$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft File: VArroLYHQFdp3kTXa34xC_VpIXI.mft (raw, json) Hash identifier: j+KIan4gxfVjdiORzXH2tB6lDfVCN/qBFbEImonCMLg= Subject key identifier: 7A:BA:CB:55:39:34:8A:31:37:DF:AF:6F:2F:79:E9:5D:AC:22:A5:FC Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 Certificate issuer: /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft Manifest number: 36 Signing time: Mon 27 Jul 2026 10:56:17 +0000 Manifest this update: Mon 27 Jul 2026 10:56:17 +0000 Manifest next update: Mon 03 Aug 2026 10:56:17 +0000 Files and hashes: 1: VArroLYHQFdp3kTXa34xC_VpIXI.crl (hash: ePOaVkJkifhV3YjfMOB6N8MnRiGmC1iQFdUtpnFSRW4=) 2: 74F89580380611F1BFB0A69592833773.roa (hash: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Validity Not Before: Jul 27 10:56:17 2026 GMT Not After : Aug 3 10:56:17 2026 GMT Subject: CN=6a673951-b533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:f2:b4:7d:39:b3:fe:48:be:2a:6d:7b:d3: b5:70:a1:00:e9:1f:83:dd:74:25:20:b7:10:04:7e: 7a:61:22:7d:69:27:23:38:b8:22:c6:1c:85:50:5d: f9:32:e0:85:07:51:ec:6e:04:f4:a7:ff:e1:24:24: aa:1a:bd:19:08:88:53:54:3a:33:df:63:cc:59:15: 29:81:3d:b6:a7:b8:b6:97:eb:4f:26:1e:c5:34:39: 79:62:cc:c8:d0:1c:b9:26:02:08:ae:49:4c:d5:7a: 58:3b:a5:1b:cd:c0:ce:84:ef:18:32:6e:68:64:e3: d6:aa:44:9f:44:e0:5f:a0:72:1f:4f:1e:5e:5d:ef: e2:18:1e:1b:a6:a9:0b:5e:88:2f:a0:e8:fb:07:33: 09:f1:0d:8a:b9:b5:98:0b:7d:02:39:16:38:38:57: da:4a:61:cc:08:f8:83:e2:aa:f4:b1:61:b0:d3:22: c9:26:ab:e9:b6:ed:3d:bb:29:a5:4f:e5:13:5e:ab: 5b:96:96:38:2f:bb:68:d3:7b:7b:45:e4:cf:d7:ac: 69:68:43:01:76:10:f0:01:68:8a:0a:33:d5:0a:0c: 9c:99:48:27:55:8b:98:38:db:30:5b:66:7b:71:15: dd:e7:e8:2a:e8:ce:36:9f:2b:7b:2d:10:ac:a1:bd: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:CB:55:39:34:8A:31:37:DF:AF:6F:2F:79:E9:5D:AC:22:A5:FC X509v3 Authority Key Identifier: keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a3:fe:cf:e4:ee:6a:a9:87:2c:20:19:4b:40:e2:12:f1:45: 6c:37:07:ea:88:93:93:75:25:10:00:22:30:9c:f6:e3:41:a5: 0c:62:26:7a:89:f3:78:40:46:5e:87:82:df:8b:fd:e6:26:17: 91:0c:eb:3b:90:6d:73:98:4c:82:fe:bb:d6:96:4b:88:d1:70: 02:37:21:9a:74:de:b9:a0:62:18:5a:ec:dd:72:07:24:ab:90: f7:f3:64:e7:d3:bb:db:ff:bf:1e:f4:77:12:69:51:4e:d5:2c: c8:c9:7f:99:3e:7d:ec:16:63:02:6c:60:07:cf:0d:9e:07:fb: 8c:0b:30:ad:48:25:3f:d0:67:31:80:9b:b2:42:7d:a6:7b:3a: 23:4f:ad:da:70:fd:8b:5a:b1:a9:6a:fb:32:08:b4:13:79:f8: 2b:2c:5d:bd:59:f8:70:ff:6e:e1:71:72:42:9f:c5:4c:e2:5d: 53:61:66:55:75:5f:d6:17:4b:fa:95:70:63:24:89:aa:1b:57: 71:9e:32:19:22:0b:4e:70:8e:5a:16:42:40:29:5d:77:e2:ec: da:b2:a4:ef:5f:d6:35:af:04:77:7a:1b:02:9c:47:82:fa:90: 70:75:61:c9:c1:57:e8:28:2a:35:30:2e:0c:b1:b4:8b:87:88: 16:91:82:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0U5MjExMC8GA1UEBRMoNTQwQUVCQTBCNjA3NDA1NzY5REU0NEQ3NkI3RTMxMEJG NTY5MjE3MjAeFw0yNjA3MjcxMDU2MTdaFw0yNjA4MDMxMDU2MTdaMBgxFjAUBgNV BAMTDTZhNjczOTUxLWI1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn0/K0fTmz/ki+Km1707VwoQDpH4PddCUgtxAEfnphIn1pJyM4uCLGHIVQXfky 4IUHUexuBPSn/+EkJKoavRkIiFNUOjPfY8xZFSmBPbanuLaX608mHsU0OXlizMjQ HLkmAgiuSUzVelg7pRvNwM6E7xgybmhk49aqRJ9E4F+gch9PHl5d7+IYHhumqQte iC+g6PsHMwnxDYq5tZgLfQI5Fjg4V9pKYcwI+IPiqvSxYbDTIskmq+m27T27KaVP 5RNeq1uWljgvu2jTe3tF5M/XrGloQwF2EPABaIoKM9UKDJyZSCdVi5g42zBbZntx Fd3n6CrozjafK3stEKyhvXjtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUerrLVTk0 ijE3369vL3npXawipfwwHwYDVR0jBBgwFoAUVArroLYHQFdp3kTXa34xC/VpIXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDRTkyLzgwQjlDMTZBMzgw NTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZkcDNrVFhhMzR4Q19WcElY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkFycm9MWUhRRmRwM2tUWGEzNHhDX1ZwSVhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD RTkyLzgwQjlDMTZBMzgwNTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZk cDNrVFhhMzR4Q19WcElYSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJo/7P5O5qqYcsIBlLQOIS8UVsNwfqiJOTdSUQACIwnPbjQaUMYiZ6ifN4QEZe h4Lfi/3mJheRDOs7kG1zmEyC/rvWlkuI0XACNyGadN65oGIYWuzdcgckq5D382Tn 07vb/78e9HcSaVFO1SzIyX+ZPn3sFmMCbGAHzw2eB/uMCzCtSCU/0GcxgJuyQn2m ezojT63acP2LWrGpavsyCLQTefgrLF29Wfhw/27hcXJCn8VM4l1TYWZVdV/WF0v6 lXBjJImqG1dxnjIZIgtOcI5aFkJAKV134uzasqTvX9Y1rwR3ehsCnEeC+pBwdWHJ wVfoKCo1MC4MsbSLh4gWkYIV -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:00 2026 by rpki-client