$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: v2gvoKtu0DKXOb1QJsbY0worAYSb5FrhukXRIfE9cxo= Subject key identifier: 13:A9:72:DA:B2:07:E2:A2:1C:E7:6A:6C:0B:00:59:FD:97:B2:BA:77 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0824 Signing time: Sat 28 Feb 2026 21:46:27 +0000 Manifest this update: Sat 28 Feb 2026 21:46:27 +0000 Manifest next update: Sat 07 Mar 2026 21:46:27 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: JaNMUSPv0OCktaoeEBXUs4gOtlc6IqfsB8DbPSx6mCQ=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 3: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) 4: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Feb 28 21:46:27 2026 GMT Not After : Mar 7 21:46:27 2026 GMT Subject: CN=69a36233-a384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:e0:46:c8:86:60:3f:da:06:a0:65:d8:59: 71:f3:70:00:f6:79:e6:23:58:9e:1a:73:57:b2:a2: f9:d8:8d:68:71:b9:4d:1c:0c:38:45:6a:31:30:ed: 72:ad:86:2e:c2:4f:0e:11:c1:69:96:56:a9:e8:16: 5e:66:a0:bb:52:d6:15:d3:e1:c7:da:8a:4c:13:33: d3:4b:d7:e6:8c:61:bd:e2:4b:f6:2f:f4:64:af:cd: 2c:b2:5a:56:05:e1:c3:36:54:5a:35:a7:b0:4e:a1: 97:1f:1c:e0:c8:de:fd:96:8d:5e:14:b8:c6:76:5a: e3:7b:dc:15:88:70:b2:d4:bb:f2:37:9d:bb:09:45: 37:6f:d2:cf:c4:d9:eb:24:1c:4b:12:94:cb:3e:3d: 86:56:0d:a9:63:93:5f:a1:34:43:8d:2b:31:a2:84: 0b:d9:5f:50:9d:83:29:a7:3c:74:a0:30:2a:58:1e: 32:96:35:c5:cb:93:05:7d:c7:77:5c:4c:c6:d2:4d: 99:b9:24:e9:79:82:d9:91:a2:f4:76:7a:ed:a4:03: 2e:51:39:cb:8c:0d:9b:bc:50:65:f3:ea:b8:6e:97: 07:85:44:68:f7:39:6e:4b:3a:70:28:43:2c:fc:26: 17:19:08:5e:48:b9:fb:a4:b5:ee:94:71:02:e0:c4: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:72:DA:B2:07:E2:A2:1C:E7:6A:6C:0B:00:59:FD:97:B2:BA:77 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:98:6f:25:fd:4f:df:fe:db:55:34:1e:d4:0f:7c:c5:01:e5: c1:9d:34:09:a9:ff:13:79:70:73:1e:21:3f:e8:30:6f:7b:bf: 58:bc:53:94:e5:dc:78:27:52:f9:65:9b:8e:d9:26:1f:86:a6: 67:a1:3f:4b:91:f1:11:19:af:7d:a5:53:bd:00:ff:42:92:4f: 8e:82:4e:0a:06:09:31:96:e5:bc:ba:4c:c3:1a:e8:fa:7b:f3: 7e:68:58:87:8f:f8:90:27:d3:e4:93:d7:ed:c9:01:d8:46:18: 2a:91:fe:28:05:af:7a:37:b7:11:4d:61:22:36:fd:43:d9:e5: 59:3e:03:48:cb:53:03:f2:f3:6c:58:0e:38:8e:a1:fd:07:c7: e2:80:eb:94:8c:f3:79:b6:37:de:cc:03:45:69:61:06:6c:66: 4c:86:d7:ce:38:b8:30:07:0f:6b:33:aa:89:eb:f7:26:79:57: 7e:1e:5d:58:9a:77:a9:3b:93:b4:01:b6:6d:33:9c:6a:5f:a3: a7:b6:ff:d4:5d:22:b6:95:13:e4:4e:0d:bb:9f:1a:61:55:42: 97:d5:a8:91:2b:9d:ab:ef:9c:d2:14:e5:6a:6f:27:8d:dc:64: 44:0c:16:8b:ed:2d:8a:e5:ff:04:10:e3:fe:ac:76:b6:ee:52: 33:23:48:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwMjI4MjE0NjI3WhcNMjYwMzA3MjE0NjI3WjAYMRYwFAYD VQQDDA02OWEzNjIzMy1hMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC/gRsiGYD/aBqBl2Flx83AA9nnmI1ieGnNXsqL52I1ocblNHAw4RWoxMO1y rYYuwk8OEcFpllap6BZeZqC7UtYV0+HH2opMEzPTS9fmjGG94kv2L/Rkr80sslpW BeHDNlRaNaewTqGXHxzgyN79lo1eFLjGdlrje9wViHCy1LvyN527CUU3b9LPxNnr JBxLEpTLPj2GVg2pY5NfoTRDjSsxooQL2V9QnYMppzx0oDAqWB4yljXFy5MFfcd3 XEzG0k2ZuSTpeYLZkaL0dnrtpAMuUTnLjA2bvFBl8+q4bpcHhURo9zluSzpwKEMs /CYXGQheSLn7pLXulHEC4MSlQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOpctqy B+KiHOdqbAsAWf2Xsrp3MB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm5hvJf1P3/7bVTQe1A98xQHlwZ00Can/E3lwcx4hP+gwb3u/WLxTlOXceCdS +WWbjtkmH4amZ6E/S5HxERmvfaVTvQD/QpJPjoJOCgYJMZblvLpMwxro+nvzfmhY h4/4kCfT5JPX7ckB2EYYKpH+KAWveje3EU1hIjb9Q9nlWT4DSMtTA/LzbFgOOI6h /QfH4oDrlIzzebY33swDRWlhBmxmTIbXzji4MAcPazOqiev3JnlXfh5dWJp3qTuT tAG2bTOcal+jp7b/1F0itpUT5E4Nu58aYVVCl9WokSudq++c0hTlam8njdxkRAwW i+0tiuX/BBDj/qx2tu5SMyNI2Q== -----END CERTIFICATE-----Generated at Mon Mar 2 02:34:16 2026 by rpki-client