$ rpki-client -vvvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: KH2PpsU9av2G0OMIJQQUL8cDdm/OLlIKXYoAZShgFz8= Subject key identifier: 8D:D1:8E:FC:4B:29:ED:32:28:29:BB:57:D4:EB:D0:C7:A7:BC:DC:66 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 02D0 Signing time: Mon 21 Sep 2026 01:13:31 +0000 Manifest this update: Mon 21 Sep 2026 01:13:31 +0000 Manifest next update: Mon 28 Sep 2026 01:13:31 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: nd5cD0kYJVIkMJ9WPWuXNyAoZ7zCom1QOQI7hMZCcOs=) 2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=) 3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Sep 21 01:13:31 2026 GMT Not After : Sep 28 01:13:31 2026 GMT Subject: CN=6ab084bb-340d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:16:c9:83:26:ce:24:ad:a0:8a:41:31:28: 60:84:ca:91:fd:20:46:7f:59:21:00:c8:90:e1:75: 6d:70:33:00:31:5f:cf:ef:55:1c:c9:a5:9d:cc:19: 16:06:5e:26:a8:ac:b7:66:0d:8d:c1:bf:e4:0f:de: 8e:cd:69:a6:95:48:32:23:a2:11:af:ae:93:8d:44: cb:b4:9f:bf:99:7b:e3:27:28:d3:4c:8f:42:8a:cc: ba:f1:9d:bb:51:60:e8:a2:79:36:04:9c:8c:5f:3a: af:77:b2:fc:04:b0:9c:22:c0:82:c6:5b:15:14:84: f4:f4:6d:7d:aa:e2:68:cf:66:2d:a9:d3:5e:52:71: fd:69:d1:74:f2:8c:1e:5d:3f:91:98:6d:2e:05:ac: f9:75:8c:dc:f9:f2:fd:b2:f2:7f:aa:9c:b0:59:34: 5d:44:e5:5b:7f:ce:a9:ea:2c:af:56:af:22:d6:69: fe:01:79:66:87:86:a5:9b:05:99:9d:95:2f:93:e9: 8c:e2:27:2e:59:92:fe:3e:c6:63:1f:95:fe:7c:46: c0:b6:3f:4a:c1:30:4a:e2:06:e6:b0:a2:f0:e8:1f: 0d:4c:5a:de:4c:38:76:35:e1:e9:7d:4a:4b:5d:61: 58:1e:22:86:ce:d0:d6:0e:e2:68:f8:55:05:d4:f3: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:8E:FC:4B:29:ED:32:28:29:BB:57:D4:EB:D0:C7:A7:BC:DC:66 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c5:5b:6c:54:7c:7d:25:ba:75:25:71:a9:9c:72:00:b2:2d: 79:91:d2:c3:78:36:77:d2:7a:97:69:b7:28:38:00:5a:9d:68: aa:42:37:00:07:4b:a7:ef:82:88:14:3f:14:4c:35:02:7b:04: 34:e2:2e:ef:65:ad:0d:11:89:e2:68:21:3b:a8:97:8b:0b:5c: 10:a4:bd:d5:c9:fe:6f:56:a0:31:21:e1:58:fc:6c:4a:24:37: dc:c9:5d:fc:1e:02:78:9b:9a:80:30:2b:a5:81:f8:58:ac:42: 6f:d1:4f:eb:66:fd:eb:ef:89:d8:62:c7:ac:d2:d1:bd:9d:4b: a4:d4:62:3e:f7:2f:97:23:92:2c:ab:10:a9:c0:97:ec:b1:4d: c8:1b:14:90:31:e1:fc:c1:be:3e:74:53:98:85:96:57:21:e0: 69:a7:95:55:59:b1:81:99:7e:92:5b:ac:50:ad:05:c3:f7:f4: 7a:53:e9:1f:ff:d7:d7:5e:88:48:67:ba:9a:c0:c2:98:2d:34: 7f:7e:ec:37:18:9b:bf:76:f9:9b:03:2a:fd:17:c9:c3:23:9a: b9:1b:32:c9:dd:22:03:0e:3a:61:f3:b5:b8:6f:68:75:a2:24: 26:2a:ab:5e:5c:ca:d5:69:4b:07:82:26:e5:3f:1d:d2:8d:5a: 84:60:64:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjYwOTIxMDExMzMxWhcNMjYwOTI4MDExMzMxWjAYMRYwFAYD VQQDEw02YWIwODRiYi0zNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjB8WyYMmziStoIpBMShghMqR/SBGf1khAMiQ4XVtcDMAMV/P71UcyaWdzBkW Bl4mqKy3Zg2Nwb/kD96OzWmmlUgyI6IRr66TjUTLtJ+/mXvjJyjTTI9Cisy68Z27 UWDoonk2BJyMXzqvd7L8BLCcIsCCxlsVFIT09G19quJoz2YtqdNeUnH9adF08owe XT+RmG0uBaz5dYzc+fL9svJ/qpywWTRdROVbf86p6iyvVq8i1mn+AXlmh4almwWZ nZUvk+mM4icuWZL+PsZjH5X+fEbAtj9KwTBK4gbmsKLw6B8NTFreTDh2NeHpfUpL XWFYHiKGztDWDuJo+FUF1POPcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3RjvxL Ke0yKCm7V9Tr0MenvNxmMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiMVbbFR8fSW6dSVxqZxyALIteZHSw3g2d9J6l2m3KDgAWp1oqkI3AAdLp++C iBQ/FEw1AnsENOIu72WtDRGJ4mghO6iXiwtcEKS91cn+b1agMSHhWPxsSiQ33Mld /B4CeJuagDArpYH4WKxCb9FP62b96++J2GLHrNLRvZ1LpNRiPvcvlyOSLKsQqcCX 7LFNyBsUkDHh/MG+PnRTmIWWVyHgaaeVVVmxgZl+klusUK0Fw/f0elPpH//X116I SGe6msDCmC00f37sNxibv3b5mwMq/RfJwyOauRsyyd0iAw46YfO1uG9odaIkJiqr XlzK1WlLB4Im5T8d0o1ahGBkng== -----END CERTIFICATE-----Generated at Tue Sep 22 13:09:55 2026 by rpki-client