$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: imOs79A66HkwhGZLZX6sPfv43IvBeLd1gtHXmzcAS2k= Subject key identifier: E1:DA:F4:A6:D2:76:71:C6:C9:3F:4B:13:DF:49:2B:16:E8:8F:A3:CF Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 28D8 Signing time: Tue 28 Jul 2026 16:22:03 +0000 Manifest this update: Tue 28 Jul 2026 16:22:03 +0000 Manifest next update: Tue 04 Aug 2026 16:22:03 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: k/KCrqBlX/wN32YwM94w0G/osXltfbMkUzuWGR8C0To=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: 29h4sav8XLlbEtuBhOtdUbdYfYw0of12Y7UKNdoTihA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Jul 28 16:22:03 2026 GMT Not After : Aug 4 16:22:03 2026 GMT Subject: CN=6a68d72b-b38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:8f:95:93:66:ab:e9:15:98:9e:3f:ed:5b: dc:d9:e9:8b:75:2a:b8:6b:5c:56:30:6c:f9:70:c2: 43:1d:55:82:89:62:46:eb:fb:b1:21:a2:bd:9a:e4: 72:63:0a:1e:71:33:81:c7:2f:a2:3a:ea:35:02:bf: de:93:07:83:68:ad:56:c0:aa:5a:34:8b:e8:ff:ae: c5:4e:56:70:0a:7f:3e:bd:4a:53:1b:5c:88:8d:22: 6d:e7:bd:3a:27:68:56:8f:6d:b9:47:6a:48:6f:de: 59:a7:3e:b7:a1:42:82:04:4a:74:7d:24:f5:9d:2f: 69:4b:e2:0c:00:8f:c8:27:85:02:64:d6:40:dd:a7: 50:39:69:5d:0d:7c:8c:d9:02:49:4e:9c:b9:cd:b0: 2c:34:f2:4b:95:0d:ee:8e:43:f7:77:ea:c5:ca:f1: 7c:ee:59:b1:b9:de:0c:72:35:db:4b:7b:cb:d0:5e: 4a:68:15:c2:95:d7:12:ce:0b:4d:9d:96:c6:7c:b7: a4:14:db:e4:6d:3f:33:56:df:a0:57:56:b2:c8:e2: 6b:56:46:81:4d:44:33:d0:38:84:e2:1c:94:0c:3a: 91:4b:83:68:b5:8c:27:91:86:7d:43:cd:10:dd:5b: 4e:fd:a4:f5:c3:11:c4:65:d4:ed:4e:af:dc:61:21: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:F4:A6:D2:76:71:C6:C9:3F:4B:13:DF:49:2B:16:E8:8F:A3:CF X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e1:6f:b9:48:b2:2a:41:e7:9f:5f:b0:cb:d5:1b:4e:bd:df: 76:2a:63:79:6f:24:f1:44:3d:90:63:85:41:12:e9:a4:52:bc: 7a:a8:1b:b2:43:0e:70:68:e6:b5:0d:c0:1d:5a:1b:2b:8f:07: 4d:42:d4:e9:53:1f:1b:41:42:9b:db:ea:dd:3d:8f:a1:93:83: 6c:58:3d:f5:84:8e:7f:7e:66:ce:62:f2:47:73:ac:62:95:a5: 17:cf:f9:c3:05:9c:e4:69:15:ae:17:06:62:38:62:e2:d1:99: c3:e5:39:a2:30:41:47:49:9e:94:10:db:e4:7d:bb:63:50:8d: 2c:e3:bd:37:ce:27:5f:15:12:9b:51:f7:c9:5e:ee:3f:bd:b7: c8:9a:71:a5:7d:cc:a9:e2:2c:7a:83:2f:8c:85:ac:5e:59:b0: 07:96:fc:c0:96:25:46:e8:64:ee:8b:64:e2:18:2d:f4:7a:94: 67:48:3c:e5:5c:c9:37:cf:8c:4d:ef:39:40:63:d8:5e:98:0a: ea:04:9d:4c:d7:9a:d3:30:72:98:75:e2:54:c7:31:4c:dd:80: ae:ce:cf:c7:da:12:8e:89:85:ef:00:be:cd:a3:2e:f4:3c:d5: 53:bd:0d:cb:fe:2d:23:c4:28:29:f6:e4:38:b2:01:39:e1:4a: 4c:38:f2:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKEJFNzY0RUZFRjUzRDg2OUM0NEY2MDcwOTk2MTEzRTBB MTgxODQxMUIwHhcNMjYwNzI4MTYyMjAzWhcNMjYwODA0MTYyMjAzWjAYMRYwFAYD VQQDEw02YTY4ZDcyYi1iMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7aPlZNmq+kVmJ4/7Vvc2emLdSq4a1xWMGz5cMJDHVWCiWJG6/uxIaK9muRy YwoecTOBxy+iOuo1Ar/ekweDaK1WwKpaNIvo/67FTlZwCn8+vUpTG1yIjSJt5706 J2hWj225R2pIb95Zpz63oUKCBEp0fST1nS9pS+IMAI/IJ4UCZNZA3adQOWldDXyM 2QJJTpy5zbAsNPJLlQ3ujkP3d+rFyvF87lmxud4McjXbS3vL0F5KaBXCldcSzgtN nZbGfLekFNvkbT8zVt+gV1ayyOJrVkaBTUQz0DiE4hyUDDqRS4NotYwnkYZ9Q80Q 3VtO/aT1wxHEZdTtTq/cYSHUbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHa9KbS dnHGyT9LE99JKxboj6PPMB8GA1UdIwQYMBaAFL52Tv71PYacRPYHCZYRPgoYGEEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi92blpPX3ZVOWhweEU5Z2NKbGhFLUNoZ1lR UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi92blpPX3ZVOWhw eEU5Z2NKbGhFLUNoZ1lRUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOuFvuUiyKkHnn1+wy9UbTr3fdipjeW8k8UQ9kGOFQRLppFK8eqgbskMOcGjm tQ3AHVobK48HTULU6VMfG0FCm9vq3T2PoZODbFg99YSOf35mzmLyR3OsYpWlF8/5 wwWc5GkVrhcGYjhi4tGZw+U5ojBBR0melBDb5H27Y1CNLOO9N84nXxUSm1H3yV7u P723yJpxpX3MqeIseoMvjIWsXlmwB5b8wJYlRuhk7otk4hgt9HqUZ0g85VzJN8+M Te85QGPYXpgK6gSdTNea0zBymHXiVMcxTN2Ars7Px9oSjomF7wC+zaMu9DzVU70N y/4tI8QoKfbkOLIBOeFKTDjyOQ== -----END CERTIFICATE-----Generated at Wed Jul 29 14:44:08 2026 by rpki-client