$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: wt3n8H2KWLWxas4b8fe6h9GtnNkoFSVDYyUN1jT7aMg= Subject key identifier: 49:16:4A:A8:35:BD:1C:F4:13:68:07:A2:F6:E0:0D:45:D6:0E:98:A2 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 08DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0889 Signing time: Fri 04 Sep 2026 20:58:37 +0000 Manifest this update: Fri 04 Sep 2026 20:58:37 +0000 Manifest next update: Fri 11 Sep 2026 20:58:37 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: 8MDOhmDRk+DjR6BdXAiQPgbiGUktFOymEGyRodzQcYM=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=) 3: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=) 4: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=) 5: 3DB1BB00867211F1A49B353F5EA30FBC.roa (hash: ciyJTYbsJu4EqjJPQTwPgA9seL8CchhfPXFNoQk7kF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Sep 4 20:58:37 2026 GMT Not After : Sep 11 20:58:37 2026 GMT Subject: CN=6a9b30fd-a9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:cd:ae:ee:ae:be:39:58:9b:42:ca:8e:f7: cc:11:cd:69:6d:64:11:8a:00:9d:40:03:2b:fa:ef: 48:0c:70:49:bf:bd:84:33:02:f8:b8:3f:80:41:62: 30:23:d2:6a:35:c9:be:42:56:0f:23:ba:8e:ca:ff: 9f:7f:fc:6e:bc:39:25:0b:f0:ca:01:96:74:b8:5c: 20:c1:39:c4:e2:12:fd:62:c1:ef:c2:7c:93:a7:e3: 14:20:27:31:85:c1:3d:f6:2c:3d:53:4d:8c:54:a9: 8c:15:4b:5d:02:5f:99:25:b3:e1:d1:43:31:a6:10: 6e:72:28:ff:94:df:ca:6b:47:61:39:1d:ab:d5:74: cd:7e:65:0a:82:82:bb:38:c6:e1:56:d4:a8:40:3b: 44:51:ec:e5:a7:b8:84:b4:ea:0e:22:a5:e5:e2:1a: be:28:1a:9f:36:b1:93:9a:8c:2d:2b:90:25:08:da: 6c:e4:1e:e1:c4:d7:36:26:5d:17:f0:48:10:4f:de: a4:e9:be:e1:13:e9:e4:2d:94:0e:8f:b0:cb:d2:fc: 85:ee:95:e2:40:cd:fa:8d:64:c5:16:ee:55:e5:43: ed:64:ce:67:97:54:20:1a:1f:21:c7:82:8f:58:b5: cd:66:89:ee:c2:8c:68:4c:09:cc:9f:0a:e6:9b:07: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:16:4A:A8:35:BD:1C:F4:13:68:07:A2:F6:E0:0D:45:D6:0E:98:A2 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:63:fe:1a:1e:9c:fa:6e:b4:09:5c:fe:db:85:f7:5b:4a:08: 97:4e:cb:05:c8:ee:25:2e:0f:26:dd:ca:a2:bc:0a:a6:99:62: e3:57:10:b9:77:bb:be:c2:09:ef:03:4d:cc:7f:e6:3c:83:5e: 0e:ee:c4:31:38:98:6f:7c:52:64:59:21:e3:ce:f2:56:88:5b: 3a:a3:a6:3e:14:30:6a:a8:b3:cb:b6:47:9e:1b:9b:1f:c4:64: e8:7b:d0:fa:09:4b:d6:04:37:9a:55:8a:b9:27:06:46:ec:10: aa:50:8c:1f:71:4e:57:47:15:80:e9:18:0f:88:d9:4a:95:86: 77:87:5b:08:e8:91:74:02:ee:17:0b:4a:99:e4:b3:83:57:c1: a2:71:2b:79:19:00:a5:af:1a:9f:31:4f:a1:9b:be:ed:6e:49: a5:1c:07:4c:c3:bb:27:f5:8f:c9:32:bb:f3:ee:27:d0:14:62: 38:55:53:32:a8:a3:7b:f0:b8:a2:55:4f:07:59:7e:d8:44:4c: df:63:c4:fa:58:d8:09:bd:92:5a:c6:79:16:c3:99:e7:b8:f1: e5:9c:59:8a:48:ca:66:58:d4:c8:a8:6c:bb:96:9d:26:28:22: b5:4d:7b:e6:f5:74:a2:ac:1f:e8:f2:10:72:66:74:f8:1e:5a: 3c:1f:2c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwOTA0MjA1ODM3WhcNMjYwOTExMjA1ODM3WjAYMRYwFAYD VQQDEw02YTliMzBmZC1hOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bPNru6uvjlYm0LKjvfMEc1pbWQRigCdQAMr+u9IDHBJv72EMwL4uD+AQWIw I9JqNcm+QlYPI7qOyv+ff/xuvDklC/DKAZZ0uFwgwTnE4hL9YsHvwnyTp+MUICcx hcE99iw9U02MVKmMFUtdAl+ZJbPh0UMxphBucij/lN/Ka0dhOR2r1XTNfmUKgoK7 OMbhVtSoQDtEUezlp7iEtOoOIqXl4hq+KBqfNrGTmowtK5AlCNps5B7hxNc2Jl0X 8EgQT96k6b7hE+nkLZQOj7DL0vyF7pXiQM36jWTFFu5V5UPtZM5nl1QgGh8hx4KP WLXNZonuwoxoTAnMnwrmmwcTmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkWSqg1 vRz0E2gHovbgDUXWDpiiMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2P+Gh6c+m60CVz+24X3W0oIl07LBcjuJS4PJt3KorwKppli41cQuXe7vsIJ 7wNNzH/mPINeDu7EMTiYb3xSZFkh487yVohbOqOmPhQwaqizy7ZHnhubH8Rk6HvQ +glL1gQ3mlWKuScGRuwQqlCMH3FOV0cVgOkYD4jZSpWGd4dbCOiRdALuFwtKmeSz g1fBonEreRkApa8anzFPoZu+7W5JpRwHTMO7J/WPyTK78+4n0BRiOFVTMqije/C4 olVPB1l+2ERM32PE+ljYCb2SWsZ5FsOZ57jx5ZxZikjKZljUyKhsu5adJigitU17 5vV0oqwf6PIQcmZ0+B5aPB8sIg== -----END CERTIFICATE-----Generated at Sat Sep 5 03:15:06 2026 by rpki-client