$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: Z3O0mQQBUU2BBupnPbbRXd5SmJpB5Mr2ayArz+5jRso= Subject key identifier: FA:0E:F8:29:27:B7:AE:F1:06:55:04:DF:A3:E2:93:D1:6F:9D:A7:32 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1326 Signing time: Mon 24 Aug 2026 16:59:23 +0000 Manifest this update: Mon 24 Aug 2026 16:59:22 +0000 Manifest next update: Mon 31 Aug 2026 16:59:22 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: kmJ+7gxcBgvc9eKjojysn87OJeyN6Nvid9gkrFZYR7A=) 2: 8302EB5A7B7511F1BA0904A763A30FBC.roa (hash: LkZnJ3QA5cnl1yBZi3+auFKRPPNbQMzrYVVyOZE6xyQ=) 3: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: GwBzururP91LCAF7TSNIMtRqmicpSh1Gk2iqSgIOC/E=) 4: 5C67E8E87B7411F1A3D02C1F63A30FBC.roa (hash: ORuMnxH7G7FX6h8tXJKoehvjLlQp1iQA/wSMC0O4y0s=) 5: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=) 6: CA04831060B811F19C6DC3147F47A888.roa (hash: rOz2RbSRemVOFrRimoMVT6/+5tzDGcbwoE9kdakjgFA=) 7: C8F89EF260B811F19C6DC3147F47A888.roa (hash: KeWwMhx4c7U/ZQPC2bJz74fYjPr5gQDtKF2jRuwLCqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 16:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4981 (0x1375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Aug 24 16:59:22 2026 GMT Not After : Aug 31 16:59:22 2026 GMT Subject: CN=6a8c786b-a284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:c2:4a:fa:d5:23:17:bd:7b:1c:44:90:41: 2b:f0:fa:0d:ca:03:a5:88:2f:88:23:4c:94:7b:95: e1:8f:5d:7b:f6:c7:8a:0e:5f:5f:2f:3f:02:cf:5e: 9c:98:af:30:ac:3a:f0:b2:07:de:58:c1:ad:30:19: 41:59:cc:fb:fc:53:8b:5e:28:e1:9a:80:39:7b:28: 5e:1f:55:37:91:7e:bd:7a:7e:63:a9:d5:34:d3:c8: 7e:36:6d:54:64:2d:63:32:80:c0:18:2b:d9:80:0b: c1:94:66:b7:d4:90:63:cb:9a:4f:c4:44:d2:24:e9: f0:ca:10:ec:54:bb:c3:31:40:16:3a:d1:29:43:5e: 67:94:63:0e:24:31:e3:cb:b2:ac:33:62:e8:82:07: 98:24:2a:5c:8f:ae:22:3a:31:13:20:d6:06:d0:bd: 53:c7:ec:ee:fa:c8:f0:4a:5d:6d:04:be:95:75:3a: 40:23:6c:21:50:42:86:24:aa:e7:9c:bb:be:b7:92: 53:12:cb:22:c8:e9:c0:4b:18:60:fd:c5:25:b0:be: bf:ab:0d:00:db:e5:9a:61:0d:79:57:3f:fb:4f:3d: f1:60:31:58:6b:a4:3c:f6:bb:5a:57:bd:41:fb:54: 31:1c:3e:cb:cb:d1:2a:80:80:25:4b:92:40:e3:6d: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:F8:29:27:B7:AE:F1:06:55:04:DF:A3:E2:93:D1:6F:9D:A7:32 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1b:76:26:f8:2f:6a:e9:2b:e0:1e:5c:62:b2:cd:77:c1:d7: ff:e9:7a:db:6c:bc:dc:bc:b5:3a:8c:49:c7:af:82:95:1f:a8: 8e:9a:c8:29:45:59:c0:d6:2f:cd:0d:2b:83:0c:55:e2:38:d0: 3b:e2:95:ad:0c:c1:fb:3e:63:e7:f1:22:88:17:c1:57:80:f4: 22:5a:9e:7f:2d:71:78:27:31:50:ac:c6:67:af:e8:41:5a:58: fc:7c:2c:56:e1:78:0c:d7:1d:a9:f3:79:bb:88:13:14:ae:0e: 00:57:21:3b:2f:29:ae:3c:7b:84:6b:4f:f7:54:42:a0:69:26: a1:c6:ef:1a:87:41:be:cd:79:5a:fb:6f:12:8d:23:10:ed:20: 10:52:41:f9:e0:2b:f9:ce:52:60:36:74:80:d7:c2:be:0a:56: 5c:f4:c4:19:c5:bc:c2:42:fe:d1:6a:74:9a:09:cb:ef:3d:83: 35:a6:43:c5:19:a7:d6:33:a2:52:bb:58:83:04:b7:d7:33:85: 31:c1:93:f2:4e:bd:75:d4:c7:25:1f:fb:e8:07:74:34:43:70: 36:78:3c:4d:d4:7f:59:fb:c6:33:2e:95:28:f0:a7:6c:fd:75: 65:d7:69:48:56:70:9c:bd:0b:08:5c:69:4a:42:e8:68:fb:d4: 97:d9:ec:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwODI0MTY1OTIyWhcNMjYwODMxMTY1OTIyWjAYMRYwFAYD VQQDEw02YThjNzg2Yi1hMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHDCSvrVIxe9exxEkEEr8PoNygOliC+II0yUe5Xhj1179seKDl9fLz8Cz16c mK8wrDrwsgfeWMGtMBlBWcz7/FOLXijhmoA5eyheH1U3kX69en5jqdU008h+Nm1U ZC1jMoDAGCvZgAvBlGa31JBjy5pPxETSJOnwyhDsVLvDMUAWOtEpQ15nlGMOJDHj y7KsM2LoggeYJCpcj64iOjETINYG0L1Tx+zu+sjwSl1tBL6VdTpAI2whUEKGJKrn nLu+t5JTEssiyOnASxhg/cUlsL6/qw0A2+WaYQ15Vz/7Tz3xYDFYa6Q89rtaV71B +1QxHD7Ly9EqgIAlS5JA423XHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoO+Ckn t67xBlUE36Pik9FvnacyMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHRt2Jvgvaukr4B5cYrLNd8HX/+l622y83Ly1OoxJx6+ClR+ojprIKUVZwNYv zQ0rgwxV4jjQO+KVrQzB+z5j5/EiiBfBV4D0Ilqefy1xeCcxUKzGZ6/oQVpY/Hws VuF4DNcdqfN5u4gTFK4OAFchOy8prjx7hGtP91RCoGkmocbvGodBvs15WvtvEo0j EO0gEFJB+eAr+c5SYDZ0gNfCvgpWXPTEGcW8wkL+0Wp0mgnL7z2DNaZDxRmn1jOi UrtYgwS31zOFMcGT8k69ddTHJR/76Ad0NENwNng8TdR/WfvGMy6VKPCnbP11Zddp SFZwnL0LCFxpSkLoaPvUl9nsWw== -----END CERTIFICATE-----Generated at Tue Aug 25 04:21:56 2026 by rpki-client