$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json) Hash identifier: znV8SXeQYUd5FdPYMJD7OgrHZ6j//3VBr11tQVlXvRE= Subject key identifier: 24:D7:EC:12:05:EB:62:66:0B:CB:90:7C:DE:2A:20:21:A1:A5:B8:C7 Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft Manifest number: 06F5 Signing time: Wed 04 Nov 2026 22:31:12 +0000 Manifest this update: Wed 04 Nov 2026 22:31:11 +0000 Manifest next update: Wed 11 Nov 2026 22:31:11 +0000 Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: r9hv3Ru4j3dX2AYL+bqFNH0T6Hk3QBPm8IttW9KUR0U=) 2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: 9SWvU83uta5yQV6kASYfDhqApkdxCt/37HDqSjzPVj8=) 3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: FsIfjE1hCId4WZSmCGZi8B4pcoqpgzCAhgnEUj6OePM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 22:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Validity Not Before: Nov 4 22:31:11 2026 GMT Not After : Nov 11 22:31:11 2026 GMT Subject: CN=6aebb230-1d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:9f:a4:16:f7:fa:16:df:be:31:16:e3:df: 8f:6c:fa:23:26:2c:b3:32:0c:0e:6d:68:10:f0:31: a0:72:a5:1f:b5:a8:2d:1b:af:c9:44:a6:0c:2b:a7: f6:06:3b:d7:97:93:ef:d6:2c:89:34:46:87:80:19: 0d:67:5e:f8:92:a7:d6:b7:ca:94:e2:5b:ec:f1:16: 1b:5e:8f:9b:74:20:b6:ad:65:34:4c:e1:89:b8:4b: 5c:0c:d0:ea:c1:22:54:11:12:4c:4a:8d:01:ca:23: 01:84:bb:14:5a:02:1d:07:86:e8:43:18:1f:c4:38: f1:ff:3d:e5:fb:f5:58:ca:cf:11:ca:fb:9d:4e:45: f5:98:78:f6:0c:6a:36:60:fd:fc:b2:76:9a:f7:1c: 4d:94:6c:71:72:2d:be:a0:73:1c:88:87:d7:5e:2e: e2:0e:aa:bd:69:f5:78:49:4f:48:52:54:c5:60:2b: 37:92:02:17:82:20:cb:7e:ec:2a:3a:68:03:c9:3b: 25:33:c7:52:e7:75:36:d8:b0:a5:18:0e:c2:3c:79: 24:85:5f:81:23:00:18:b4:14:e6:9b:81:68:2f:b9: 48:89:29:41:fa:ba:c4:b3:21:09:be:44:8c:81:0e: b3:cf:cb:71:66:80:02:ca:90:22:d6:6a:67:95:ef: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:EC:12:05:EB:62:66:0B:CB:90:7C:DE:2A:20:21:A1:A5:B8:C7 X509v3 Authority Key Identifier: keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:e7:cc:08:42:78:c3:fa:5f:0c:00:e4:90:f7:32:c2:92:2a: e3:83:ad:e0:77:7d:91:51:2b:2c:1e:29:cf:fd:a0:f8:a9:12: f3:86:94:fc:3d:93:fa:9d:10:b6:86:af:d8:7b:64:81:94:e3: fd:77:53:67:31:85:e9:18:97:e0:42:ac:6b:62:31:f1:92:cb: e2:f2:e0:24:d6:51:96:d4:ad:0f:b1:8b:83:fb:bb:7f:6d:fc: dc:f6:71:54:04:41:57:41:dc:2f:a5:98:26:a8:54:34:72:9e: 64:53:ca:e4:ca:4d:cb:a2:18:1d:6c:b3:f0:0f:d3:9c:ae:21: 8a:84:45:ba:dc:15:ae:67:71:0a:20:45:12:f7:ba:34:fd:88: 0f:3d:3f:d6:68:4f:87:7b:26:38:7c:72:4d:7c:35:e4:7e:99: 57:1c:63:f0:36:8e:b5:8b:4d:e5:8a:18:64:41:65:05:80:b3: 7e:ed:ea:43:0d:b0:eb:eb:09:d5:d9:c5:2e:43:f3:60:c9:e4: da:70:17:bb:9b:a7:8b:89:59:54:8e:b5:84:ca:e5:63:a2:7c: 7e:68:92:b4:a7:65:ae:13:b5:fe:23:aa:39:e3:3f:50:fa:85: ab:1f:20:d3:e4:63:8f:e6:1f:4a:21:b8:7e:36:2a:d2:4d:68: d7:46:2a:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE NURBRjM3RkUwHhcNMjYxMTA0MjIzMTExWhcNMjYxMTExMjIzMTExWjAYMRYwFAYD VQQDEw02YWViYjIzMC0xZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs72fpBb3+hbfvjEW49+PbPojJiyzMgwObWgQ8DGgcqUftagtG6/JRKYMK6f2 BjvXl5Pv1iyJNEaHgBkNZ174kqfWt8qU4lvs8RYbXo+bdCC2rWU0TOGJuEtcDNDq wSJUERJMSo0ByiMBhLsUWgIdB4boQxgfxDjx/z3l+/VYys8RyvudTkX1mHj2DGo2 YP38snaa9xxNlGxxci2+oHMciIfXXi7iDqq9afV4SU9IUlTFYCs3kgIXgiDLfuwq OmgDyTslM8dS53U22LClGA7CPHkkhV+BIwAYtBTmm4FoL7lIiSlB+rrEsyEJvkSM gQ6zz8txZoACypAi1mpnle+0IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTX7BIF 62JmC8uQfN4qICGhpbjHMB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5 QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUYzQi80RjhCOTFCOEI5QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4 bnViVVdya0pEWWpWMnZOXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsefMCEJ4w/pfDADkkPcywpIq44Ot4Hd9kVErLB4pz/2g+KkS84aU/D2T+p0Q toav2HtkgZTj/XdTZzGF6RiX4EKsa2Ix8ZLL4vLgJNZRltStD7GLg/u7f2383PZx VARBV0HcL6WYJqhUNHKeZFPK5MpNy6IYHWyz8A/TnK4hioRFutwVrmdxCiBFEve6 NP2IDz0/1mhPh3smOHxyTXw15H6ZVxxj8DaOtYtN5YoYZEFlBYCzfu3qQw2w6+sJ 1dnFLkPzYMnk2nAXu5uni4lZVI61hMrlY6J8fmiStKdlrhO1/iOqOeM/UPqFqx8g 0+Rjj+YfSiG4fjYq0k1o10Yq+w== -----END CERTIFICATE-----Generated at Thu Nov 5 17:38:46 2026 by rpki-client