$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: Zx8GVK0f1ft3O2XsE/QAvFjTp7/Zr3mQcrLy0X8ahuU= Subject key identifier: E2:2F:EB:40:DE:75:4C:6B:DF:86:3C:08:37:A1:F1:0C:DB:CC:F1:6B Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 138E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 133F Signing time: Mon 12 Oct 2026 17:06:10 +0000 Manifest this update: Mon 12 Oct 2026 17:06:10 +0000 Manifest next update: Mon 19 Oct 2026 17:06:10 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: hPFNTp7lO2C9l4HG983o2AWxJ2FPNC4yIOkmRurbmq0=) 2: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: GwBzururP91LCAF7TSNIMtRqmicpSh1Gk2iqSgIOC/E=) 3: CA04831060B811F19C6DC3147F47A888.roa (hash: rOz2RbSRemVOFrRimoMVT6/+5tzDGcbwoE9kdakjgFA=) 4: 8302EB5A7B7511F1BA0904A763A30FBC.roa (hash: LkZnJ3QA5cnl1yBZi3+auFKRPPNbQMzrYVVyOZE6xyQ=) 5: C8F89EF260B811F19C6DC3147F47A888.roa (hash: KeWwMhx4c7U/ZQPC2bJz74fYjPr5gQDtKF2jRuwLCqo=) 6: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=) 7: 5C67E8E87B7411F1A3D02C1F63A30FBC.roa (hash: ORuMnxH7G7FX6h8tXJKoehvjLlQp1iQA/wSMC0O4y0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 17:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5006 (0x138e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Oct 12 17:06:10 2026 GMT Not After : Oct 19 17:06:10 2026 GMT Subject: CN=6acd1382-b986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:e3:76:d2:46:aa:bb:b0:aa:f2:72:37:83: 80:36:fa:eb:74:d1:99:06:fc:bd:64:10:ff:16:7d: 5a:15:be:a9:2d:0d:6a:75:42:60:0d:0c:fe:84:79: d0:fd:ac:c4:7c:81:f9:52:e8:38:44:ff:71:6e:8a: 71:5c:74:fb:c4:f1:62:75:a7:3f:d2:33:d2:d0:80: ee:32:1e:e5:5a:c0:84:c5:5a:9e:8d:d1:d5:29:dc: 35:f9:3f:d7:1c:b0:38:b8:60:66:d2:69:3f:01:f7: 48:44:5a:94:09:af:fd:ce:43:c3:d9:51:fd:36:a4: ff:08:87:f0:05:68:57:cc:16:1f:06:6c:0c:57:dd: f4:cd:2d:0a:19:ed:ee:d5:b3:ff:40:8e:a9:25:f6: b6:5f:76:9a:c1:85:a1:05:e9:63:ec:5f:e6:fb:2d: f2:ab:29:b7:d0:7a:52:12:5a:62:83:34:ab:a9:d2: 8b:82:ae:c2:08:83:d2:a2:35:5f:54:b7:05:1c:8a: a6:5e:a9:bf:7e:b0:c1:6d:3d:41:f0:55:9a:cc:6d: 03:19:f3:21:af:33:b9:1b:5a:c7:ef:e0:c1:ff:e9: 8e:b0:91:a4:bd:6c:b0:ef:5d:df:e4:6c:37:7c:ef: 4f:a5:7d:64:60:54:ad:4f:24:48:7c:8f:35:68:b4: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:EB:40:DE:75:4C:6B:DF:86:3C:08:37:A1:F1:0C:DB:CC:F1:6B X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ad:b0:89:58:65:86:f6:bf:19:94:dc:02:8a:a6:e7:f1:df: 63:29:1e:3d:94:40:b9:06:91:72:01:4a:17:42:2d:46:d9:e5: 0f:06:70:5a:27:b8:aa:58:f5:8d:96:67:c2:2d:a6:9d:1b:c1: eb:f4:5c:9f:a3:61:3a:f7:ce:18:6b:18:e3:ce:c8:ab:7c:77: 85:ab:38:e4:c9:13:26:d7:7b:77:02:8f:fa:c3:ff:a8:45:8a: bb:cd:b6:58:5a:63:8e:eb:d7:4e:16:24:cd:65:b7:fd:e1:bf: 1c:d8:c7:e7:25:da:2d:7a:52:73:49:b4:74:90:37:85:12:37: ee:b6:69:2b:ce:57:4e:4f:67:00:96:49:54:a5:30:69:4c:05: 36:cc:5d:db:58:ce:56:9d:57:4e:db:91:82:78:56:e8:a5:7b: 56:96:8f:25:3a:cd:e3:4a:ab:d7:0c:83:03:0c:3b:7c:a0:74: 22:d9:9f:19:aa:12:33:ec:17:c0:eb:32:d6:90:72:c6:38:5d: c1:c7:1e:cf:e1:7f:49:d8:e3:ec:ba:a6:0e:01:0e:11:ac:d2: 54:82:f4:e1:8f:42:47:5d:bf:80:30:25:2b:e0:c6:aa:8a:9d: 9e:bd:fb:d3:89:6c:18:e5:a4:c4:b0:de:b3:5d:91:b7:24:b3: 42:7d:ac:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYxMDEyMTcwNjEwWhcNMjYxMDE5MTcwNjEwWjAYMRYwFAYD VQQDEw02YWNkMTM4Mi1iOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1bjdtJGqruwqvJyN4OANvrrdNGZBvy9ZBD/Fn1aFb6pLQ1qdUJgDQz+hHnQ /azEfIH5Uug4RP9xbopxXHT7xPFidac/0jPS0IDuMh7lWsCExVqejdHVKdw1+T/X HLA4uGBm0mk/AfdIRFqUCa/9zkPD2VH9NqT/CIfwBWhXzBYfBmwMV930zS0KGe3u 1bP/QI6pJfa2X3aawYWhBelj7F/m+y3yqym30HpSElpigzSrqdKLgq7CCIPSojVf VLcFHIqmXqm/frDBbT1B8FWazG0DGfMhrzO5G1rH7+DB/+mOsJGkvWyw713f5Gw3 fO9PpX1kYFStTyRIfI81aLTd3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIv60De dUxr34Y8CDeh8QzbzPFrMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALK2wiVhlhva/GZTcAoqm5/HfYykePZRAuQaRcgFKF0ItRtnlDwZwWie4qlj1 jZZnwi2mnRvB6/Rcn6NhOvfOGGsY487Iq3x3has45MkTJtd7dwKP+sP/qEWKu822 WFpjjuvXThYkzWW3/eG/HNjH5yXaLXpSc0m0dJA3hRI37rZpK85XTk9nAJZJVKUw aUwFNsxd21jOVp1XTtuRgnhW6KV7VpaPJTrN40qr1wyDAww7fKB0ItmfGaoSM+wX wOsy1pByxjhdwccez+F/Sdjj7LqmDgEOEazSVIL04Y9CR12/gDAlK+DGqoqdnr37 04lsGOWkxLDes12RtySzQn2s1g== -----END CERTIFICATE-----Generated at Tue Oct 13 17:42:58 2026 by rpki-client