$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: /VX2dymSVl0VVVR9XrDI6+WiKQBAc7WZuJU02Fk0rbg= Subject key identifier: 02:AA:6C:62:4B:5C:B8:E9:E9:F9:A4:0C:1C:F7:07:19:D7:48:C3:67 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 290D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 28E1 Signing time: Mon 28 Sep 2026 15:36:40 +0000 Manifest this update: Mon 28 Sep 2026 15:36:39 +0000 Manifest next update: Mon 05 Oct 2026 15:36:39 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: CWn3/YQk13ODeN89mLkr5TExDeLeE0+wYvBJIo6MjhI=) 2: 5UXIKmWqo-EBUfAdqb3AfiGNwt4.asa (hash: EGbS76h1brvYeOhgFfCzAj/zLNdTcv0xYc1rIzDyMRA=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: TspezYM4IRlokwPfjhl3bMH0Gn30QinDMLtE8ZCLHTk=) 4: RjtJADDV0_xVIHKM6AxMwjiOpJc.asa (hash: cizTmtMukagaIDONuHUr+Znzj5qm8V+AxuhTGLPEf8A=) 5: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: FfIhVgOobJG4Dwk4yARQxeFwaeZwMJUebKyXm+2RqRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10509 (0x290d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Sep 28 15:36:39 2026 GMT Not After : Oct 5 15:36:39 2026 GMT Subject: CN=6aba8988-9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:e1:96:55:45:76:74:51:59:c5:3e:ae:ca: 59:05:db:53:09:24:33:11:a8:ac:cb:ff:74:f5:8c: c0:3b:8e:b4:02:a2:74:66:11:26:b4:de:60:db:75: e9:1c:4b:e4:33:0c:ca:1c:62:69:ee:40:32:f2:d4: 11:81:f7:99:d0:b2:41:bf:6c:a9:cd:6e:74:d9:07: 65:71:ab:1d:10:34:3e:bf:7d:e1:42:27:c0:d9:95: 5d:36:0e:8b:e7:44:d5:d2:1b:15:33:bc:03:98:ec: 43:91:3a:96:32:c8:a4:9d:e5:79:14:bb:9e:c8:66: ca:a6:8f:54:84:82:8e:22:9c:00:b8:23:a5:d6:68: fa:11:0e:16:15:ad:eb:2d:8e:7a:48:90:2f:43:0f: 9a:5d:28:fb:fb:ad:96:48:7f:85:a6:52:fe:e1:09: 2f:57:11:31:8c:ad:ce:81:9c:14:83:bb:e7:c3:78: 21:18:f3:9d:f0:c9:b9:20:69:9f:89:99:3a:ae:c7: fd:03:22:c0:c4:ff:84:f4:92:af:b2:53:6d:7d:1a: 66:f8:55:29:03:69:f9:41:e8:d3:a5:8d:b7:9f:0b: 5f:92:b9:05:77:81:01:c2:e5:b9:6e:5a:3a:e1:4f: 9d:a1:93:23:94:25:70:cc:f3:07:cf:19:b8:8b:37: 7b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:6C:62:4B:5C:B8:E9:E9:F9:A4:0C:1C:F7:07:19:D7:48:C3:67 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:0b:0f:56:b5:d3:c0:4d:8c:e0:4d:56:74:52:fd:d0:8c: da:3c:71:4c:32:9c:2f:44:2e:57:9b:70:e5:ad:ca:6d:a4:b5: 0c:33:1f:cf:5c:22:22:b3:5b:e7:08:c3:9c:2b:f4:77:c1:1e: 42:63:20:21:a0:37:53:b8:d9:14:a9:2a:02:51:5e:d7:10:b0: 68:30:4f:b9:bc:c5:de:ee:7a:77:e5:49:c3:dc:20:7b:1d:55: de:78:a8:1b:b6:ac:b2:36:e6:73:9d:e9:d6:f4:b0:66:37:a0: eb:55:e9:d2:7a:79:b9:a6:f0:a4:f8:af:4b:ad:41:48:6e:6e: 57:d7:22:db:1e:c9:95:77:70:b2:d0:59:3a:e7:bb:67:79:0e: c5:a2:c8:7d:42:1b:12:7c:e1:12:a5:9a:b1:c5:ef:fa:1d:a3: 25:50:5a:5b:a2:48:d5:7a:90:63:ef:e7:ce:5f:15:e0:f3:6b: 11:69:48:d6:f7:59:82:7c:60:e7:fb:0f:9c:67:9f:43:42:4a: cf:05:5e:e7:96:0a:16:a0:61:ed:80:2d:9b:e0:67:95:88:37: c6:c8:00:1c:b3:fe:a3:ca:ed:87:f8:d6:c8:54:4c:2c:e0:f9: 3c:7b:46:51:a7:f4:3d:56:df:8b:ae:d4:4b:68:8f:37:9b:49: 89:65:fd:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwOTI4MTUzNjM5WhcNMjYxMDA1MTUzNjM5WjAYMRYwFAYD VQQDEw02YWJhODk4OC05OTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHfhllVFdnRRWcU+rspZBdtTCSQzEaisy/909YzAO460AqJ0ZhEmtN5g23Xp HEvkMwzKHGJp7kAy8tQRgfeZ0LJBv2ypzW502QdlcasdEDQ+v33hQifA2ZVdNg6L 50TV0hsVM7wDmOxDkTqWMsikneV5FLueyGbKpo9UhIKOIpwAuCOl1mj6EQ4WFa3r LY56SJAvQw+aXSj7+62WSH+FplL+4QkvVxExjK3OgZwUg7vnw3ghGPOd8Mm5IGmf iZk6rsf9AyLAxP+E9JKvslNtfRpm+FUpA2n5QejTpY23nwtfkrkFd4EBwuW5blo6 4U+doZMjlCVwzPMHzxm4izd71QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKqbGJL XLjp6fmkDBz3BxnXSMNnMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAelALD1a108BNjOBNVnRS/dCM2jxxTDKcL0QuV5tw5a3KbaS1DDMfz1wiIrNb 5wjDnCv0d8EeQmMgIaA3U7jZFKkqAlFe1xCwaDBPubzF3u56d+VJw9wgex1V3nio G7assjbmc53p1vSwZjeg61Xp0np5uabwpPivS61BSG5uV9ci2x7JlXdwstBZOue7 Z3kOxaLIfUIbEnzhEqWascXv+h2jJVBaW6JI1XqQY+/nzl8V4PNrEWlI1vdZgnxg 5/sPnGefQ0JKzwVe55YKFqBh7YAtm+BnlYg3xsgAHLP+o8rth/jWyFRMLOD5PHtG Uaf0PVbfi67US2iPN5tJiWX9Jg== -----END CERTIFICATE-----Generated at Mon Sep 28 17:50:20 2026 by rpki-client