$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: dFJI/fSWt7KHMPwEKAehoHKBK7oSMaECMr4P+1vJNWQ= Subject key identifier: 5F:EF:D5:F1:E0:36:E4:A5:E3:A9:37:C6:40:17:25:6D:CD:49:50:DA Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0857 Signing time: Sun 31 May 2026 21:49:20 +0000 Manifest this update: Sun 31 May 2026 21:49:20 +0000 Manifest next update: Sun 07 Jun 2026 21:49:20 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: R5GWDhpOy1NyD4a2BHz8odyIQF+CGPyxIazqZVR0kBU=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 21:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: May 31 21:49:20 2026 GMT Not After : Jun 7 21:49:20 2026 GMT Subject: CN=6a1cace0-0efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:9d:df:c8:b3:01:ea:a7:ac:12:a5:d1:94: a1:25:2a:33:c9:00:ad:03:b1:ae:f4:66:63:7d:23: b3:53:7c:9a:22:f1:cf:5d:9a:8e:c4:6a:2a:47:cb: 52:b8:31:b7:7b:84:80:db:01:e4:42:9d:9d:78:81: a5:eb:41:7c:bc:8e:7f:ba:39:23:b4:8d:ff:20:f3: bc:02:7a:6c:98:ef:60:36:f4:c8:20:29:1a:31:5a: 25:e3:a4:5f:24:c2:2c:33:8f:61:2b:9b:5f:30:e8: 54:37:a9:d4:17:c8:4e:8f:ca:2e:af:06:5a:3a:2b: 0d:6b:e1:5c:a3:ab:76:74:c2:d6:92:55:9c:9c:46: a7:e9:51:0d:dd:07:d0:0a:6d:d5:39:3c:72:56:e4: 8b:24:82:1e:ef:9b:08:4b:9a:7b:fa:f6:f7:89:ac: c1:41:70:f8:c7:b7:ad:4f:df:33:fd:92:1e:7e:80: 42:a9:74:34:8b:0c:45:74:4f:86:30:89:6c:5a:e8: c3:f1:2e:2d:a7:88:b7:18:25:32:5f:24:51:b8:ab: a0:ef:6f:cc:c6:1e:24:02:d2:ba:fd:fe:c0:47:0a: 2d:0f:63:9f:86:c1:e5:ba:10:e2:50:5a:5f:2f:6f: 2c:a8:5e:69:1c:46:b0:3d:59:8e:aa:87:10:7e:52: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EF:D5:F1:E0:36:E4:A5:E3:A9:37:C6:40:17:25:6D:CD:49:50:DA X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:04:6c:03:2a:1e:e7:11:42:67:4e:fc:e7:e1:5f:7d:81:91: d8:07:fd:08:09:ae:af:72:63:b7:b1:72:7a:2e:96:3e:23:e6: 44:0c:2b:c7:30:2f:b5:85:96:a3:4c:b8:fa:d1:dc:05:13:4c: 1c:29:64:0d:24:40:d1:0b:bf:56:42:d5:76:b1:ed:4e:3b:7e: 18:fd:35:84:9f:50:b4:91:8a:86:5e:36:55:04:46:71:f3:40: a1:de:28:8e:0f:0f:b2:4e:33:b4:af:fe:34:84:2e:93:31:c4: 17:62:21:f7:70:41:35:23:3b:2a:d3:7b:c3:97:36:2a:0a:fe: 4f:d5:2e:7c:11:c7:bf:7c:42:3b:40:89:e1:36:c4:2d:e8:43: 73:17:4e:b5:99:62:91:f9:ca:47:ef:a4:8a:f2:6e:b2:a5:8b: e9:b5:6f:71:52:02:ea:e2:1e:2a:9d:a2:da:b8:f8:9d:89:d1: 57:e6:83:1e:28:25:9a:f0:27:8e:5a:14:2f:12:c2:b3:95:b1: 98:76:9b:f0:7d:3a:78:00:50:3e:ea:33:be:5b:e1:0b:f4:b6: 2d:70:0d:ca:dc:6a:c8:c6:1a:65:7d:19:b9:69:f1:ee:07:de: 16:f8:0c:6e:29:7f:8c:ae:a5:45:77:b6:5b:46:80:70:b8:6f: b9:35:1c:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwNTMxMjE0OTIwWhcNMjYwNjA3MjE0OTIwWjAYMRYwFAYD VQQDEw02YTFjYWNlMC0wZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcWd38izAeqnrBKl0ZShJSozyQCtA7Gu9GZjfSOzU3yaIvHPXZqOxGoqR8tS uDG3e4SA2wHkQp2deIGl60F8vI5/ujkjtI3/IPO8AnpsmO9gNvTIICkaMVol46Rf JMIsM49hK5tfMOhUN6nUF8hOj8ourwZaOisNa+Fco6t2dMLWklWcnEan6VEN3QfQ Cm3VOTxyVuSLJIIe75sIS5p7+vb3iazBQXD4x7etT98z/ZIefoBCqXQ0iwxFdE+G MIlsWujD8S4tp4i3GCUyXyRRuKug72/Mxh4kAtK6/f7ARwotD2OfhsHluhDiUFpf L28sqF5pHEawPVmOqocQflKsSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/v1fHg NuSl46k3xkAXJW3NSVDaMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWARsAyoe5xFCZ0785+FffYGR2Af9CAmur3Jjt7Fyei6WPiPmRAwrxzAvtYWW o0y4+tHcBRNMHClkDSRA0Qu/VkLVdrHtTjt+GP01hJ9QtJGKhl42VQRGcfNAod4o jg8Psk4ztK/+NIQukzHEF2Ih93BBNSM7KtN7w5c2Kgr+T9UufBHHv3xCO0CJ4TbE LehDcxdOtZlikfnKR++kivJusqWL6bVvcVIC6uIeKp2i2rj4nYnRV+aDHiglmvAn jloULxLCs5WxmHab8H06eABQPuozvlvhC/S2LXANytxqyMYaZX0ZuWnx7gfeFvgM bil/jK6lRXe2W0aAcLhvuTUc/Q== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:45 2026 by rpki-client