$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: 94eTeKKtqed1Z/+653KO6cYs641zGfAn5/6qbzHdP6U= Subject key identifier: E1:EF:FA:8D:EE:61:31:7C:77:71:67:85:62:0A:4B:6E:95:8F:D2:09 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0D13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0D06 Signing time: Sun 20 Sep 2026 18:20:46 +0000 Manifest this update: Sun 20 Sep 2026 18:20:45 +0000 Manifest next update: Sun 27 Sep 2026 18:20:45 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: zUA9tQUfNQaMJh1oc+1ofq4us0j/gbugdYcgIqJ/XAA=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Fc0EoN7FBo1h+1UnkvkkpWbLnVe4ZgVu2lP55njdUjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Sep 20 18:20:45 2026 GMT Not After : Sep 27 18:20:45 2026 GMT Subject: CN=6ab023fd-7c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:87:32:63:8a:84:ec:b8:53:e8:9c:92:6f: b5:5c:87:8d:40:bd:2e:a3:a3:73:61:b4:a7:51:6d: 59:44:80:46:2c:2d:ba:f7:e8:f6:4a:b3:77:9c:83: d4:01:08:10:09:c0:da:5c:7c:39:be:01:8f:d7:ab: 53:a5:eb:42:86:03:f8:6b:99:e0:e2:58:50:29:f2: 12:c6:a3:ad:7c:4a:4a:2d:68:dd:49:81:24:9d:ff: 0f:a2:43:4e:20:e8:7f:e4:7e:de:ac:12:ef:86:26: ef:ca:5c:48:72:bc:41:4f:6c:9a:68:97:9d:6a:94: a1:ef:8b:a6:21:1a:5d:51:e0:e5:5e:0b:29:0c:3c: f3:7a:2d:73:b9:55:22:80:88:2e:e0:28:0a:39:f1: 5d:0a:13:a5:f4:e4:1e:3b:11:b8:7b:98:d5:1e:1e: cb:9f:73:be:1e:6d:92:de:f1:fc:05:fc:b8:dc:37: f4:a5:13:33:28:db:7c:28:b5:42:90:1f:4a:fa:57: a5:08:13:6d:06:fb:4c:dd:14:ff:95:e0:b7:21:86: a4:bd:de:46:a1:b1:31:6d:8e:ab:72:b4:46:ed:dd: 18:46:98:4d:12:93:7a:0e:e1:f4:60:5b:97:97:9f: 22:bf:c6:7a:0e:5d:24:52:94:94:f5:04:25:b4:fb: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:FA:8D:EE:61:31:7C:77:71:67:85:62:0A:4B:6E:95:8F:D2:09 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6a:5e:81:22:64:30:8d:cc:de:47:08:ef:c1:1c:18:4f:c0: a4:ad:50:67:8c:12:7a:c6:ad:3f:14:32:f9:c8:5d:eb:7a:ff: 62:3a:5a:96:4c:1d:be:28:90:d0:a0:3c:e7:7c:9f:b6:a3:59: 36:64:bc:12:1f:25:e9:c5:19:f7:fc:00:e1:94:05:89:01:21: da:43:3d:f7:e8:59:8f:18:01:fe:64:2f:98:4a:c9:6c:d3:44: 78:9b:4e:39:67:6d:2d:93:26:85:e7:72:e9:d7:77:23:ae:6b: 27:89:d4:9c:07:c5:64:d3:34:06:1d:5d:d6:a0:35:d0:26:b4: 44:9c:60:34:91:49:1e:21:18:5e:97:b5:5f:05:ec:35:ec:e8: e4:7d:d2:64:2f:0d:eb:6d:4c:73:a8:b5:4b:5e:b4:17:ee:94: d8:70:1c:33:3a:6c:23:d1:47:8e:27:1b:a1:5b:92:f8:c3:d8: de:40:4e:cc:71:44:64:12:69:fa:4a:e5:81:d6:a6:4a:89:78: 2c:33:3b:3a:f4:00:da:55:47:05:bd:7b:09:36:1d:55:33:31: c5:90:de:33:9d:83:0c:70:03:d7:1a:00:c3:0c:ad:ab:43:5d: ec:fe:35:26:04:da:c2:d8:49:70:dc:f7:c7:1a:dd:91:f6:30: cd:40:28:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjYwOTIwMTgyMDQ1WhcNMjYwOTI3MTgyMDQ1WjAYMRYwFAYD VQQDEw02YWIwMjNmZC03YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloWHMmOKhOy4U+ickm+1XIeNQL0uo6NzYbSnUW1ZRIBGLC269+j2SrN3nIPU AQgQCcDaXHw5vgGP16tTpetChgP4a5ng4lhQKfISxqOtfEpKLWjdSYEknf8PokNO IOh/5H7erBLvhibvylxIcrxBT2yaaJedapSh74umIRpdUeDlXgspDDzzei1zuVUi gIgu4CgKOfFdChOl9OQeOxG4e5jVHh7Ln3O+Hm2S3vH8Bfy43Df0pRMzKNt8KLVC kB9K+lelCBNtBvtM3RT/leC3IYakvd5GobExbY6rcrRG7d0YRphNEpN6DuH0YFuX l58iv8Z6Dl0kUpSU9QQltPtGzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHv+o3u YTF8d3FnhWIKS26Vj9IJMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXWpegSJkMI3M3kcI78EcGE/ApK1QZ4wSesatPxQy+chd63r/YjpalkwdviiQ 0KA853yftqNZNmS8Eh8l6cUZ9/wA4ZQFiQEh2kM99+hZjxgB/mQvmErJbNNEeJtO OWdtLZMmhedy6dd3I65rJ4nUnAfFZNM0Bh1d1qA10Ca0RJxgNJFJHiEYXpe1XwXs Nezo5H3SZC8N621Mc6i1S160F+6U2HAcMzpsI9FHjicboVuS+MPY3kBOzHFEZBJp +krlgdamSol4LDM7OvQA2lVHBb17CTYdVTMxxZDeM52DDHAD1xoAwwytq0Nd7P41 JgTawthJcNz3xxrdkfYwzUAoRA== -----END CERTIFICATE-----Generated at Tue Sep 22 13:17:08 2026 by rpki-client