$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json) Hash identifier: gIaP6l5X/1NxNCqPYZwSzXGkxRjxXVtPlW7ncvcTqW0= Subject key identifier: 1B:21:EA:06:59:3E:5E:7B:EE:6A:A8:47:51:EC:6D:0F:55:7E:CA:86 Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft Manifest number: 01D5 Signing time: Sun 25 Oct 2026 04:04:17 +0000 Manifest this update: Sun 25 Oct 2026 04:04:17 +0000 Manifest next update: Sun 01 Nov 2026 04:04:17 +0000 Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: 9ekFQv+S+CZSaaH+8VcFfROzCo24Jzbp6taLC4I7lJA=) 2: 150427207ADC11F19849D5B474A30FBC.roa (hash: LPSfyrjFtmZd5dQ1E/AZ0uGCOSVP/h9k3xx6rrDu3bk=) 3: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: 80SnbVxPivXWHEwHHqV8hYnrOqhwI1EXSpGak/LvQw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D Validity Not Before: Oct 25 04:04:17 2026 GMT Not After : Nov 1 04:04:17 2026 GMT Subject: CN=6add7fc1-1405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:ee:23:73:f4:8e:f3:ee:17:81:f2:97:1d: 0e:43:40:b5:d7:91:c3:f5:55:0d:55:21:b0:de:b1: eb:24:07:5e:a8:8c:d1:82:ba:e9:1c:07:d4:dd:a8: 68:fa:71:e0:e0:87:5f:29:1f:a3:ca:e6:a8:9e:f5: 93:6b:95:7e:8a:d3:7d:40:98:cb:74:73:9f:18:62: bb:11:0d:f6:04:7c:91:71:89:ba:3a:b7:f3:c0:dc: 39:be:17:0d:a2:15:4e:ab:ac:ff:eb:d5:5c:f3:93: 39:e9:16:e2:0f:af:3d:cc:36:8f:9b:93:e8:c4:42: 27:25:6b:36:15:5e:5e:09:44:6d:bc:d9:ba:e8:82: e6:1a:8b:6c:f4:7e:33:5c:41:df:45:17:a4:e7:29: a9:45:0a:1e:3c:6f:ce:ac:84:50:10:7d:f6:f2:1f: c6:13:c6:0f:59:bb:65:84:89:be:95:1a:61:76:a0: f0:e0:a3:b2:6d:68:24:77:40:78:5e:d6:82:8a:e4: d7:9e:3d:5a:7a:9f:26:35:4e:1c:89:68:f4:69:89: 13:1b:8e:d2:9b:4c:f7:04:89:f4:7e:2b:6c:13:6b: 00:34:2a:05:b0:b7:dd:14:ea:f6:13:dd:16:93:3a: 33:c5:a4:d6:a7:f2:4f:49:93:ba:70:fd:0a:91:54: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:21:EA:06:59:3E:5E:7B:EE:6A:A8:47:51:EC:6D:0F:55:7E:CA:86 X509v3 Authority Key Identifier: keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1e:e8:76:58:26:ba:b7:5a:92:82:88:c9:0a:2f:41:7b:dc: 74:4a:fc:9b:b7:5a:9f:17:e3:23:ee:38:65:7e:24:4e:08:bf: 81:2a:97:c7:3f:a4:24:32:6a:7a:6f:c8:f2:1b:bb:e0:7b:3b: bb:92:50:f9:03:c2:01:e7:20:9b:42:c0:8f:bd:ec:67:69:df: b6:d2:5c:1d:00:ca:ea:1f:3c:1e:92:5b:07:28:45:af:11:2c: 72:b9:12:61:36:e2:17:71:9c:0c:12:ea:82:1d:85:30:2e:2e: 79:1a:5d:e4:2b:03:28:24:38:81:41:a7:e7:a6:15:27:52:d0: 9a:f0:5b:46:17:e7:64:ab:86:2f:7c:53:22:2f:14:68:5d:59: d2:52:8f:cf:09:0a:a4:84:85:3f:0e:ae:a8:c1:ac:c2:1d:47: 8d:bc:5d:9e:6d:42:88:0b:76:80:3f:5c:74:79:a0:72:83:fe: a3:34:9f:6f:3a:36:95:73:cc:a1:d9:bb:10:24:5d:c2:ed:74: d3:06:65:d8:db:40:09:45:c7:37:b8:1f:7d:ec:69:20:33:eb: 7f:98:9e:62:fc:f2:02:39:11:fd:d6:3b:23:1d:03:99:ed:14: f7:56:0f:06:01:20:79:2e:88:d3:ec:27:82:f3:c7:63:32:47: 0c:e7:61:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5QjgxMTAvBgNVBAUTKDU2NzgyNjE2Mjc1NEI0NjBDQjU4NjZEQUMzMTQ4ODBD NzAzNTQ2MUQwHhcNMjYxMDI1MDQwNDE3WhcNMjYxMTAxMDQwNDE3WjAYMRYwFAYD VQQDEw02YWRkN2ZjMS0xNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sbuI3P0jvPuF4Hylx0OQ0C115HD9VUNVSGw3rHrJAdeqIzRgrrpHAfU3aho +nHg4IdfKR+jyuaonvWTa5V+itN9QJjLdHOfGGK7EQ32BHyRcYm6OrfzwNw5vhcN ohVOq6z/69Vc85M56RbiD689zDaPm5PoxEInJWs2FV5eCURtvNm66ILmGots9H4z XEHfRRek5ympRQoePG/OrIRQEH328h/GE8YPWbtlhIm+lRphdqDw4KOybWgkd0B4 XtaCiuTXnj1aep8mNU4ciWj0aYkTG47Sm0z3BIn0fitsE2sANCoFsLfdFOr2E90W kzozxaTWp/JPSZO6cP0KkVRdyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsh6gZZ Pl577mqoR1HsbQ9VfsqGMB8GA1UdIwQYMBaAFFZ4JhYnVLRgy1hm2sMUiAxwNUYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlCOC9DOEIxRDQ0RTA3 QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRHRExXR2Jhd3hTSURIQTFS aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuZ21GaWRVdEdETFdHYmF3eFNJREhBMVJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlCOC9DOEIxRDQ0RTA3QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRH RExXR2Jhd3hTSURIQTFSaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnR7odlgmurdakoKIyQovQXvcdEr8m7danxfjI+44ZX4kTgi/gSqXxz+kJDJq em/I8hu74Hs7u5JQ+QPCAecgm0LAj73sZ2nfttJcHQDK6h88HpJbByhFrxEscrkS YTbiF3GcDBLqgh2FMC4ueRpd5CsDKCQ4gUGn56YVJ1LQmvBbRhfnZKuGL3xTIi8U aF1Z0lKPzwkKpISFPw6uqMGswh1Hjbxdnm1CiAt2gD9cdHmgcoP+ozSfbzo2lXPM odm7ECRdwu100wZl2NtACUXHN7gffexpIDPrf5ieYvzyAjkR/dY7Ix0Dme0U91YP BgEgeS6I0+wngvPHYzJHDOdhew== -----END CERTIFICATE-----Generated at Mon Oct 26 20:59:51 2026 by rpki-client