$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: RhLs/uPJffOB5pMED2nL29eEyhSr4/8tx4t0EM3snrI= Subject key identifier: 37:09:89:D4:95:90:EC:FD:59:4E:B2:C3:97:50:04:DA:B2:1D:66:39 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0840 Signing time: Thu 16 Apr 2026 21:12:12 +0000 Manifest this update: Thu 16 Apr 2026 21:12:11 +0000 Manifest next update: Thu 23 Apr 2026 21:12:11 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: gb6CrXs3MNuYQbCx2lK2G7reURaIJfXUvhiz1LmOlMU=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=) 3: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Apr 16 21:12:11 2026 GMT Not After : Apr 23 21:12:11 2026 GMT Subject: CN=69e150ab-da26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:b1:b2:f6:45:ed:ba:d4:3e:02:6c:90:75: 10:bc:ce:50:23:5f:4f:4a:42:2d:54:dd:5d:16:2f: 6d:51:00:12:f2:ca:46:0f:db:57:98:ac:f7:ab:89: 6a:c9:27:71:b1:5b:36:42:94:ad:dd:f0:85:3b:f6: e5:19:41:e0:70:bd:8b:3c:52:50:1c:b3:15:fa:28: 11:15:22:d7:9c:dd:67:86:57:66:f7:d8:c7:27:9f: 6e:a8:7b:49:89:47:55:72:7f:45:e9:b5:eb:9b:5f: e8:74:7c:54:1e:fb:f3:fb:d8:e8:10:69:45:57:dc: 12:77:d0:f4:00:58:63:ef:33:fc:b9:42:0a:6b:84: 94:f9:b3:fe:68:e1:9c:da:77:ee:62:89:08:ca:9b: 52:dc:19:2f:dc:a5:e1:e9:4e:94:3a:4b:0e:5c:53: c8:ee:b7:73:1b:62:b6:d9:40:e1:14:35:09:d9:6e: 46:ca:96:a2:db:41:6b:31:d0:86:84:df:47:da:a3: 8a:3e:d0:18:c2:17:3a:0f:d2:fc:2c:88:c6:67:6c: 84:27:b8:54:8c:f2:7d:c5:db:eb:f8:4c:c1:57:23: ad:e8:17:49:8b:db:ff:c1:62:cf:85:3e:18:75:ed: 9d:46:35:4d:59:68:65:5b:c6:86:c1:20:64:ca:0b: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:89:D4:95:90:EC:FD:59:4E:B2:C3:97:50:04:DA:B2:1D:66:39 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c8:c4:5c:f3:e3:00:15:4d:9f:23:a0:58:97:bc:16:cb:95: d9:2d:fa:11:1f:86:7b:ea:29:55:51:ba:7e:b5:1e:5e:37:0e: 86:d3:aa:82:ee:f2:53:77:ba:fa:f8:45:a2:68:02:9e:ca:5d: ca:70:e2:0c:c5:ab:e8:b9:73:5f:71:43:c4:74:74:a4:ab:28: dc:dd:22:86:9f:3f:51:a1:54:37:99:77:87:4d:d6:21:1f:91: 8b:0a:74:96:2f:ed:b3:a4:f9:73:a5:ef:c7:2e:b1:f7:0f:2e: 95:e3:b9:85:b5:7d:0b:ce:4b:75:14:eb:c7:02:26:b1:74:28: 23:81:09:d7:b1:1d:36:57:d6:aa:6c:9c:02:9b:08:78:7c:70: b0:ca:d1:eb:47:e1:0b:09:96:8f:86:62:2a:a6:ff:f5:ed:5e: 2f:83:f5:e4:6a:65:e5:9a:e3:ef:5f:de:fe:17:87:a8:33:03: 5a:f3:fe:9e:32:2b:78:7c:9e:ce:b0:09:31:56:d7:fd:0d:e9: e4:f5:f3:6b:a9:cb:bd:57:40:03:cc:34:71:5e:fb:b4:8e:75: 37:46:86:e1:a7:93:55:4d:cd:bf:27:5e:b0:a0:6f:7b:2a:6a: b8:c7:de:94:c5:e4:1c:fe:58:81:f7:3a:6b:aa:c5:f6:32:fa: 32:da:8a:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwNDE2MjExMjExWhcNMjYwNDIzMjExMjExWjAYMRYwFAYD VQQDEw02OWUxNTBhYi1kYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM6xsvZF7brUPgJskHUQvM5QI19PSkItVN1dFi9tUQAS8spGD9tXmKz3q4lq ySdxsVs2QpSt3fCFO/blGUHgcL2LPFJQHLMV+igRFSLXnN1nhldm99jHJ59uqHtJ iUdVcn9F6bXrm1/odHxUHvvz+9joEGlFV9wSd9D0AFhj7zP8uUIKa4SU+bP+aOGc 2nfuYokIyptS3Bkv3KXh6U6UOksOXFPI7rdzG2K22UDhFDUJ2W5Gypai20FrMdCG hN9H2qOKPtAYwhc6D9L8LIjGZ2yEJ7hUjPJ9xdvr+EzBVyOt6BdJi9v/wWLPhT4Y de2dRjVNWWhlW8aGwSBkygsRTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcJidSV kOz9WU6yw5dQBNqyHWY5MB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg8jEXPPjABVNnyOgWJe8FsuV2S36ER+Ge+opVVG6frUeXjcOhtOqgu7yU3e6 +vhFomgCnspdynDiDMWr6LlzX3FDxHR0pKso3N0ihp8/UaFUN5l3h03WIR+Riwp0 li/ts6T5c6Xvxy6x9w8uleO5hbV9C85LdRTrxwImsXQoI4EJ17EdNlfWqmycApsI eHxwsMrR60fhCwmWj4ZiKqb/9e1eL4P15Gpl5Zrj71/e/heHqDMDWvP+njIreHye zrAJMVbX/Q3p5PXza6nLvVdAA8w0cV77tI51N0aG4aeTVU3NvydesKBveypquMfe lMXkHP5Ygfc6a6rF9jL6MtqKoA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:41 2026 by rpki-client