$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: fL5oocE1dlIpvsp7ca6uAu0UPV4/mJpKecynZJE9dAY= Subject key identifier: AA:08:45:63:79:CF:3D:62:65:8E:D9:3A:D6:C8:DE:16:1C:9E:2F:E0 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0D50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0D45 Signing time: Tue 18 Aug 2026 18:18:30 +0000 Manifest this update: Tue 18 Aug 2026 18:18:29 +0000 Manifest next update: Tue 25 Aug 2026 18:18:29 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: lm8DnZ0TQVtgacp5hkENUpr9kvHh7scR097oFoeckWA=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Aug 18 18:18:29 2026 GMT Not After : Aug 25 18:18:29 2026 GMT Subject: CN=6a84a1f6-3ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:77:36:35:a2:48:09:4c:3d:ae:87:92:65: a5:b7:76:c0:21:b0:89:3b:5e:43:35:67:65:7f:fe: b8:f1:f8:8b:91:d3:e1:75:bb:92:ec:f8:66:da:d3: 9c:84:5c:80:0d:87:dd:28:0c:b7:b5:e6:a3:b6:53: bb:7a:fd:29:95:3d:f6:a3:cc:a9:36:57:42:d5:44: 84:e4:b2:da:2a:a0:28:ce:ac:ec:c4:0e:ce:66:35: e6:b3:7a:dd:73:4e:8c:83:c5:ef:4f:a8:72:8b:50: b8:fe:90:f2:4a:88:a2:a1:7b:50:bd:b2:94:d2:cf: d9:f8:16:d4:2a:55:74:93:bb:8c:3b:54:7e:9b:8a: d3:ea:51:09:45:25:c2:4c:81:ed:c9:e5:6f:58:67: 68:1e:a9:f5:54:6e:84:b8:3a:1e:69:6f:d8:19:12: 33:d0:bf:32:8b:7e:c7:5d:5d:5e:87:b0:a4:0f:e5: 25:48:ea:72:51:da:75:dd:17:3f:1a:bc:18:54:55: b5:90:d1:2d:d1:18:d2:5b:5e:f9:2f:47:a5:a6:81: 5d:5f:ea:5c:cd:41:9b:04:8f:ac:f6:4b:52:b0:97: 90:f9:01:22:af:68:6b:0b:2b:42:3d:32:50:8d:39: d0:e2:24:6e:3f:ae:39:33:9d:8d:8b:45:8c:ae:45: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:45:63:79:CF:3D:62:65:8E:D9:3A:D6:C8:DE:16:1C:9E:2F:E0 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:10:ad:d2:45:8c:40:34:54:f9:3a:ad:cb:c0:0e:cc:32:c3: 8e:21:d9:ba:83:91:c4:8c:fd:87:98:a8:7b:23:56:22:d2:63: 0c:b9:e7:35:53:a6:63:d8:e9:04:27:73:4a:27:ce:7c:45:57: 26:f3:ec:c1:cb:00:dc:70:57:14:4f:87:db:40:64:ee:a3:98: 08:13:40:6b:07:da:0b:54:07:86:8e:4a:d1:ec:25:07:50:71: 65:4b:3c:a9:92:6f:79:40:ef:d8:ef:70:c7:85:21:eb:6a:82: 18:5e:29:84:1b:6f:5a:bb:a5:5a:1e:66:56:7e:cb:43:19:9f: 88:97:58:f4:76:95:63:c3:be:57:23:4c:2b:29:26:4c:da:5f: 48:65:db:6a:ae:c4:f0:8b:3f:20:bb:61:6a:44:91:79:23:1f: 13:fe:f9:ee:a6:ce:a9:3b:0e:d4:b8:87:91:db:5c:07:85:d3: a0:fd:82:bd:04:30:3d:49:c1:95:42:3d:6c:23:ae:f3:69:32: 3b:62:d4:22:1b:de:6f:38:24:63:25:92:d7:7d:42:f4:e5:2b: d2:20:56:cc:e7:94:00:f9:fd:4a:9d:05:9f:f4:0b:f6:5c:96: a3:8d:de:37:ba:ed:94:55:ff:52:69:4e:cd:7a:19:50:6c:06: 29:9a:71:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYwODE4MTgxODI5WhcNMjYwODI1MTgxODI5WjAYMRYwFAYD VQQDEw02YTg0YTFmNi0zYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjnx3NjWiSAlMPa6HkmWlt3bAIbCJO15DNWdlf/648fiLkdPhdbuS7Phm2tOc hFyADYfdKAy3teajtlO7ev0plT32o8ypNldC1USE5LLaKqAozqzsxA7OZjXms3rd c06Mg8XvT6hyi1C4/pDySoiioXtQvbKU0s/Z+BbUKlV0k7uMO1R+m4rT6lEJRSXC TIHtyeVvWGdoHqn1VG6EuDoeaW/YGRIz0L8yi37HXV1eh7CkD+UlSOpyUdp13Rc/ GrwYVFW1kNEt0RjSW175L0elpoFdX+pczUGbBI+s9ktSsJeQ+QEir2hrCytCPTJQ jTnQ4iRuP645M52Ni0WMrkWr7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoIRWN5 zz1iZY7ZOtbI3hYcni/gMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJBCt0kWMQDRU+Tqty8AOzDLDjiHZuoORxIz9h5ioeyNWItJjDLnnNVOmY9jp BCdzSifOfEVXJvPswcsA3HBXFE+H20Bk7qOYCBNAawfaC1QHho5K0ewlB1BxZUs8 qZJveUDv2O9wx4Uh62qCGF4phBtvWrulWh5mVn7LQxmfiJdY9HaVY8O+VyNMKykm TNpfSGXbaq7E8Is/ILthakSReSMfE/757qbOqTsO1LiHkdtcB4XToP2CvQQwPUnB lUI9bCOu82kyO2LUIhvebzgkYyWS131C9OUr0iBWzOeUAPn9Sp0Fn/QL9lyWo43e N7rtlFX/UmlOzXoZUGwGKZpx0w== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:51 2026 by rpki-client