$ rpki-client -vvvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: XdEi3ybGm2q0Vb9CBriXT0G9Ta21b7J+s8S5En53TZI= Subject key identifier: 9D:BD:6D:E0:AE:C7:3C:DA:A2:47:02:2F:F2:C6:EB:99:60:A4:44:A1 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 02D7 Signing time: Mon 05 Oct 2026 01:25:18 +0000 Manifest this update: Mon 05 Oct 2026 01:25:17 +0000 Manifest next update: Mon 12 Oct 2026 01:25:17 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: ekgH8i7JEmMdYthdklZcQk0urb/7nHBRp5JP4G6xSIw=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Oct 5 01:25:17 2026 GMT Not After : Oct 12 01:25:17 2026 GMT Subject: CN=6ac2fc7e-6962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:3d:46:24:d9:fa:01:68:be:5b:b1:60:86: 18:34:f5:dd:bf:25:a6:0e:54:ce:cb:c0:fa:af:91: 17:3b:f6:36:d5:d0:3f:1e:5d:f2:47:5d:2c:9f:b8: 35:e1:45:f2:4c:a4:b0:4e:1b:8f:af:d3:6d:eb:c5: fc:68:4f:55:32:81:41:83:fb:a1:b3:2a:10:71:bb: 2f:e0:8e:3e:69:d9:8b:1c:0e:53:c8:ed:54:d9:0b: c0:17:bb:aa:67:1f:6f:ff:ce:a2:62:50:ba:e3:db: 82:f1:57:b8:2d:25:03:1b:f4:ed:8a:82:15:02:a4: 99:a0:03:c1:ca:b4:ae:43:cc:8b:86:55:13:d3:e4: ff:7b:3a:38:44:d9:66:35:69:d6:c5:fa:d8:80:09: 8e:f7:3b:bd:7e:fa:f2:a1:04:c0:1a:ee:92:5c:d1: e0:f4:e3:e4:d8:2f:78:91:4e:76:32:e3:aa:35:25: cd:26:df:37:15:76:b4:47:75:f2:6f:f9:29:95:eb: 93:46:2f:80:39:20:fc:d2:c1:9d:1a:ac:0f:01:aa: 24:47:3f:57:20:07:eb:2f:51:1a:29:89:27:35:f2: 79:5c:9d:a4:47:a4:c1:d2:52:fd:90:65:dd:50:e7: df:c1:59:f7:b4:8e:fb:41:0e:05:ed:5d:01:ad:f3: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BD:6D:E0:AE:C7:3C:DA:A2:47:02:2F:F2:C6:EB:99:60:A4:44:A1 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:72:e9:ff:5a:ca:a1:d4:8e:b2:4a:af:d9:23:58:9a:2e:43: 32:7f:8c:92:bd:37:72:30:ec:c9:2c:07:e9:3e:c1:40:39:e3: ea:8e:ff:37:28:29:69:5f:a0:99:e0:c4:1a:db:e5:4e:04:d9: e9:84:47:74:55:ad:f7:c9:a5:be:4d:ec:44:e1:a5:07:74:b5: 41:a2:49:8f:7e:ad:96:84:b4:61:e3:e1:5a:1f:b3:90:bd:81: e6:53:d0:2b:c1:c6:4f:ee:ba:39:34:2b:7a:fb:bf:65:a7:fe: eb:a8:c5:d1:3b:cc:92:49:15:bc:74:b9:87:e9:a2:77:9a:b1: 9f:32:0e:07:cf:d2:11:c2:07:90:34:f4:66:1d:5c:ec:57:0f: 12:ca:f1:42:5b:5e:d4:d9:9d:21:42:5e:25:c3:c6:bf:02:8c: 02:cf:e4:7d:b3:9e:49:57:45:1c:fe:f4:45:fa:ab:30:6a:73: ba:ba:ca:cc:15:12:1a:8b:6b:cb:2a:a0:9c:ae:cc:d1:e0:8e: 8e:c6:09:9b:93:a2:08:43:22:d8:fe:5f:97:20:96:50:b8:e6: 95:83:71:97:80:d7:c3:4f:d6:2b:79:70:62:e2:58:f2:b9:b5: 8a:fb:45:1c:61:45:98:a2:4e:5e:02:19:12:07:22:d3:2c:6d: e7:e1:8f:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjYxMDA1MDEyNTE3WhcNMjYxMDEyMDEyNTE3WjAYMRYwFAYD VQQDEw02YWMyZmM3ZS02OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkgo9RiTZ+gFovluxYIYYNPXdvyWmDlTOy8D6r5EXO/Y21dA/Hl3yR10sn7g1 4UXyTKSwThuPr9Nt68X8aE9VMoFBg/uhsyoQcbsv4I4+admLHA5TyO1U2QvAF7uq Zx9v/86iYlC649uC8Ve4LSUDG/TtioIVAqSZoAPByrSuQ8yLhlUT0+T/ezo4RNlm NWnWxfrYgAmO9zu9fvryoQTAGu6SXNHg9OPk2C94kU52MuOqNSXNJt83FXa0R3Xy b/kpleuTRi+AOSD80sGdGqwPAaokRz9XIAfrL1EaKYknNfJ5XJ2kR6TB0lL9kGXd UOffwVn3tI77QQ4F7V0BrfM5MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ29beCu xzzaokcCL/LG65lgpEShMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo3Lp/1rKodSOskqv2SNYmi5DMn+Mkr03cjDsySwH6T7BQDnj6o7/NygpaV+g meDEGtvlTgTZ6YRHdFWt98mlvk3sROGlB3S1QaJJj36tloS0YePhWh+zkL2B5lPQ K8HGT+66OTQrevu/Zaf+66jF0TvMkkkVvHS5h+mid5qxnzIOB8/SEcIHkDT0Zh1c 7FcPEsrxQlte1NmdIUJeJcPGvwKMAs/kfbOeSVdFHP70RfqrMGpzurrKzBUSGotr yyqgnK7M0eCOjsYJm5OiCEMi2P5flyCWULjmlYNxl4DXw0/WK3lwYuJY8rm1ivtF HGFFmKJOXgIZEgci0yxt5+GPMA== -----END CERTIFICATE-----Generated at Tue Oct 6 18:49:59 2026 by rpki-client