$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft File: VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json) Hash identifier: v+FvH4h3AQVWqi1HaWet3zrByyZH79eXlf5/7Zr0Kac= Subject key identifier: 31:0E:49:E4:56:FB:B1:01:C0:F0:43:17:DA:EA:25:59:C2:BC:66:B0 Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft Manifest number: 070E Signing time: Tue 22 Sep 2026 21:52:37 +0000 Manifest this update: Tue 22 Sep 2026 21:52:37 +0000 Manifest next update: Tue 29 Sep 2026 21:52:37 +0000 Files and hashes: 1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: udPr9Iypo2TIyTZjxr8/PuaXzQThN1ql0q4SnH61nk0=) 2: E3DABCD6688911F1A3B02B4A6E47A888.roa (hash: S5E+n6kB32srflXYx0wq3g2lJzXHf4UJDuTgEav9epQ=) 3: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: rKsX6OkVUam3F97sdJG9wWqd7tiKNAX7p6e7cKD03FU=) 4: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: S3V9nTmHpTk0R0/Tb93/TR2ixFVYiRqvkvzY7lnngOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Validity Not Before: Sep 22 21:52:37 2026 GMT Not After : Sep 29 21:52:37 2026 GMT Subject: CN=6ab2f8a5-ab31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:db:2c:65:c0:6e:ae:32:e7:e8:a3:48:bc: b3:5e:da:63:a9:a7:a9:91:42:a4:32:c4:e3:d9:0b: c2:18:2d:bd:48:be:2f:b7:51:13:0d:9a:cf:71:d1: 9c:05:cf:70:24:a3:de:5a:b6:60:6d:66:75:3a:1c: c3:de:ee:6c:74:64:d6:22:16:24:1f:d2:e3:33:d4: 15:31:05:a4:08:c1:bc:f4:10:d5:3e:17:67:3d:ff: 3a:29:f6:4b:b5:f3:8d:77:e1:53:8f:82:18:82:5a: e0:3e:9d:bb:85:44:a8:f5:30:7d:d9:fd:ac:14:a7: 5c:c7:de:f8:d4:c3:74:74:1d:c8:e5:dd:c7:90:88: 06:d9:26:02:07:25:c1:50:9f:80:49:1d:b7:91:33: 3f:1f:08:a9:02:ff:af:78:eb:13:02:82:84:f0:36: 3b:a5:11:61:bf:8d:ea:dc:d3:0b:ae:56:83:a6:e3: 85:63:d1:58:c2:92:1e:92:14:85:be:d1:e2:c4:7c: de:5e:f3:29:ac:85:63:4b:0e:6e:04:4b:54:b6:50: d2:37:ba:10:05:ee:72:f6:ba:30:a5:96:40:ee:04: 81:34:eb:cf:f2:fa:f0:a5:48:95:4e:9c:28:65:7e: e3:c0:a5:a4:c1:8d:b9:54:b1:6a:20:88:28:da:2b: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0E:49:E4:56:FB:B1:01:C0:F0:43:17:DA:EA:25:59:C2:BC:66:B0 X509v3 Authority Key Identifier: keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:90:8e:79:ec:19:35:d0:ac:81:71:e0:95:a7:e5:95:03: 2c:18:52:83:40:79:4f:6b:86:08:76:51:cc:c7:9a:49:40:20: 35:7b:36:30:8b:6b:d8:c0:81:37:ab:14:d7:06:f7:27:d0:ce: 56:ab:5f:75:ae:d6:61:d2:0d:74:6f:8b:36:f0:05:51:9f:51: a2:df:bc:3a:b4:65:37:ff:37:a1:dd:5a:9c:d9:2e:b9:1b:ed: 06:49:50:df:75:d2:d4:64:92:6b:9f:9a:f0:a2:c5:93:fc:45: b0:c1:4e:ed:43:15:7c:a7:dd:8a:86:4a:b2:c1:25:c5:d4:76: 19:76:51:48:55:e2:da:4f:4a:47:a5:59:82:4f:38:8b:7b:43: d6:d1:4a:cf:80:b4:02:f2:d9:d4:ca:b0:ae:4a:ac:d2:d8:15: 1c:35:76:d4:9c:c2:c8:16:c5:98:cb:8e:f4:13:d7:18:cd:08: 52:48:28:2d:6b:3f:a7:a8:55:f4:be:67:fa:99:54:b2:f8:fd: c6:5b:34:93:c4:57:ad:ef:49:b6:f1:3b:1c:b4:79:55:67:66: be:6e:5e:20:a9:d2:96:74:55:c7:de:b9:87:3c:d2:8d:b1:9f: 76:33:43:88:97:eb:14:a6:03:c6:16:19:b9:ff:8b:88:65:9c: d0:e2:96:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5 OTRCRDE0OTUwHhcNMjYwOTIyMjE1MjM3WhcNMjYwOTI5MjE1MjM3WjAYMRYwFAYD VQQDEw02YWIyZjhhNS1hYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZbbLGXAbq4y5+ijSLyzXtpjqaepkUKkMsTj2QvCGC29SL4vt1ETDZrPcdGc Bc9wJKPeWrZgbWZ1OhzD3u5sdGTWIhYkH9LjM9QVMQWkCMG89BDVPhdnPf86KfZL tfONd+FTj4IYglrgPp27hUSo9TB92f2sFKdcx9741MN0dB3I5d3HkIgG2SYCByXB UJ+ASR23kTM/HwipAv+veOsTAoKE8DY7pRFhv43q3NMLrlaDpuOFY9FYwpIekhSF vtHixHzeXvMprIVjSw5uBEtUtlDSN7oQBe5y9rowpZZA7gSBNOvP8vrwpUiVTpwo ZX7jwKWkwY25VLFqIIgo2itvKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEOSeRW +7EBwPBDF9rqJVnCvGawMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3 RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNS83MkZCQUQ4OEE3RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6 TWZwMlRibmtIMTZaUzlGSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMtqQjnnsGTXQrIFx4JWn5ZUDLBhSg0B5T2uGCHZRzMeaSUAgNXs2MItr2MCB N6sU1wb3J9DOVqtfda7WYdINdG+LNvAFUZ9Rot+8OrRlN/83od1anNkuuRvtBklQ 33XS1GSSa5+a8KLFk/xFsMFO7UMVfKfdioZKssElxdR2GXZRSFXi2k9KR6VZgk84 i3tD1tFKz4C0AvLZ1Mqwrkqs0tgVHDV21JzCyBbFmMuO9BPXGM0IUkgoLWs/p6hV 9L5n+plUsvj9xls0k8RXre9JtvE7HLR5VWdmvm5eIKnSlnRVx965hzzSjbGfdjND iJfrFKYDxhYZuf+LiGWc0OKWJA== -----END CERTIFICATE-----Generated at Thu Sep 24 21:52:31 2026 by rpki-client