$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: 3CM2L4HQJxNgF54vfliHtkBbwwKz4alHKIWftNEftRg= Subject key identifier: 33:6D:FE:FF:14:96:9F:2E:DF:41:66:85:A1:99:A6:B9:60:A2:78:D4 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0833 Signing time: Sun 26 Jul 2026 21:53:57 +0000 Manifest this update: Sun 26 Jul 2026 21:53:56 +0000 Manifest next update: Sun 02 Aug 2026 21:53:56 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: GG7q1duNL9iMCKSXOq5dz1svTgLQyJc4MvMUh+es5G4=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: zwaIVuRApbY9s1XyqtW/uqvzs4vi0AfgJgFNST/nhro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Jul 26 21:53:56 2026 GMT Not After : Aug 2 21:53:56 2026 GMT Subject: CN=6a6681f5-2a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:77:78:4b:39:94:99:8d:40:48:4e:1a:f4: b6:95:eb:4d:3b:24:cd:7b:30:d0:a9:df:ae:45:be: f6:7e:51:cc:84:95:ed:e1:bd:b3:cc:e7:d7:b2:81: eb:fb:52:bd:7a:76:62:11:1d:d3:3b:e2:12:3d:28: 87:8c:ec:8e:37:a2:1d:05:f3:e2:1d:eb:cd:9d:de: 93:2b:57:07:af:eb:2f:e8:d2:a6:f1:93:c8:67:92: f3:d6:7b:ac:56:3e:17:56:3c:89:db:20:c8:59:5b: b7:e8:8b:80:f6:65:f9:01:10:a4:f9:cf:23:31:2a: 55:ee:ed:59:e1:85:9f:1f:86:d6:11:bd:88:5e:19: dc:ca:3b:41:31:02:e2:d0:b5:de:dd:ab:45:78:62: 7e:c8:83:95:91:2e:b3:61:e6:e2:6e:1b:79:c6:61: a6:bd:73:76:e6:fe:58:77:96:60:ac:11:84:be:b6: ec:4d:f5:c8:ab:11:6a:94:34:17:44:41:a2:a1:36: 2e:63:89:0a:44:a6:e6:f0:07:05:ec:80:db:48:27: 00:81:ea:35:08:a9:f2:b7:fd:9b:c9:b4:c9:bb:20: fc:d9:e1:71:d9:f0:4f:0d:80:bc:cc:65:23:44:5b: bc:fb:29:4a:2c:a6:3c:3a:9a:48:cc:11:43:92:48: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:FE:FF:14:96:9F:2E:DF:41:66:85:A1:99:A6:B9:60:A2:78:D4 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e0:4d:a8:7c:9c:6a:63:f3:bd:d9:42:25:c9:c5:10:b2:11: 8e:9b:66:9e:e7:2a:eb:4c:d2:c7:41:69:6b:34:ba:7e:03:00: 0b:6d:5c:af:76:cd:06:2b:59:46:3e:82:99:f6:c9:3b:ab:41: 98:f8:f7:ad:2f:24:93:79:3a:26:11:22:dc:34:0e:12:85:ec: 02:3b:02:95:f4:41:4c:45:99:a0:f3:41:bd:a0:56:22:65:80: 8f:3a:24:c3:ad:81:36:71:3d:a9:98:b8:cc:d3:25:fa:1e:d0: a1:f8:c5:f2:2c:71:54:b4:39:2e:3e:fa:b2:ce:b6:66:c6:cd: 10:3a:9e:8b:98:39:30:3a:c1:b2:dc:05:3c:f4:fe:f0:f6:da: 9a:cf:41:af:03:96:08:c8:63:8a:a2:0c:11:51:bf:20:6a:15: 01:29:0b:b6:42:28:92:50:7a:43:ee:0d:ab:b4:0f:45:6a:32: ed:e6:bf:32:79:24:8d:30:0a:71:05:24:99:39:a3:99:66:ad: e6:88:6d:e3:74:3d:b3:32:80:8d:bc:c1:fc:ff:9c:9c:3a:3c: 6b:1e:5b:7c:72:33:19:3f:d3:95:80:33:7d:1b:52:ed:37:55: 92:6c:fa:b8:6c:4d:8d:ab:25:ea:a4:1e:7b:7e:fe:0b:fc:cb: a3:d1:d2:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjYwNzI2MjE1MzU2WhcNMjYwODAyMjE1MzU2WjAYMRYwFAYD VQQDEw02YTY2ODFmNS0yYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gF3eEs5lJmNQEhOGvS2letNOyTNezDQqd+uRb72flHMhJXt4b2zzOfXsoHr +1K9enZiER3TO+ISPSiHjOyON6IdBfPiHevNnd6TK1cHr+sv6NKm8ZPIZ5Lz1nus Vj4XVjyJ2yDIWVu36IuA9mX5ARCk+c8jMSpV7u1Z4YWfH4bWEb2IXhncyjtBMQLi 0LXe3atFeGJ+yIOVkS6zYebibht5xmGmvXN25v5Yd5ZgrBGEvrbsTfXIqxFqlDQX REGioTYuY4kKRKbm8AcF7IDbSCcAgeo1CKnyt/2bybTJuyD82eFx2fBPDYC8zGUj RFu8+ylKLKY8OppIzBFDkkg3UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNt/v8U lp8u30FmhaGZprlgonjUMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAceBNqHycamPzvdlCJcnFELIRjptmnucq60zSx0FpazS6fgMAC21cr3bNBitZ Rj6CmfbJO6tBmPj3rS8kk3k6JhEi3DQOEoXsAjsClfRBTEWZoPNBvaBWImWAjzok w62BNnE9qZi4zNMl+h7QofjF8ixxVLQ5Lj76ss62ZsbNEDqei5g5MDrBstwFPPT+ 8Pbams9BrwOWCMhjiqIMEVG/IGoVASkLtkIoklB6Q+4Nq7QPRWoy7ea/MnkkjTAK cQUkmTmjmWat5oht43Q9szKAjbzB/P+cnDo8ax5bfHIzGT/TlYAzfRtS7TdVkmz6 uGxNjasl6qQee37+C/zLo9HSaQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:21:51 2026 by rpki-client