$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft File: VArroLYHQFdp3kTXa34xC_VpIXI.mft (raw, json) Hash identifier: cm+ftxyPRemEok8t1RUXh/FEaT9FHup2sHPTZtHI1zc= Subject key identifier: EB:BD:DE:EF:BB:8F:9E:34:69:B4:B1:E9:54:3F:85:7C:AC:70:7E:B9 Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 Certificate issuer: /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft Manifest number: 1F Signing time: Thu 11 Jun 2026 11:12:21 +0000 Manifest this update: Thu 11 Jun 2026 11:12:21 +0000 Manifest next update: Thu 18 Jun 2026 11:12:21 +0000 Files and hashes: 1: VArroLYHQFdp3kTXa34xC_VpIXI.crl (hash: hpR07CyRAP/jp3fPD9X65UFGGHGMm1VLysPXEeaERJQ=) 2: 74F89580380611F1BFB0A69592833773.roa (hash: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Validity Not Before: Jun 11 11:12:21 2026 GMT Not After : Jun 18 11:12:21 2026 GMT Subject: CN=6a2a9815-a668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:fc:6b:39:9a:65:62:62:35:e3:7f:e5:08: 49:37:a3:c6:d8:4f:16:bc:ab:ed:0f:74:4e:c4:9a: eb:ea:54:55:e3:a0:f0:6e:ee:9f:48:c8:bd:91:9d: 58:45:dc:8a:08:58:71:4b:83:91:e7:8f:28:5e:eb: d5:44:71:7a:6e:d6:55:cc:99:f2:ea:f8:5f:09:b7: 70:f5:ab:9a:3e:43:c6:1e:b5:3f:f6:f5:a4:ec:b2: d3:08:da:90:cf:7d:f1:f8:e5:87:7a:85:52:ea:a7: 54:33:84:a2:61:3c:23:70:35:1a:53:4d:5e:c2:93: 2b:6e:26:80:fc:3a:cf:3a:4e:e6:44:fd:86:93:ac: 40:73:84:34:09:97:61:cf:8d:c7:19:df:4b:d7:28: 41:25:f2:c4:47:6e:4a:83:21:3a:ca:7f:88:35:af: a0:5a:42:af:54:cb:7b:10:7f:16:ae:aa:48:73:8e: 67:2a:b3:10:8a:2f:07:60:7c:30:91:2e:42:05:e3: e5:c4:8e:cf:d4:43:e9:e1:d5:1f:e0:08:95:fe:03: b2:53:33:dd:a5:ea:92:16:f1:a4:2c:56:60:c9:11: 53:1a:1e:8f:e5:03:23:87:4e:06:4f:33:51:15:a0: f9:75:27:04:3c:2e:3f:1b:81:95:82:81:34:20:69: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BD:DE:EF:BB:8F:9E:34:69:B4:B1:E9:54:3F:85:7C:AC:70:7E:B9 X509v3 Authority Key Identifier: keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:16:8d:3a:c0:ae:c4:96:7a:42:d4:32:35:fa:55:04:49:b9: 01:63:40:5e:91:f3:33:a4:82:43:d9:2f:6d:f0:2e:06:a0:5f: 26:d6:d1:79:72:72:3d:fa:d6:15:f0:7c:51:a2:93:3b:03:58: d8:fd:25:7b:50:4d:d3:0a:fb:93:a8:4b:f2:a4:7d:93:4c:cc: 36:2a:53:b2:f9:7b:04:59:7d:80:72:86:1e:02:f3:68:51:74: f8:06:58:66:95:29:11:21:d4:a6:fa:fb:33:28:2f:9b:11:a9: 1d:3e:be:43:ab:0e:c7:e1:d0:7a:07:a6:fb:35:0b:86:8b:32: e3:c7:63:ba:74:58:bd:d8:4f:bc:7b:70:90:75:4e:4d:70:27: d7:35:9f:a4:9d:3d:6f:3d:3d:10:0e:af:92:99:91:70:29:13: df:c2:d2:cf:65:fd:4f:17:da:a4:36:b6:17:fd:24:2a:58:20: 11:a1:10:02:fc:58:fc:10:92:62:7e:29:84:94:af:fa:5f:e7: 4c:f6:83:66:d8:29:72:fc:d6:04:ae:0a:c9:ac:75:b4:af:e3: 86:06:d3:d8:be:15:39:39:31:64:31:dd:d1:99:1e:10:96:a9: 08:b7:4b:c4:bc:b3:ce:7e:84:b4:11:71:a4:e8:cc:90:4e:49: 9d:08:7c:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0U5MjExMC8GA1UEBRMoNTQwQUVCQTBCNjA3NDA1NzY5REU0NEQ3NkI3RTMxMEJG NTY5MjE3MjAeFw0yNjA2MTExMTEyMjFaFw0yNjA2MTgxMTEyMjFaMBgxFjAUBgNV BAMTDTZhMmE5ODE1LWE2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXSfxrOZplYmI143/lCEk3o8bYTxa8q+0PdE7EmuvqVFXjoPBu7p9IyL2RnVhF 3IoIWHFLg5Hnjyhe69VEcXpu1lXMmfLq+F8Jt3D1q5o+Q8YetT/29aTsstMI2pDP ffH45Yd6hVLqp1QzhKJhPCNwNRpTTV7CkytuJoD8Os86TuZE/YaTrEBzhDQJl2HP jccZ30vXKEEl8sRHbkqDITrKf4g1r6BaQq9Uy3sQfxauqkhzjmcqsxCKLwdgfDCR LkIF4+XEjs/UQ+nh1R/gCJX+A7JTM92l6pIW8aQsVmDJEVMaHo/lAyOHTgZPM1EV oPl1JwQ8Lj8bgZWCgTQgaVIjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU673e77uP njRptLHpVD+FfKxwfrkwHwYDVR0jBBgwFoAUVArroLYHQFdp3kTXa34xC/VpIXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDRTkyLzgwQjlDMTZBMzgw NTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZkcDNrVFhhMzR4Q19WcElY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkFycm9MWUhRRmRwM2tUWGEzNHhDX1ZwSVhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD RTkyLzgwQjlDMTZBMzgwNTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZk cDNrVFhhMzR4Q19WcElYSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/Fo06wK7ElnpC1DI1+lUESbkBY0BekfMzpIJD2S9t8C4GoF8m1tF5cnI9+tYV 8HxRopM7A1jY/SV7UE3TCvuTqEvypH2TTMw2KlOy+XsEWX2AcoYeAvNoUXT4Blhm lSkRIdSm+vszKC+bEakdPr5Dqw7H4dB6B6b7NQuGizLjx2O6dFi92E+8e3CQdU5N cCfXNZ+knT1vPT0QDq+SmZFwKRPfwtLPZf1PF9qkNrYX/SQqWCARoRAC/Fj8EJJi fimElK/6X+dM9oNm2Cly/NYErgrJrHW0r+OGBtPYvhU5OTFkMd3RmR4QlqkIt0vE vLPOfoS0EXGk6MyQTkmdCHwq -----END CERTIFICATE-----Generated at Sat Jun 13 07:17:16 2026 by rpki-client