$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: r45IGO4SpHkOohszztxhrC8ZQrLOb6USt+20wYIP9xM= Subject key identifier: 0A:66:00:7E:4F:FA:32:55:51:61:3A:53:17:44:54:A7:E1:F3:52:ED Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 02E5 Signing time: Tue 13 Oct 2026 02:16:52 +0000 Manifest this update: Tue 13 Oct 2026 02:16:51 +0000 Manifest next update: Tue 20 Oct 2026 02:16:51 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: L9edaJj3S+b/AdCyQ6nobsYKX6wvnpFF4LcaKShsofc=) 2: 9DE65586B59711F1AB99D6F56F11F970.roa (hash: 38eVkDuTLHLQ/396GDYGDbEFVPX54+PN3xrExb8g9qQ=) 3: 23852F72273711F1B6AB5B98AD833773.roa (hash: ektQBShXJ5BEKzyA8visW0s0Qg76mbW8+8RclzWr6k4=) 4: 05F505961AA311F0A475D464C4F9AE02.roa (hash: oQQPkdpT5DDBLU1PWyqZU8Cg3jPky7F7z6ow8HBZGoM=) 5: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: fZlLSWyhk+jtQ34uhpkIw+sRdlD+d7ZiPx48gzF1SuI=) 6: 020607A2498711EFBB260663C4F9AE02.roa (hash: TsRQV86ABpakyFtq/EQ6oWMagaNXmmZwXudJvyvhgkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 02:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Oct 13 02:16:51 2026 GMT Not After : Oct 20 02:16:51 2026 GMT Subject: CN=6acd9494-4e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:93:4f:7d:e1:43:51:b5:53:44:b7:c3:2e: c3:4d:25:d4:7d:bc:38:5f:a8:3b:5e:18:03:f4:5d: 67:65:af:44:af:ea:d8:ec:13:99:92:bc:48:8b:b4: 98:c8:0b:82:6a:a5:93:18:f0:0f:2c:92:df:55:36: aa:df:63:9a:f1:75:76:22:0b:f8:d7:86:67:59:0e: e7:30:d0:b0:d3:fc:7a:f4:56:64:30:0b:9d:9c:f8: 5c:8f:90:72:87:36:89:c0:36:20:91:36:f2:32:76: 83:5d:64:4a:3d:e8:cc:cc:a1:7a:1d:15:f3:9c:3c: 3e:88:65:3c:36:99:65:b1:22:27:bf:47:51:6f:d8: 77:f6:21:74:65:7e:4a:3e:0d:2c:11:57:39:72:53: 0d:a7:d3:3f:6c:5e:71:b9:13:a3:ad:d6:bf:70:0a: 75:9b:f4:db:d6:24:a4:bd:e1:3b:41:1d:cb:73:f0: 1d:48:02:da:a5:b8:ce:6c:6d:e8:5e:d1:99:ee:cb: de:bf:c3:48:7f:44:bf:fa:cd:ab:be:b2:f2:21:da: 25:ec:58:22:5a:c0:0e:be:e2:eb:33:29:89:0d:3d: 59:f0:a4:e9:42:18:5f:2d:12:2b:1f:1b:91:e9:d8: 76:0b:63:ea:6d:73:bc:e6:42:71:d5:62:93:f0:61: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:00:7E:4F:FA:32:55:51:61:3A:53:17:44:54:A7:E1:F3:52:ED X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b7:56:87:d2:6f:5a:a7:2f:49:ed:96:b5:90:c7:63:1e:73: 11:bf:d8:3c:65:1d:c0:ca:05:f8:26:b2:f6:53:73:6f:9b:00: 02:00:c2:a1:6d:dc:29:70:3a:fb:07:c0:5f:54:d3:ff:78:99: 47:41:86:dd:f8:10:eb:01:6a:5f:dd:88:fb:3d:0d:ad:8e:d9: 6e:03:15:90:b4:24:ef:66:90:47:42:66:d7:7d:0d:1a:6d:42: 9e:da:58:1e:07:5b:6b:18:5a:a2:a5:6b:af:c7:5d:2d:68:b7: 93:eb:1b:59:70:3a:0f:5c:32:db:52:8c:0a:87:3d:ec:94:9c: b7:1d:69:cc:24:ab:92:41:d0:56:03:d6:c3:b7:49:af:9a:e7: ea:e4:ab:48:36:6e:f3:f1:1d:7f:ec:72:48:be:4b:30:b9:74: c1:86:9b:71:96:d8:4a:69:4a:9c:f4:52:63:7a:b9:c2:07:df: eb:4e:d6:c4:ca:70:b3:66:94:ac:02:18:3c:ef:43:86:fa:e9: d1:e8:9d:f4:b1:61:5c:0b:08:74:13:c6:95:40:87:73:17:00: 5e:ad:4c:a9:ec:f4:74:2e:7c:e1:83:b4:4a:e4:9d:8f:39:c5: eb:09:5e:1c:bc:ee:31:8b:17:62:5b:f0:1b:b1:11:39:d5:ff: d2:35:bd:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYxMDEzMDIxNjUxWhcNMjYxMDIwMDIxNjUxWjAYMRYwFAYD VQQDEw02YWNkOTQ5NC00ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdOTT33hQ1G1U0S3wy7DTSXUfbw4X6g7XhgD9F1nZa9Er+rY7BOZkrxIi7SY yAuCaqWTGPAPLJLfVTaq32Oa8XV2Igv414ZnWQ7nMNCw0/x69FZkMAudnPhcj5By hzaJwDYgkTbyMnaDXWRKPejMzKF6HRXznDw+iGU8NpllsSInv0dRb9h39iF0ZX5K Pg0sEVc5clMNp9M/bF5xuROjrda/cAp1m/Tb1iSkveE7QR3Lc/AdSALapbjObG3o XtGZ7svev8NIf0S/+s2rvrLyIdol7FgiWsAOvuLrMymJDT1Z8KTpQhhfLRIrHxuR 6dh2C2PqbXO85kJx1WKT8GGTuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFApmAH5P +jJVUWE6UxdEVKfh81LtMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7dWh9JvWqcvSe2WtZDHYx5zEb/YPGUdwMoF+Cay9lNzb5sAAgDCoW3cKXA6 +wfAX1TT/3iZR0GG3fgQ6wFqX92I+z0NrY7ZbgMVkLQk72aQR0Jm130NGm1CntpY HgdbaxhaoqVrr8ddLWi3k+sbWXA6D1wy21KMCoc97JSctx1pzCSrkkHQVgPWw7dJ r5rn6uSrSDZu8/Edf+xySL5LMLl0wYabcZbYSmlKnPRSY3q5wgff607WxMpws2aU rAIYPO9Dhvrp0eid9LFhXAsIdBPGlUCHcxcAXq1Mqez0dC584YO0SuSdjznF6wle HLzuMYsXYlvwG7EROdX/0jW9PA== -----END CERTIFICATE-----Generated at Tue Oct 13 22:55:47 2026 by rpki-client