$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: WxTIjGYUv8gQONQZVtdyvWCKKhWPktTHbSbAD/Nq41M= Subject key identifier: 36:3A:5F:AC:7B:91:21:BF:B1:F8:F2:04:64:D3:DD:B7:38:A0:71:B8 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 12DB Signing time: Thu 16 Apr 2026 17:00:53 +0000 Manifest this update: Thu 16 Apr 2026 17:00:53 +0000 Manifest next update: Thu 23 Apr 2026 17:00:53 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: dti+IgHzgZKiA2E6qFYXrLbxEsVZXQGqOnjA6nAPG0w=) 2: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: 6pBpzLM6AsUWTi7HiPNltFuDwVz6aOh08vQSqO/jQ4w=) 3: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=) 4: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 1ZUq5NCREZOo2LQMgkIbmL4UYX8AA9o4c/aesFsgTbA=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: +N5oWcqqhFRBdh7rlCavC0BtUxLKyERME+s6ZG9xfxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4898 (0x1322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Apr 16 17:00:53 2026 GMT Not After : Apr 23 17:00:53 2026 GMT Subject: CN=69e115c5-676d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:3f:62:25:92:fd:fb:ed:ee:b4:79:7b:97: 14:2b:53:0e:0c:cd:d8:de:63:c9:e2:9a:c2:b8:e6: c0:80:88:2d:b3:61:2e:b9:fc:c5:2b:63:99:ae:d8: 61:34:39:a2:28:99:67:c1:79:48:bb:a9:6b:1d:a1: 8f:91:fe:b9:ba:f7:53:79:13:09:b8:ff:09:68:0d: b2:fa:46:2a:d8:2b:0c:0f:19:d4:81:b1:29:2f:e8: fa:2c:89:d5:40:d2:d5:be:33:09:d5:9d:0e:0b:29: ae:83:bb:f8:40:03:1f:a7:7d:6f:4e:7e:8f:ba:e0: 37:fb:4e:dd:57:a8:b0:58:eb:c5:6f:79:d9:0b:9b: da:ad:39:f4:a9:ba:c7:4a:cc:cf:9a:71:ce:73:84: d6:3b:e1:9c:93:5c:35:2c:86:79:e7:7e:0e:8d:41: 11:3c:15:16:3a:10:dd:db:3b:ff:32:ea:20:8c:9b: 7f:69:db:85:f3:73:45:59:72:4b:c0:b6:2a:5a:9d: b1:5d:ea:1c:40:65:6d:25:bc:d2:49:f2:39:51:c7: bb:6b:d3:ce:5f:be:bc:22:36:0b:3b:94:08:fb:5b: 6c:79:1c:16:05:be:99:79:18:77:28:b3:36:94:5a: 15:4f:90:cd:b9:01:aa:34:00:68:ab:00:ed:84:ee: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3A:5F:AC:7B:91:21:BF:B1:F8:F2:04:64:D3:DD:B7:38:A0:71:B8 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:4c:3b:a7:c1:bf:3f:cf:3b:60:20:1c:83:b9:18:cb:9d: c6:79:62:ce:be:2b:24:6d:66:fa:97:02:15:12:2b:8b:b7:18: ac:73:e9:21:91:e0:0b:18:c5:5b:6c:38:79:fe:f1:f8:5b:4d: c2:92:c0:4f:d9:79:1b:94:af:f2:79:6e:a2:72:20:3b:ba:a7: 57:3b:82:6a:1d:09:4c:27:69:e8:52:3b:c3:48:ca:19:f4:f4: f0:0a:b7:83:7a:a2:a0:32:b6:a3:98:c8:5c:4d:7a:af:4e:ae: c2:bd:5f:31:12:3a:f6:2a:06:7e:67:d6:96:2b:82:05:2f:c9: c5:bf:51:8f:5f:d6:3b:44:68:de:48:a9:d9:02:a3:ec:de:2b: cb:00:14:7b:2a:a5:fe:ca:dd:6f:62:d7:b8:92:20:ab:a4:51: 31:52:a8:88:c4:57:f2:ff:8c:6b:27:e2:d2:11:77:b8:a9:02: 7c:b9:be:7e:3f:d8:78:20:76:e0:f4:1a:6c:04:4c:76:af:fc: f6:07:a6:70:13:35:46:e5:22:3f:ba:b5:1d:33:07:bf:8f:22: ac:be:da:e4:b9:a2:e9:af:49:1a:75:47:f0:bc:89:78:af:0a: bb:17:31:cc:62:b0:d6:87:ff:34:54:d4:39:aa:1a:27:f7:fa: 6c:b6:56:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwNDE2MTcwMDUzWhcNMjYwNDIzMTcwMDUzWjAYMRYwFAYD VQQDEw02OWUxMTVjNS02NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzA/YiWS/fvt7rR5e5cUK1MODM3Y3mPJ4prCuObAgIgts2EuufzFK2OZrthh NDmiKJlnwXlIu6lrHaGPkf65uvdTeRMJuP8JaA2y+kYq2CsMDxnUgbEpL+j6LInV QNLVvjMJ1Z0OCymug7v4QAMfp31vTn6PuuA3+07dV6iwWOvFb3nZC5varTn0qbrH SszPmnHOc4TWO+Gck1w1LIZ5534OjUERPBUWOhDd2zv/MuogjJt/aduF83NFWXJL wLYqWp2xXeocQGVtJbzSSfI5Uce7a9POX768IjYLO5QI+1tseRwWBb6ZeRh3KLM2 lFoVT5DNuQGqNABoqwDthO5nKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDY6X6x7 kSG/sfjyBGTT3bc4oHG4MB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxhMO6fBvz/PO2AgHIO5GMudxnlizr4rJG1m+pcCFRIri7cYrHPpIZHgCxjF W2w4ef7x+FtNwpLAT9l5G5Sv8nluonIgO7qnVzuCah0JTCdp6FI7w0jKGfT08Aq3 g3qioDK2o5jIXE16r06uwr1fMRI69ioGfmfWliuCBS/Jxb9Rj1/WO0Ro3kip2QKj 7N4rywAUeyql/srdb2LXuJIgq6RRMVKoiMRX8v+Mayfi0hF3uKkCfLm+fj/YeCB2 4PQabARMdq/89gemcBM1RuUiP7q1HTMHv48irL7a5Lmi6a9JGnVH8LyJeK8Kuxcx zGKw1of/NFTUOaoaJ/f6bLZW4A== -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:06 2026 by rpki-client