$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: 5Rz4wx4qx21zHNUwjiwCNn0t0R5vN8mrsJ5g4Oo8H6k= Subject key identifier: CA:6D:AB:D4:7A:91:8A:13:07:C4:85:87:2C:15:A5:1C:72:0B:84:53 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 086E Signing time: Thu 16 Jul 2026 21:32:28 +0000 Manifest this update: Thu 16 Jul 2026 21:32:27 +0000 Manifest next update: Thu 23 Jul 2026 21:32:27 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: xMRp1h2IPD0H4IXdpm2f9xEPYLSFSlGEbeDwo5AeC00=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=) 3: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=) 4: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 21:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Jul 16 21:32:27 2026 GMT Not After : Jul 23 21:32:27 2026 GMT Subject: CN=6a594deb-4378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:99:94:bc:46:44:ec:71:28:6c:73:72:eb: d6:9c:af:26:2e:0c:76:44:b8:fe:21:d8:b2:5f:6e: 3b:de:f7:55:22:30:8d:cb:dc:61:0b:84:73:4b:27: d7:e1:c1:3d:18:1e:4b:49:7e:bc:d3:a8:26:c1:4d: bc:84:26:82:4c:76:e4:76:ff:76:7f:d9:65:b9:b9: 11:f7:69:62:86:97:18:21:54:d7:67:3e:4d:c8:8d: 21:bd:7e:a3:9c:5f:a1:d3:3b:51:f0:91:7a:d4:0f: 3c:bb:14:be:a9:b8:04:86:61:71:90:62:1c:53:9c: 35:6b:04:bf:b0:b3:2d:19:48:77:a5:35:7e:07:4b: 3d:58:e1:03:e5:da:76:7c:9f:8f:1f:0f:90:d3:19: 43:f7:45:e7:a1:4b:21:48:13:59:e7:27:e9:97:7f: a7:8f:9a:74:68:bd:e9:6c:c1:3d:b0:d4:7e:15:d3: 12:26:aa:5c:7f:78:67:3a:9f:a8:db:fe:4f:53:73: f1:a8:8d:ef:a0:45:88:4a:8a:a7:b2:79:21:f3:fd: 67:0b:97:56:7d:86:3f:68:d3:72:c5:14:69:bf:73: 0e:b5:61:f1:4e:48:2e:c4:c6:a7:ba:64:45:93:51: a7:43:00:85:44:28:6b:25:40:e3:8a:2a:28:c2:e7: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:AB:D4:7A:91:8A:13:07:C4:85:87:2C:15:A5:1C:72:0B:84:53 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:94:5e:aa:6b:87:96:b2:04:7e:41:f6:76:3b:da:1b:40:70: 34:f0:8d:a4:ed:a8:79:eb:2c:77:69:fd:76:5b:f5:98:ad:79: 9f:4c:7e:55:d3:d5:09:85:07:d4:12:dc:38:fa:3d:ed:ed:ea: 60:17:09:71:14:62:04:59:97:0f:d4:8b:1c:47:f9:01:a6:e1: db:cf:f1:52:d3:2d:c6:87:29:04:c3:19:18:1a:16:2e:b7:d7: 0f:de:0e:d9:b1:67:05:c4:8d:3c:e5:a3:d5:ab:da:d6:6e:e0: 0c:1f:d4:6c:e2:a8:6a:c7:25:6c:1e:67:02:1e:22:80:aa:27: 89:46:0f:e9:f5:69:09:d6:bd:61:09:f3:7d:99:c3:e7:07:92: 36:28:32:83:bd:44:f6:5e:b3:c0:00:23:70:ff:c6:a1:c3:43: 7d:48:03:8a:23:c9:4d:9a:e8:30:8e:5f:ee:4f:74:6e:1d:4f: 51:52:b3:bd:43:e5:64:3a:65:75:17:de:f6:19:96:83:4c:a3: 1e:34:66:3c:3a:c1:e4:19:c5:88:96:8d:0c:ac:90:4a:b3:79: 8a:cb:0e:63:1a:09:e0:85:f8:e3:4d:4c:8f:e9:44:e4:d4:56: 73:ce:30:68:68:73:87:b6:12:91:ab:42:18:79:c1:4b:ad:51: 57:87:4c:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwNzE2MjEzMjI3WhcNMjYwNzIzMjEzMjI3WjAYMRYwFAYD VQQDEw02YTU5NGRlYi00Mzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8qZlLxGROxxKGxzcuvWnK8mLgx2RLj+IdiyX2473vdVIjCNy9xhC4RzSyfX 4cE9GB5LSX6806gmwU28hCaCTHbkdv92f9llubkR92lihpcYIVTXZz5NyI0hvX6j nF+h0ztR8JF61A88uxS+qbgEhmFxkGIcU5w1awS/sLMtGUh3pTV+B0s9WOED5dp2 fJ+PHw+Q0xlD90XnoUshSBNZ5yfpl3+nj5p0aL3pbME9sNR+FdMSJqpcf3hnOp+o 2/5PU3PxqI3voEWISoqnsnkh8/1nC5dWfYY/aNNyxRRpv3MOtWHxTkguxManumRF k1GnQwCFRChrJUDjiioowuc+TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMptq9R6 kYoTB8SFhywVpRxyC4RTMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbZReqmuHlrIEfkH2djvaG0BwNPCNpO2oeessd2n9dlv1mK15n0x+VdPVCYUH 1BLcOPo97e3qYBcJcRRiBFmXD9SLHEf5Aabh28/xUtMtxocpBMMZGBoWLrfXD94O 2bFnBcSNPOWj1ava1m7gDB/UbOKoasclbB5nAh4igKoniUYP6fVpCda9YQnzfZnD 5weSNigyg71E9l6zwAAjcP/GocNDfUgDiiPJTZroMI5f7k90bh1PUVKzvUPlZDpl dRfe9hmWg0yjHjRmPDrB5BnFiJaNDKyQSrN5issOYxoJ4IX4401Mj+lE5NRWc84w aGhzh7YSkatCGHnBS61RV4dMRg== -----END CERTIFICATE-----Generated at Sat Jul 18 03:29:14 2026 by rpki-client