$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: 3eMUrJ7MGQI5osCE8Vn4Ln/qXJm2P1Dq8n/51N8/G14= Subject key identifier: A4:0B:19:A2:41:63:EE:F4:28:57:1D:B9:33:6A:96:FC:46:E1:B3:6A Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 0649 Signing time: Sun 20 Sep 2026 22:36:57 +0000 Manifest this update: Sun 20 Sep 2026 22:36:57 +0000 Manifest next update: Sun 27 Sep 2026 22:36:57 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: Owtgu/oj9APXqFi1QJNUCH63VsK3t1G/1pcZM5dKUCw=) 2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=) 3: 928880FE8B0F11F182DCACFD3211F970.roa (hash: 97DMfE8QWEUEG5Cfx4YrvAURPmPn7eR9nJeGo/mBqD0=) 4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Sep 20 22:36:57 2026 GMT Not After : Sep 27 22:36:57 2026 GMT Subject: CN=6ab06009-f40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:82:83:a8:70:69:53:23:d3:27:ba:08:b5: c1:cc:ba:d6:c6:07:d8:44:c3:97:ec:20:05:96:e3: 1c:83:51:67:19:51:b7:f1:47:31:59:8f:fb:e7:b2: 25:9f:75:6f:b3:f2:6e:78:73:56:7f:ad:4b:39:f2: 6e:be:32:f4:06:c4:79:64:b3:5f:ea:06:2f:4b:4e: f8:81:e0:79:0c:b7:73:57:ee:cf:4c:88:f2:77:7f: 31:20:2b:04:24:c3:f0:a9:63:21:4b:a3:ba:dc:52: 78:4f:ca:58:b8:44:92:a3:1e:88:81:60:95:e8:fc: 45:1b:b2:da:93:7c:4b:dd:5d:08:ea:cc:55:b8:c2: b4:3e:94:5d:2a:5c:2f:0e:10:5a:b0:09:ab:1f:43: 18:17:a0:9f:28:7d:69:c5:08:7d:d4:77:e5:c0:c0: f7:bb:8f:9c:54:e2:75:c3:b6:89:e2:9f:94:c7:47: c5:8d:76:dc:0e:e8:f5:f3:3e:5a:fd:4f:b8:87:fa: e8:b4:e3:2a:0e:a1:84:81:e0:22:fd:9a:bf:cf:bc: dd:18:4b:22:17:62:d8:ed:86:c3:04:58:d7:fe:30: 78:b7:a7:a8:3e:19:2e:4a:49:c8:a9:6f:73:1c:62: 4e:07:31:85:8c:46:5b:bb:03:8e:01:3b:ed:6a:15: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0B:19:A2:41:63:EE:F4:28:57:1D:B9:33:6A:96:FC:46:E1:B3:6A X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c4:a9:4e:17:73:d8:ee:2b:a4:cf:c3:89:68:a0:46:69:bc: bc:77:6b:e3:b5:be:54:63:43:6b:42:bc:56:d5:2d:92:6b:be: a5:bd:66:9f:dd:a8:0b:fb:d1:b3:1e:a8:b5:f4:58:9c:ba:e9: 3f:c3:85:4d:78:99:fa:4e:ef:87:a1:53:8c:72:1e:0b:ef:a2: b3:57:83:58:02:2f:8d:a1:9e:7c:a0:f8:6b:55:59:58:52:f6: de:a4:9c:00:dc:79:1b:58:52:0a:eb:db:3c:14:e1:7e:48:e9: bd:fa:ef:14:52:41:32:92:d2:e7:58:54:76:29:f4:75:0d:41: c2:65:28:7c:85:09:a0:c0:13:08:df:f6:e5:86:49:d5:0d:78: 72:a0:f8:7d:0b:df:7d:ec:cc:e5:ba:67:c8:26:fb:b6:9e:6c: d2:20:0c:f0:55:b3:d6:54:73:d1:bc:1f:cb:ca:05:af:4e:26: a5:4c:c0:9c:af:8b:84:8d:0d:40:f1:07:0f:56:87:56:1d:86: f8:61:72:50:44:c5:98:c0:05:18:4b:33:42:b4:ec:fe:79:ea: 91:e8:1f:01:0d:73:85:3a:5d:cd:52:a3:b6:a7:58:2a:83:51: 7b:6f:c0:8c:4d:7d:72:61:d5:61:88:52:1b:b4:a4:ff:3d:b3: 88:79:df:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjYwOTIwMjIzNjU3WhcNMjYwOTI3MjIzNjU3WjAYMRYwFAYD VQQDEw02YWIwNjAwOS1mNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8CCg6hwaVMj0ye6CLXBzLrWxgfYRMOX7CAFluMcg1FnGVG38UcxWY/757Il n3Vvs/JueHNWf61LOfJuvjL0BsR5ZLNf6gYvS074geB5DLdzV+7PTIjyd38xICsE JMPwqWMhS6O63FJ4T8pYuESSox6IgWCV6PxFG7Lak3xL3V0I6sxVuMK0PpRdKlwv DhBasAmrH0MYF6CfKH1pxQh91HflwMD3u4+cVOJ1w7aJ4p+Ux0fFjXbcDuj18z5a /U+4h/rotOMqDqGEgeAi/Zq/z7zdGEsiF2LY7YbDBFjX/jB4t6eoPhkuSknIqW9z HGJOBzGFjEZbuwOOATvtahVSoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQLGaJB Y+70KFcduTNqlvxG4bNqMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdcSpThdz2O4rpM/DiWigRmm8vHdr47W+VGNDa0K8VtUtkmu+pb1mn92oC/vR sx6otfRYnLrpP8OFTXiZ+k7vh6FTjHIeC++is1eDWAIvjaGefKD4a1VZWFL23qSc ANx5G1hSCuvbPBThfkjpvfrvFFJBMpLS51hUdin0dQ1BwmUofIUJoMATCN/25YZJ 1Q14cqD4fQvffezM5bpnyCb7tp5s0iAM8FWz1lRz0bwfy8oFr04mpUzAnK+LhI0N QPEHD1aHVh2G+GFyUETFmMAFGEszQrTs/nnqkegfAQ1zhTpdzVKjtqdYKoNRe2/A jE19cmHVYYhSG7Sk/z2ziHnfhQ== -----END CERTIFICATE-----Generated at Mon Sep 21 13:22:51 2026 by rpki-client