$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: ezysDwNa3ktBLK0YlruImIhmIzdmbmX0OTYoshWNdGM= Subject key identifier: 0B:43:B6:EA:FA:C4:FA:2C:CB:28:EA:D1:AA:0B:C0:33:7A:AB:55:1B Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 35EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 35A8 Signing time: Wed 02 Sep 2026 15:12:58 +0000 Manifest this update: Wed 02 Sep 2026 15:12:57 +0000 Manifest next update: Wed 09 Sep 2026 15:12:57 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: /dNpjM7CKMFTcMN7AgBDWFKxyDfYlCWIK5DpKGz43Bo=) 2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: DeSKNH4HScDLuICfGiae128aAotHyUD/RwFhRy7k38Q=) 3: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: 7Y4TL4USxn/GFFX1wZbIuzSEbnQasIZPWs9yWSTrx/k=) 4: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: tsITTRTvL3ZpZTiMW9Pvk38F1H2gtAvA9bKyZtXQM/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 15:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13806 (0x35ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Sep 2 15:12:57 2026 GMT Not After : Sep 9 15:12:57 2026 GMT Subject: CN=6a983cfa-c87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:8e:f4:a8:a2:37:b3:e7:63:86:56:87:15: 67:ce:f4:0d:1d:ef:86:48:bd:c3:a6:e3:a1:05:c4: a9:b4:9a:a4:bf:ac:7e:a1:e9:d0:58:ee:96:45:20: 18:78:e0:51:cf:7d:08:33:52:91:25:ca:b3:86:6f: 3c:4b:17:45:cd:ca:dc:eb:e8:e5:f1:95:9c:15:89: dc:96:73:c5:3c:a9:47:66:11:7e:be:bb:77:54:33: 00:8a:a9:af:b3:31:25:96:e3:83:f4:7f:9a:48:f7: 18:ba:11:01:f9:9a:cf:0a:4a:39:67:08:ec:4c:17: 4d:f4:26:46:57:6a:40:9f:de:13:01:9f:f5:49:61: 51:da:50:10:42:81:5e:1f:64:a1:1f:73:ae:6f:66: 15:ec:49:46:23:1b:5d:fd:68:58:b8:3d:5b:94:26: bb:62:bf:e1:14:47:f5:3a:5c:ce:3e:02:47:e2:d0: 9f:36:8a:65:8e:f2:39:46:45:25:45:fd:91:f0:90: c9:d6:ab:fb:8a:81:e8:58:80:e7:39:42:13:fa:9a: f5:65:5e:74:e4:97:94:76:45:75:76:cb:82:f5:86: 37:5b:17:6b:63:7c:6e:43:b8:ab:bd:09:51:5f:11: d3:64:38:28:17:cc:ac:44:55:3e:7b:b1:74:ec:cd: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:43:B6:EA:FA:C4:FA:2C:CB:28:EA:D1:AA:0B:C0:33:7A:AB:55:1B X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:df:a5:91:f4:0c:fe:f7:66:8f:c8:4d:dc:62:0e:57:9f: ad:25:9d:69:f6:f7:04:53:f6:bf:0c:43:f6:2f:30:f9:42:de: ae:5d:9a:a1:24:ad:28:02:b4:db:d3:9a:d7:45:e8:7c:b7:3e: d1:32:20:c7:9a:9d:96:79:d2:c6:62:3b:43:78:1a:75:37:19: e2:e6:94:77:fb:83:35:8f:1b:96:65:34:fe:26:de:e2:39:a4: 19:7e:97:f1:52:2f:37:c7:71:48:85:2a:2c:31:95:2a:11:55: 82:b0:d4:67:38:f4:34:63:08:46:4c:af:9c:05:60:8f:f5:e4: d9:89:2d:e2:74:53:ce:3d:d0:57:fb:1b:42:d9:93:26:92:1c: 74:3b:26:52:f1:9e:df:ad:e2:fb:c9:7f:33:e2:91:64:0c:e8: d8:87:ea:07:8d:af:68:60:fb:cc:1c:0f:e2:f1:63:15:7e:79: 8b:21:e8:8d:8f:f8:5e:43:74:57:54:a1:66:db:dc:a8:3b:e2: 98:a3:57:38:56:1d:57:2c:62:d8:e2:78:42:ec:2d:fc:22:ec: 09:a1:02:88:c8:e9:ba:39:5c:8e:b3:2e:72:6a:da:b8:e3:15: aa:a6:6d:38:61:70:a1:5a:7d:09:4b:e0:3c:87:54:f7:b6:24: f0:02:3a:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjYwOTAyMTUxMjU3WhcNMjYwOTA5MTUxMjU3WjAYMRYwFAYD VQQDEw02YTk4M2NmYS1jODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kSO9KiiN7PnY4ZWhxVnzvQNHe+GSL3DpuOhBcSptJqkv6x+oenQWO6WRSAY eOBRz30IM1KRJcqzhm88SxdFzcrc6+jl8ZWcFYnclnPFPKlHZhF+vrt3VDMAiqmv szElluOD9H+aSPcYuhEB+ZrPCko5ZwjsTBdN9CZGV2pAn94TAZ/1SWFR2lAQQoFe H2ShH3Oub2YV7ElGIxtd/WhYuD1blCa7Yr/hFEf1OlzOPgJH4tCfNopljvI5RkUl Rf2R8JDJ1qv7ioHoWIDnOUIT+pr1ZV505JeUdkV1dsuC9YY3WxdrY3xuQ7irvQlR XxHTZDgoF8ysRFU+e7F07M2UMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtDtur6 xPosyyjq0aoLwDN6q1UbMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZPDfpZH0DP73Zo/ITdxiDlefrSWdafb3BFP2vwxD9i8w+ULerl2aoSStKAK0 29Oa10XofLc+0TIgx5qdlnnSxmI7Q3gadTcZ4uaUd/uDNY8blmU0/ibe4jmkGX6X 8VIvN8dxSIUqLDGVKhFVgrDUZzj0NGMIRkyvnAVgj/Xk2Ykt4nRTzj3QV/sbQtmT JpIcdDsmUvGe363i+8l/M+KRZAzo2IfqB42vaGD7zBwP4vFjFX55iyHojY/4XkN0 V1ShZtvcqDvimKNXOFYdVyxi2OJ4Quwt/CLsCaECiMjpujlcjrMucmrauOMVqqZt OGFwoVp9CUvgPIdU97Yk8AI6WA== -----END CERTIFICATE-----Generated at Fri Sep 4 13:22:38 2026 by rpki-client