81: 72:c1:7d:77:ca:26:15:81:ac:a3:ac:89:b9:28:47: b1:97:21:79:fb:48:75:af:3e:19:dd:65:72:b6:d2: 15:ef:b1:e8:a0:90:cd:4d:b9:22:91:2b:6a:86:f2: 49:2c:74:fd:f8:2f:40:fe:3b:78:2d:92:bc:66:00: 1d:c5:cb:0e:ea:9a:78:5c:e8:1e:10:20:dc:d6:da: d4:f8:9c:d6:67:e3:c9:bb:f7:7d:74:fc:42:b9:6d: 9c:95:d5:0e:e9:cd:69:15:31:3a:e1:f0:48:a5:cd: ea:7d:d0:bb:00:9d:93:9e:23:92:95:42:ab:6e:b4: 0b:45:9a:77:a5:71:ce:8b:f7:d4:99:c7:48:94:c4: cd:a2:8e:d0:6a:41:63:56:e2:94:f0:86:88:5e:22: e7:2d:a8:80:bc:a5:c8:29:84:02:44:f9:af:ad:7b: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:65:95:57:DA:F3:33:43:4F:72:2B:46:45:64:2F:F5:5F:C2:F4:4F X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:79:28:51:63:77:07:5b:ed:90:d5:16:6c:61:f3:92:cd:cb: 44:0f:d5:e6:79:ca:d9:8b:ca:90:df:aa:2f:d6:5b:0b:58:5d: 1d:02:db:69:d9:84:9e:58:76:c3:72:e4:1f:8e:88:a6:c0:82: 4e:86:cd:24:8d:af:98:2b:1a:33:38:06:b5:6a:1f:72:70:03: f2:ab:d5:24:c2:06:bf:bc:64:02:c5:e2:04:e9:5f:d0:c6:f9: 2f:6b:5e:24:58:cf:8f:d8:d6:49:0e:03:0c:87:e6:b7:32:25: 06:2a:09:ca:2e:cc:00:00:d2:78:cf:33:8d:43:15:e6:96:01: 83:2e:b9:b1:01:c9:bc:ca:92:86:77:97:6a:70:c8:73:b3:55: 35:ff:67:cd:e5:4d:30:59:52:d0:38:59:4e:3d:32:e1:a0:4c: d7:0e:ec:43:6d:57:76:f4:f6:2a:62:38:3c:42:34:ab:49:59: 53:30:0c:e5:90:ea:86:fa:04:8c:8c:01:f3:c0:43:8f:78:ad: 74:dc:01:db:42:e8:f5:df:fb:76:5b:2c:31:12:54:7d:99:7d: 00:a6:cc:6c:16:ad:6e:db:1f:ed:a5:38:aa:1c:c4:cf:7a:58: 79:00:13:01:19:21:ae:39:ae:f4:b7:cf:bd:fd:53:70:89:95: d7:6f:bf:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjYwOTEzMDA1NDE0WhcNMjYwOTIwMDA1NDE0WjAYMRYwFAYD VQQDEw02YWE1ZjQzNi1jMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ/pz1kH9Qn4bgostbM7XoMdQhqGNqd3FCMwIYcpwaeX4TrWDLCV8/D0tPzO RtNnARNUvL80SQCr3uj61t5AqmEwlXwLsrXOqRgbIlz4A7NQv7XKr65emYFywX13 yiYVgayjrIm5KEexlyF5+0h1rz4Z3WVyttIV77HooJDNTbkikStqhvJJLHT9+C9A /jt4LZK8ZgAdxcsO6pp4XOgeECDc1trU+JzWZ+PJu/d9dPxCuW2cldUO6c1pFTE6 4fBIpc3qfdC7AJ2TniOSlUKrbrQLRZp3pXHOi/fUmcdIlMTNoo7QakFjVuKU8IaI XiLnLaiAvKXIKYQCRPmvrXtqIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBllVfa 8zNDT3IrRkVkL/VfwvRPMB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXkoUWN3B1vtkNUWbGHzks3LRA/V5nnK2YvKkN+qL9ZbC1hdHQLbadmEnlh2 w3LkH46IpsCCTobNJI2vmCsaMzgGtWofcnAD8qvVJMIGv7xkAsXiBOlf0Mb5L2te JFjPj9jWSQ4DDIfmtzIlBioJyi7MAADSeM8zjUMV5pYBgy65sQHJvMqShneXanDI c7NVNf9nzeVNMFlS0DhZTj0y4aBM1w7sQ21XdvT2KmI4PEI0q0lZUzAM5ZDqhvoE jIwB88BDj3itdNwB20Lo9d/7dlssMRJUfZl9AKbMbBatbtsf7aU4qhzEz3pYeQAT ARkhrjmu9LfPvf1TcImV12+/fw== -----END CERTIFICATE-----Generated at Sun Sep 13 14:09:00 2026 by rpki-client