$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: X/kkfa2i9rjf3Uqd+cLi04wbDd5t1jCP/j25OuPI1RM= Subject key identifier: BB:94:AB:89:3B:F2:FB:AF:BD:F3:A0:14:CB:3E:3A:03:A9:3C:5F:5E Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0D1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0D07 Signing time: Sun 26 Jul 2026 18:37:23 +0000 Manifest this update: Sun 26 Jul 2026 18:37:22 +0000 Manifest next update: Sun 02 Aug 2026 18:37:22 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: n6rI79hrIhZ7/ZnwkQEQTW4Vi+sk0jammr5WV/OBS94=) 2: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: OtV6b8befwkPsOuYarHGh5SRZOjkzLz1qANk490i9b8=) 3: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: PLVzOLnz/S3yAyLEYTQXk6jeemE0Coa5Zb4ZLWaW+pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3355 (0xd1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Jul 26 18:37:22 2026 GMT Not After : Aug 2 18:37:22 2026 GMT Subject: CN=6a6653e3-a4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:7a:b5:ad:89:f4:63:29:d1:97:c0:83:a7: 17:64:13:c6:67:37:cb:b6:ba:34:61:4d:e2:f4:4b: 47:8c:db:a7:df:12:76:4f:79:b7:99:8b:0b:39:30: 66:af:41:da:44:70:d1:32:85:c5:a0:58:30:e6:4f: 69:78:65:ef:a8:a5:06:1c:bd:4b:e1:c2:05:6b:df: 91:eb:11:f9:f7:51:b1:67:19:12:ff:be:05:de:20: a1:7c:e0:ee:de:13:e0:ba:28:00:1e:85:39:0e:2c: 90:7a:6d:22:a1:4c:82:3a:3a:53:80:78:fb:57:f8: 90:1d:b1:a5:79:1b:6a:9b:f9:31:dc:46:6a:8a:1e: 94:b2:4e:3d:7e:83:61:6b:1f:ce:42:17:f7:8f:03: 54:7a:f0:4e:d9:1d:d6:0e:77:a5:67:c8:aa:13:5d: 83:cb:94:49:df:cb:d5:ce:d7:0b:2e:88:e7:72:78: 34:42:b8:41:56:a0:dd:ba:2f:bc:ed:24:8b:e7:c0: 5e:9c:b8:25:48:17:93:3a:61:14:d4:fc:71:3f:ab: 52:a2:91:2a:0e:1f:7d:ed:c0:b3:45:b3:57:84:e4: 40:a0:cb:c0:56:c9:cd:30:d3:ea:09:9a:30:b3:b2: 6e:5a:82:84:26:67:99:28:fc:84:59:1c:a0:68:1c: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:94:AB:89:3B:F2:FB:AF:BD:F3:A0:14:CB:3E:3A:03:A9:3C:5F:5E X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:84:91:c1:ca:12:d9:af:87:ba:bd:22:41:a8:32:4e:30:44: 24:44:c8:af:0c:33:6c:16:9d:36:78:57:b1:f7:a1:b7:2f:c6: 32:7a:8e:59:e8:3e:05:24:60:fe:cd:05:d3:82:de:00:f4:57: 21:b7:83:a6:dc:df:7c:c6:90:1f:1f:53:43:e8:33:7c:b2:04: bf:1e:18:fd:e6:f7:b4:59:e0:b6:ed:21:30:06:1c:89:40:1c: 66:3e:73:34:16:ad:86:42:e3:d6:dc:c9:7a:9d:15:2e:e7:1f: 20:b5:03:be:64:6a:89:4f:4f:51:e6:26:e6:cf:14:cc:50:f2: ff:cc:2b:08:63:c9:d7:68:08:ae:fe:6d:40:8a:d8:d1:78:35: f3:8c:10:0e:ac:da:61:0e:c4:07:de:cf:a1:ec:91:74:05:b5: ba:e6:9d:6d:9a:f3:79:8c:fe:5b:87:b5:e1:5d:5b:79:f9:66: 84:93:3f:88:61:62:58:aa:e8:f4:6f:1f:8b:af:12:aa:02:05: b6:26:a4:9d:fb:2c:c3:3a:0e:83:fc:42:8e:b4:bf:e4:2a:71: b9:12:f9:83:77:29:c5:b5:e1:3c:c6:aa:80:10:33:a5:ba:e9: bf:c6:d8:d8:b7:ad:3e:09:fe:f7:11:05:2e:4c:f7:c3:5f:c7: 44:55:96:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYwNzI2MTgzNzIyWhcNMjYwODAyMTgzNzIyWjAYMRYwFAYD VQQDEw02YTY2NTNlMy1hNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uh6ta2J9GMp0ZfAg6cXZBPGZzfLtro0YU3i9EtHjNun3xJ2T3m3mYsLOTBm r0HaRHDRMoXFoFgw5k9peGXvqKUGHL1L4cIFa9+R6xH591GxZxkS/74F3iChfODu 3hPguigAHoU5DiyQem0ioUyCOjpTgHj7V/iQHbGleRtqm/kx3EZqih6Usk49foNh ax/OQhf3jwNUevBO2R3WDnelZ8iqE12Dy5RJ38vVztcLLojncng0QrhBVqDdui+8 7SSL58BenLglSBeTOmEU1PxxP6tSopEqDh997cCzRbNXhORAoMvAVsnNMNPqCZow s7JuWoKEJmeZKPyEWRygaBxMBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuUq4k7 8vuvvfOgFMs+OgOpPF9eMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdISRwcoS2a+Hur0iQagyTjBEJETIrwwzbBadNnhXsfehty/GMnqOWeg+BSRg /s0F04LeAPRXIbeDptzffMaQHx9TQ+gzfLIEvx4Y/eb3tFngtu0hMAYciUAcZj5z NBathkLj1tzJep0VLucfILUDvmRqiU9PUeYm5s8UzFDy/8wrCGPJ12gIrv5tQIrY 0Xg184wQDqzaYQ7EB97PoeyRdAW1uuadbZrzeYz+W4e14V1beflmhJM/iGFiWKro 9G8fi68SqgIFtiaknfsswzoOg/xCjrS/5CpxuRL5g3cpxbXhPMaqgBAzpbrpv8bY 2LetPgn+9xEFLkz3w1/HRFWWUg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:49 2026 by rpki-client