$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: wbyiDzJpC9Nr5Sao0YJ9V4rd0WA2z/jcWc4frELuS3M= Subject key identifier: A8:26:07:AD:ED:53:45:50:F5:F5:91:89:D5:16:B8:F8:38:4D:2D:48 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0D5C Signing time: Fri 02 Oct 2026 18:15:26 +0000 Manifest this update: Fri 02 Oct 2026 18:15:25 +0000 Manifest next update: Fri 09 Oct 2026 18:15:25 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: CPhYjTGW0HHCqHk6M/Jnu7EIdEvptHXyeMZ1Mf1Nzc0=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Oct 2 18:15:25 2026 GMT Not After : Oct 9 18:15:25 2026 GMT Subject: CN=6abff4be-afaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:f8:d0:9d:fb:01:21:09:8d:d5:7c:5a:ad: ca:e8:6c:58:a2:31:f7:0e:1a:a6:f1:bd:60:b0:28: 3b:f0:c0:77:02:eb:68:f0:c6:f9:5a:c2:89:ed:3c: c7:a8:51:b4:49:2d:a6:c5:f0:15:c8:22:90:26:7b: 6d:88:d6:e0:b6:e0:b2:3a:9e:40:88:3b:59:e4:65: ae:0d:d1:7c:52:58:c0:da:bb:f2:2b:34:00:bd:20: 37:52:db:99:70:f9:88:79:e5:4b:42:02:34:8a:85: 8e:44:dd:d2:a3:3a:d4:3c:0c:e5:6e:3b:03:2c:5d: 18:7c:f0:ef:af:13:a1:2e:02:3b:07:34:06:ab:9b: 66:ca:ae:18:6f:f5:75:22:26:2d:77:46:b1:12:04: 22:98:01:6e:a0:95:82:16:d7:d8:eb:db:7b:74:95: 04:67:5d:d4:8c:13:61:1e:a7:7e:82:f5:c0:89:af: b8:7f:12:79:b5:d9:f2:63:65:43:d8:b2:ff:99:74: cf:3e:5e:67:c1:9f:a9:9d:53:55:27:14:7c:84:fe: 66:46:21:83:e4:2d:20:f3:9b:f1:0d:68:fd:a7:73: f2:0e:c1:ac:97:33:a2:9d:33:20:f2:04:a5:09:a4: ac:86:8d:00:47:e9:ed:54:0d:4c:b9:63:fb:e1:21: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:26:07:AD:ED:53:45:50:F5:F5:91:89:D5:16:B8:F8:38:4D:2D:48 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:af:e4:45:05:0d:a8:1c:e5:4d:ac:f5:5c:53:70:4d:63:d4: e5:9c:59:39:12:c0:2e:94:89:dd:97:92:bb:86:f0:50:0b:72: 7a:a4:fe:00:aa:83:8a:20:d8:45:7e:e9:d8:7c:09:e7:ee:08: 3b:68:43:23:9d:92:ba:82:d2:b1:c4:a3:b3:c9:09:e6:b9:77: 0c:21:74:c8:68:c9:8a:20:c4:7b:c9:16:6d:76:a3:89:ce:2e: 25:be:48:fc:93:58:5f:5c:6d:ee:b0:a8:84:0e:27:38:ec:0e: 0b:1f:be:be:48:50:38:da:b0:b1:c0:dd:ce:9e:db:10:f5:6a: dc:09:a3:a1:13:2c:ca:07:fc:5c:15:82:80:c1:2e:12:c5:b6: 16:e4:44:e7:75:4c:22:1b:d6:31:ca:53:17:b5:dd:2a:8c:ca: 12:02:e4:60:f5:27:05:bd:1f:c4:42:ab:9f:96:a7:97:f2:b6: da:f6:dc:61:1e:d5:3e:59:89:43:3d:9d:f0:fe:ac:22:ab:f6: 98:d4:17:f0:ef:72:b7:6f:bf:49:37:6b:ba:1e:c6:56:d2:17: 28:6a:dd:d6:37:72:de:6e:66:73:ac:b9:96:a4:26:ad:5d:a7: 17:12:66:b6:c1:de:95:95:bd:84:26:1c:73:97:a3:27:96:5c: be:56:35:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYxMDAyMTgxNTI1WhcNMjYxMDA5MTgxNTI1WjAYMRYwFAYD VQQDEw02YWJmZjRiZS1hZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoH40J37ASEJjdV8Wq3K6GxYojH3Dhqm8b1gsCg78MB3Auto8Mb5WsKJ7TzH qFG0SS2mxfAVyCKQJnttiNbgtuCyOp5AiDtZ5GWuDdF8UljA2rvyKzQAvSA3UtuZ cPmIeeVLQgI0ioWORN3SozrUPAzlbjsDLF0YfPDvrxOhLgI7BzQGq5tmyq4Yb/V1 IiYtd0axEgQimAFuoJWCFtfY69t7dJUEZ13UjBNhHqd+gvXAia+4fxJ5tdnyY2VD 2LL/mXTPPl5nwZ+pnVNVJxR8hP5mRiGD5C0g85vxDWj9p3PyDsGslzOinTMg8gSl CaSsho0AR+ntVA1MuWP74SGjUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKgmB63t U0VQ9fWRidUWuPg4TS1IMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvK/kRQUNqBzlTaz1XFNwTWPU5ZxZORLALpSJ3ZeSu4bwUAtyeqT+AKqDiiDY RX7p2HwJ5+4IO2hDI52SuoLSscSjs8kJ5rl3DCF0yGjJiiDEe8kWbXajic4uJb5I /JNYX1xt7rCohA4nOOwOCx++vkhQONqwscDdzp7bEPVq3AmjoRMsygf8XBWCgMEu EsW2FuRE53VMIhvWMcpTF7XdKozKEgLkYPUnBb0fxEKrn5anl/K22vbcYR7VPlmJ Qz2d8P6sIqv2mNQX8O9yt2+/STdruh7GVtIXKGrd1jdy3m5mc6y5lqQmrV2nFxJm tsHelZW9hCYcc5ejJ5ZcvlY1rQ== -----END CERTIFICATE-----Generated at Sun Oct 4 08:52:34 2026 by rpki-client