$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: xnFO+uZtbV3haE0hHQZEc64lRDBtVjn4vVA7Li/S8s0= Subject key identifier: 66:32:FC:7E:CB:0B:6E:E8:C0:D7:8F:9D:FA:69:F5:5D:42:EE:1F:4D Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 01CB Signing time: Mon 21 Sep 2026 03:45:16 +0000 Manifest this update: Mon 21 Sep 2026 03:45:16 +0000 Manifest next update: Mon 28 Sep 2026 03:45:16 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: ytIYvqEDTmI/zOYXYg8Og7bs2ri9otikiNjRLg4B8tQ=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: /m0o2RYXlVzJfDGAuvr1e/kZrSjtpAFdFgupCqbwiOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Sep 21 03:45:16 2026 GMT Not After : Sep 28 03:45:16 2026 GMT Subject: CN=6ab0a84c-641c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:00:39:db:5b:3f:3d:50:81:36:1d:69:86: 64:73:90:72:9e:d6:07:45:c5:87:46:2e:0a:3c:fd: 75:a5:aa:bf:41:06:8c:e7:b9:a8:ef:ac:3a:a6:c4: 76:9b:cb:ec:91:99:00:ac:2d:52:15:7a:be:d6:0f: a5:8d:d4:48:0d:6c:2b:08:0a:a6:41:ae:9d:bd:3e: 04:32:70:6c:62:db:9d:9d:85:36:53:c1:2f:72:7d: d3:03:7a:a3:63:9c:dc:0a:9f:71:71:90:e5:f0:95: 57:f3:28:3f:29:25:91:b0:66:4e:7d:9d:96:f0:df: 15:02:dd:44:d7:35:83:18:89:47:af:5f:38:86:20: c7:38:01:55:38:ca:f4:d2:a0:1a:76:8f:dc:13:a1: dc:d8:b0:ee:e6:25:c3:e5:10:d9:ee:1f:6b:fe:af: 95:35:aa:1b:ae:7d:2e:57:f1:cb:ae:cb:f4:7c:d0: e5:e3:4c:f1:c5:7f:d7:76:60:79:4b:b5:25:e7:fd: 20:5c:a5:52:9a:df:15:3e:7f:ce:4e:b3:80:1f:68: e9:d4:b2:6b:aa:9b:54:26:10:8a:2e:29:27:03:df: 48:86:4c:ac:d2:a8:9b:ca:f8:85:c2:63:04:65:4f: d7:95:6a:db:ba:66:0e:2d:48:ad:29:50:2c:36:7a: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:FC:7E:CB:0B:6E:E8:C0:D7:8F:9D:FA:69:F5:5D:42:EE:1F:4D X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:30:eb:95:84:29:87:69:9f:fb:f1:85:31:88:7b:9b:c6:0b: 9b:3e:72:57:4a:3b:3e:df:df:14:2c:eb:eb:65:01:fd:b9:24: 6c:c9:1b:4c:7f:4f:be:58:e8:4c:4c:ce:aa:52:79:1c:de:93: 90:7b:c9:76:10:8c:a4:12:09:75:66:e3:43:47:a5:97:39:5b: 13:f6:5f:cd:e1:74:e8:0b:73:58:89:ad:3d:f3:57:db:3f:0c: e9:25:3c:42:c2:22:10:51:15:b5:09:da:b8:11:65:20:67:09: 9c:0e:c5:0b:e5:2f:08:b6:43:af:93:d5:2d:4b:88:ef:0c:91: c8:5d:db:07:52:8a:48:62:fc:72:7b:59:89:c1:28:41:5e:69: b2:31:c8:32:a4:79:33:1d:fb:18:28:23:63:f1:9c:f7:6c:6b: fc:49:f2:64:c7:cf:8c:60:75:f4:b2:82:32:57:c3:19:9a:4f: 2d:cb:95:73:9e:2e:e1:77:e5:e9:76:12:74:9e:47:03:3f:76: 16:ba:cb:0e:2d:2e:45:9c:9d:ff:7d:89:d6:cf:49:02:94:d3: 95:ab:33:25:3e:32:62:ad:50:67:88:9c:0d:f2:23:44:26:46: 6e:eb:fd:37:d3:74:d6:00:b4:39:4e:8f:84:3c:ba:1c:57:10: 2f:5e:7e:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD MzA3Rjg5RTgwHhcNMjYwOTIxMDM0NTE2WhcNMjYwOTI4MDM0NTE2WjAYMRYwFAYD VQQDEw02YWIwYTg0Yy02NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQUAOdtbPz1QgTYdaYZkc5ByntYHRcWHRi4KPP11paq/QQaM57mo76w6psR2 m8vskZkArC1SFXq+1g+ljdRIDWwrCAqmQa6dvT4EMnBsYtudnYU2U8Evcn3TA3qj Y5zcCp9xcZDl8JVX8yg/KSWRsGZOfZ2W8N8VAt1E1zWDGIlHr184hiDHOAFVOMr0 0qAado/cE6Hc2LDu5iXD5RDZ7h9r/q+VNaobrn0uV/HLrsv0fNDl40zxxX/XdmB5 S7Ul5/0gXKVSmt8VPn/OTrOAH2jp1LJrqptUJhCKLiknA99Ihkys0qibyviFwmME ZU/XlWrbumYOLUitKVAsNnrP9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGYy/H7L C27owNePnfpp9V1C7h9NMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4 YnhlMUlMUlZLSHZEQl9pZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPzDrlYQph2mf+/GFMYh7m8YLmz5yV0o7Pt/fFCzr62UB/bkkbMkbTH9Pvljo TEzOqlJ5HN6TkHvJdhCMpBIJdWbjQ0ellzlbE/ZfzeF06AtzWImtPfNX2z8M6SU8 QsIiEFEVtQnauBFlIGcJnA7FC+UvCLZDr5PVLUuI7wyRyF3bB1KKSGL8cntZicEo QV5psjHIMqR5Mx37GCgjY/Gc92xr/EnyZMfPjGB19LKCMlfDGZpPLcuVc54u4Xfl 6XYSdJ5HAz92FrrLDi0uRZyd/32J1s9JApTTlaszJT4yYq1QZ4icDfIjRCZGbuv9 N9N01gC0OU6PhDy6HFcQL15+iQ== -----END CERTIFICATE-----Generated at Tue Sep 22 15:54:51 2026 by rpki-client