$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft File: VArroLYHQFdp3kTXa34xC_VpIXI.mft (raw, json) Hash identifier: O5hcqmjA5WOqyVeo4dPoO/SNS9KLGy918HI2naHcKB4= Subject key identifier: 59:B6:76:2B:5E:2D:48:0F:96:6A:43:85:52:41:18:2E:BE:82:51:63 Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 Certificate issuer: /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft Manifest number: 03 Signing time: Wed 15 Apr 2026 08:47:51 +0000 Manifest this update: Wed 15 Apr 2026 08:47:51 +0000 Manifest next update: Wed 22 Apr 2026 08:47:51 +0000 Files and hashes: 1: VArroLYHQFdp3kTXa34xC_VpIXI.crl (hash: gdr0xwBLRl4Y9fADcmECa4o4gldURwxm9pagrmrz1Eo=) 2: 74F89580380611F1BFB0A69592833773.roa (hash: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Validity Not Before: Apr 15 08:47:51 2026 GMT Not After : Apr 22 08:47:51 2026 GMT Subject: CN=69df50b7-64b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:d6:ee:e5:dc:e5:bd:03:70:72:13:13:e4: 6d:04:1e:57:25:60:bd:15:07:da:82:cc:bf:53:b6: 18:07:69:fe:7b:2c:2c:02:84:99:62:a3:2f:61:52: 8c:73:c4:58:7c:12:ba:97:85:6a:a4:5e:d5:12:25: 47:43:11:a8:ae:29:53:ba:09:21:a2:ce:6f:8c:34: 8f:a6:0e:13:a1:96:35:b2:a5:1f:7b:ba:00:3d:bc: 31:10:b1:c8:28:8f:1c:b1:4d:c0:c0:5a:e5:49:c7: d0:eb:99:22:f6:b3:c2:69:ce:e9:36:84:2d:40:b3: 58:f1:11:05:71:8c:78:fd:03:fc:ec:ef:91:55:67: ab:1c:2c:26:e6:92:7b:7b:b2:2c:90:0d:c5:2b:85: 17:0a:81:e1:8d:ba:69:87:b5:90:b6:35:5e:d8:ed: 34:4a:d4:d0:a8:ac:a8:4c:f9:95:21:12:6a:35:55: 3f:22:24:91:62:fa:e9:1c:e5:be:06:e8:7a:13:26: 89:7d:55:f5:7c:de:d4:73:16:60:54:99:69:e5:b0: 29:d4:c5:5c:32:a8:23:be:a5:7d:80:14:1b:7b:ed: 79:51:00:28:e3:78:03:e5:b6:bd:08:a5:06:0d:8e: 24:fe:82:06:33:b3:90:73:7f:9c:70:f6:55:88:b2: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B6:76:2B:5E:2D:48:0F:96:6A:43:85:52:41:18:2E:BE:82:51:63 X509v3 Authority Key Identifier: keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cd:ec:cf:94:5a:6f:6d:05:48:d9:78:21:3a:ce:80:ae:36: c0:ee:19:19:a6:79:37:c9:fd:ff:1e:2e:2f:cf:85:87:f7:e1: 83:bf:43:44:73:96:f6:d7:a1:0d:06:d4:62:94:27:60:68:be: 4d:59:c2:a3:ec:e2:90:af:e8:8b:1b:43:93:a2:00:5a:e7:13: c1:48:7b:09:d9:0d:d4:ce:f4:85:7d:4e:26:fa:b7:9d:f4:56: 6d:b0:dc:c4:49:9f:e9:07:bd:d3:c6:10:44:51:3c:b8:53:22: 89:db:45:c5:7a:e5:fe:74:d9:59:7f:56:37:d8:b3:ee:4e:45: bb:11:98:f9:b2:f5:fc:a7:fb:d2:d7:d1:52:0a:41:65:91:c6: 2b:e6:50:a3:13:05:0c:8a:8e:e5:68:a7:21:22:af:3d:8e:3e: 57:65:81:fe:e5:68:90:09:84:11:b5:9b:bf:74:8e:05:0c:0b: fb:a0:ab:eb:9f:da:d2:bc:23:e8:2b:2c:ec:bc:3f:61:e3:87: cd:14:d9:68:9c:43:79:2f:62:9c:02:f5:19:5e:12:6b:16:f0: 10:e8:88:89:28:60:df:1d:40:aa:87:84:8b:3a:de:66:4a:3a: 9e:9a:6b:9a:15:ca:36:13:5e:3c:4a:4b:d4:72:19:c5:bf:1e: d7:42:88:dd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0U5MjExMC8GA1UEBRMoNTQwQUVCQTBCNjA3NDA1NzY5REU0NEQ3NkI3RTMxMEJG NTY5MjE3MjAeFw0yNjA0MTUwODQ3NTFaFw0yNjA0MjIwODQ3NTFaMBgxFjAUBgNV BAMTDTY5ZGY1MGI3LTY0YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQa9bu5dzlvQNwchMT5G0EHlclYL0VB9qCzL9TthgHaf57LCwChJlioy9hUoxz xFh8ErqXhWqkXtUSJUdDEaiuKVO6CSGizm+MNI+mDhOhljWypR97ugA9vDEQscgo jxyxTcDAWuVJx9DrmSL2s8Jpzuk2hC1As1jxEQVxjHj9A/zs75FVZ6scLCbmknt7 siyQDcUrhRcKgeGNummHtZC2NV7Y7TRK1NCorKhM+ZUhEmo1VT8iJJFi+ukc5b4G 6HoTJol9VfV83tRzFmBUmWnlsCnUxVwyqCO+pX2AFBt77XlRACjjeAPltr0IpQYN jiT+ggYzs5Bzf5xw9lWIsqCbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWbZ2K14t SA+WakOFUkEYLr6CUWMwHwYDVR0jBBgwFoAUVArroLYHQFdp3kTXa34xC/VpIXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDRTkyLzgwQjlDMTZBMzgw NTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZkcDNrVFhhMzR4Q19WcElY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkFycm9MWUhRRmRwM2tUWGEzNHhDX1ZwSVhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD RTkyLzgwQjlDMTZBMzgwNTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZk cDNrVFhhMzR4Q19WcElYSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCazezPlFpvbQVI2XghOs6ArjbA7hkZpnk3yf3/Hi4vz4WH9+GDv0NEc5b216EN BtRilCdgaL5NWcKj7OKQr+iLG0OTogBa5xPBSHsJ2Q3UzvSFfU4m+red9FZtsNzE SZ/pB73TxhBEUTy4UyKJ20XFeuX+dNlZf1Y32LPuTkW7EZj5svX8p/vS19FSCkFl kcYr5lCjEwUMio7laKchIq89jj5XZYH+5WiQCYQRtZu/dI4FDAv7oKvrn9rSvCPo KyzsvD9h44fNFNlonEN5L2KcAvUZXhJrFvAQ6IiJKGDfHUCqh4SLOt5mSjqemmua Fco2E148SkvUchnFvx7XQojd -----END CERTIFICATE-----Generated at Fri Apr 17 07:36:38 2026 by rpki-client