$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: TIGgql5b9jXu1F3Q32lF+1r08vpp1lV8QEZDIj65a0M= Subject key identifier: 2F:FC:43:C0:81:BC:06:AE:29:75:B8:4D:06:37:1E:B5:68:A6:36:B8 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 135D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 130E Signing time: Thu 09 Jul 2026 09:08:09 +0000 Manifest this update: Thu 09 Jul 2026 09:08:08 +0000 Manifest next update: Thu 16 Jul 2026 09:08:08 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: I+b/mOHEUZyQA6uF2nJP3mqPAFx7a9nNaXT5VGB/JDc=) 2: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: GwBzururP91LCAF7TSNIMtRqmicpSh1Gk2iqSgIOC/E=) 3: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=) 4: C8F89EF260B811F19C6DC3147F47A888.roa (hash: KeWwMhx4c7U/ZQPC2bJz74fYjPr5gQDtKF2jRuwLCqo=) 5: 8302EB5A7B7511F1BA0904A763A30FBC.roa (hash: LkZnJ3QA5cnl1yBZi3+auFKRPPNbQMzrYVVyOZE6xyQ=) 6: CA04831060B811F19C6DC3147F47A888.roa (hash: rOz2RbSRemVOFrRimoMVT6/+5tzDGcbwoE9kdakjgFA=) 7: 5C67E8E87B7411F1A3D02C1F63A30FBC.roa (hash: ORuMnxH7G7FX6h8tXJKoehvjLlQp1iQA/wSMC0O4y0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Jul 2026 09:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4957 (0x135d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Jul 9 09:08:08 2026 GMT Not After : Jul 16 09:08:08 2026 GMT Subject: CN=6a4f64f9-24a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:cd:7c:ae:db:79:b1:78:ec:ec:ab:a5:18: 28:bb:cf:a3:f9:a6:5e:2a:f5:ca:29:f8:dc:3d:4a: b7:39:78:c3:cf:00:5c:14:dd:d8:4d:03:a1:f1:cf: 63:1e:03:1c:9e:3b:40:16:f3:c1:c0:6d:db:72:7b: b5:f3:ad:ed:1f:fe:6c:8f:ff:3e:84:7c:34:d2:95: 43:33:9a:b1:32:8c:2d:24:46:06:dc:00:86:54:2e: 08:89:62:ca:61:dd:93:c1:6f:2c:1e:b6:9f:3c:a1: f6:47:6b:90:9d:a6:f1:71:1d:ce:9c:58:0e:55:fa: f6:25:44:b5:e4:3e:b6:2d:f9:df:48:4e:22:82:d9: 4c:0c:df:76:f7:33:b5:03:3e:0d:eb:29:6c:10:47: be:3c:bf:1a:04:e4:04:48:b1:2f:5b:b3:b6:0f:56: b2:aa:ac:8f:a5:91:64:98:24:8b:65:5b:08:cf:3d: 5a:7e:09:97:d4:04:19:5c:06:96:0e:78:99:9e:f6: 80:2a:e6:13:de:78:bd:02:f6:90:42:1f:7d:d1:73: 32:5a:44:9c:bd:e5:af:cb:ed:33:87:fd:d3:e6:0c: 7d:9a:8a:0f:b5:6e:90:23:d6:2b:39:ff:ae:79:6f: 0a:de:53:53:34:4e:33:cf:ea:35:53:a2:eb:ea:c2: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FC:43:C0:81:BC:06:AE:29:75:B8:4D:06:37:1E:B5:68:A6:36:B8 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6e:08:1b:68:76:48:aa:a8:6b:e9:25:1c:98:9f:42:07:02: aa:00:33:9b:2e:5c:73:ff:73:3c:0f:6f:d9:f4:fe:ed:52:0a: 3c:f1:77:9c:27:f3:a2:71:a3:9e:46:6a:ab:ca:62:5b:d6:b9: 65:0d:1d:0f:ae:30:f1:ee:fd:b1:11:38:ba:e1:82:6f:97:68: 52:af:8c:72:96:28:9c:5a:1a:41:93:9d:cd:41:ab:b1:55:a5: 7b:42:69:6b:39:22:c7:61:bd:36:fb:d1:b9:3f:76:d3:c2:a5: 9f:64:f7:34:c2:b3:03:c6:1b:a5:97:fe:47:91:f0:8b:4c:a8: f1:de:06:54:8c:5d:83:64:09:d3:b5:eb:de:43:25:0f:1b:44: c6:fd:99:e6:85:16:ac:ef:bd:84:5a:ad:5c:68:fb:e0:a4:ca: 4e:c9:ab:e9:a9:ed:0e:6d:0d:02:2b:fb:f0:f6:d6:51:26:2e: 79:db:80:6e:32:fa:38:c2:59:f7:65:06:8f:a2:6d:cf:7a:43: 75:17:58:42:cd:c7:2f:79:b6:e0:df:14:1d:e4:01:ff:01:92: 43:df:49:cb:96:97:eb:48:cf:72:11:d9:08:e9:38:d4:95:11: 03:1b:59:02:fa:77:e9:fa:55:c5:a2:ed:e5:5b:de:00:1f:88: 7b:d7:e3:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwNzA5MDkwODA4WhcNMjYwNzE2MDkwODA4WjAYMRYwFAYD VQQDEw02YTRmNjRmOS0yNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HLNfK7bebF47OyrpRgou8+j+aZeKvXKKfjcPUq3OXjDzwBcFN3YTQOh8c9j HgMcnjtAFvPBwG3bcnu1863tH/5sj/8+hHw00pVDM5qxMowtJEYG3ACGVC4IiWLK Yd2TwW8sHrafPKH2R2uQnabxcR3OnFgOVfr2JUS15D62LfnfSE4igtlMDN929zO1 Az4N6ylsEEe+PL8aBOQESLEvW7O2D1ayqqyPpZFkmCSLZVsIzz1afgmX1AQZXAaW DniZnvaAKuYT3ni9AvaQQh990XMyWkScveWvy+0zh/3T5gx9mooPtW6QI9YrOf+u eW8K3lNTNE4zz+o1U6Lr6sIMzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/8Q8CB vAauKXW4TQY3HrVopja4MB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADG4IG2h2SKqoa+klHJifQgcCqgAzmy5cc/9zPA9v2fT+7VIKPPF3nCfzonGj nkZqq8piW9a5ZQ0dD64w8e79sRE4uuGCb5doUq+McpYonFoaQZOdzUGrsVWle0Jp azkix2G9NvvRuT9208Kln2T3NMKzA8YbpZf+R5Hwi0yo8d4GVIxdg2QJ07Xr3kMl DxtExv2Z5oUWrO+9hFqtXGj74KTKTsmr6antDm0NAiv78PbWUSYueduAbjL6OMJZ 92UGj6Jtz3pDdRdYQs3HL3m24N8UHeQB/wGSQ99Jy5aX60jPchHZCOk41JURAxtZ Avp36fpVxaLt5VveAB+Ie9fj0A== -----END CERTIFICATE-----Generated at Thu Jul 9 16:35:46 2026 by rpki-client