$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: DoP0CnQDMNdI1VbnEZm/B9kFxiwjBH/NnkMnbZ7dhgE= Subject key identifier: D3:E2:00:3F:C0:2E:0A:B7:8D:33:28:9B:D7:CD:ED:75:93:0A:FE:F1 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0CC7 Signing time: Tue 28 Jul 2026 18:39:57 +0000 Manifest this update: Tue 28 Jul 2026 18:39:57 +0000 Manifest next update: Tue 04 Aug 2026 18:39:57 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: IQ6XvCPvyS9rIY5Z3PSyRAN1MLdyQpoBLJHd5RPaYiM=) 2: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=) 3: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Jul 28 18:39:57 2026 GMT Not After : Aug 4 18:39:57 2026 GMT Subject: CN=6a68f77d-a3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:81:57:e0:a1:2a:76:61:8e:26:80:f7:ed: 0c:26:36:0c:7d:60:52:c1:67:8a:95:79:5d:d4:6f: 2b:67:5f:0b:93:81:e3:5c:c0:55:d5:d4:0e:18:89: 40:e7:04:9a:78:69:74:81:a6:3a:7e:e2:06:65:a0: 17:f2:9b:e2:4d:77:2b:29:d4:13:97:b6:fc:6b:9d: c2:10:1c:a3:61:e6:dc:e2:fc:53:87:eb:ae:24:09: 98:28:06:2b:03:d5:96:8e:85:fc:24:9c:9d:38:db: 29:db:50:5f:40:1d:21:e4:3a:e6:9b:61:2c:96:67: 7a:13:f8:71:38:02:c4:48:1f:ce:00:cd:e4:e7:17: 54:b2:72:1f:07:bb:1c:4f:59:58:e8:4a:6a:0d:78: 2d:81:93:3b:ab:2b:2a:72:c4:05:84:ec:6f:2d:2c: b4:25:75:e3:4e:a5:06:7e:22:78:77:4b:9a:ea:44: 2a:bd:3b:58:02:4f:09:c3:39:27:a3:c9:f8:c8:1f: b8:5d:db:d0:67:b1:20:69:b4:b8:3f:f1:56:7c:25: 37:35:0d:0c:5c:ea:be:c7:ef:05:13:46:01:e3:b8: 13:76:e8:48:fd:7e:6e:8a:2e:3a:66:bf:d6:9e:e1: b2:74:d7:35:c8:fa:27:9b:4b:9b:c3:72:29:5c:50: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:00:3F:C0:2E:0A:B7:8D:33:28:9B:D7:CD:ED:75:93:0A:FE:F1 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:87:bf:1a:8d:d2:58:21:e0:2f:c0:96:d7:49:31:54:d8:09: ea:92:0d:c4:16:55:18:a4:40:fc:da:54:44:45:c0:a1:f0:93: a3:2a:7b:66:24:36:87:b7:f7:71:45:63:ac:1a:6c:b6:82:28: 59:3a:0c:82:95:12:3b:d6:54:9b:f0:b3:a7:e5:32:60:7f:90: 13:e4:58:27:a4:3f:e6:06:e8:53:60:f4:ec:7d:ac:7a:42:30: 9e:c1:b3:51:4f:4d:1f:b5:c3:f3:22:22:3d:4e:61:e3:b3:fe: 64:79:f2:ba:94:f0:f5:b2:39:f7:ab:70:a2:36:11:47:dd:7c: 84:48:33:21:d3:9d:11:4d:d6:55:ec:bd:43:71:be:f0:eb:86: 56:59:5d:83:2e:89:14:c5:bf:cb:13:af:46:89:2a:bb:59:1b: 6c:ee:0a:3f:26:c9:5e:d9:fb:ba:16:ac:60:7f:e7:cf:60:73: a0:35:ae:d8:54:38:a7:0b:45:e3:de:9a:3d:89:fb:ec:43:bf: b9:62:e3:1d:66:d7:51:f0:61:2b:14:91:23:6e:9f:e5:d9:c3: 1e:4b:7e:60:82:5e:ab:9c:f7:7e:9e:ba:61:44:a3:ee:a1:f2: eb:3e:52:f5:80:24:ff:e1:7b:06:1e:04:5f:43:16:99:6e:c8: 7f:b2:a4:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjYwNzI4MTgzOTU3WhcNMjYwODA0MTgzOTU3WjAYMRYwFAYD VQQDEw02YTY4Zjc3ZC1hM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsCBV+ChKnZhjiaA9+0MJjYMfWBSwWeKlXld1G8rZ18Lk4HjXMBV1dQOGIlA 5wSaeGl0gaY6fuIGZaAX8pviTXcrKdQTl7b8a53CEByjYebc4vxTh+uuJAmYKAYr A9WWjoX8JJydONsp21BfQB0h5Drmm2Eslmd6E/hxOALESB/OAM3k5xdUsnIfB7sc T1lY6EpqDXgtgZM7qysqcsQFhOxvLSy0JXXjTqUGfiJ4d0ua6kQqvTtYAk8Jwzkn o8n4yB+4XdvQZ7EgabS4P/FWfCU3NQ0MXOq+x+8FE0YB47gTduhI/X5uii46Zr/W nuGydNc1yPonm0ubw3IpXFAWBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPiAD/A Lgq3jTMom9fN7XWTCv7xMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMoe/Go3SWCHgL8CW10kxVNgJ6pINxBZVGKRA/NpUREXAofCToyp7ZiQ2h7f3 cUVjrBpstoIoWToMgpUSO9ZUm/Czp+UyYH+QE+RYJ6Q/5gboU2D07H2sekIwnsGz UU9NH7XD8yIiPU5h47P+ZHnyupTw9bI596twojYRR918hEgzIdOdEU3WVey9Q3G+ 8OuGVlldgy6JFMW/yxOvRokqu1kbbO4KPybJXtn7uhasYH/nz2BzoDWu2FQ4pwtF 496aPYn77EO/uWLjHWbXUfBhKxSRI26f5dnDHkt+YIJeq5z3fp66YUSj7qHy6z5S 9YAk/+F7Bh4EX0MWmW7If7KkHQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:09 2026 by rpki-client