$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: tkzu8HvyOKUvS/eN1dD35rorIF2ZnXDVvsLBd6b7R7o= Subject key identifier: CE:A8:2C:39:FF:1A:35:EC:54:AA:0B:A5:11:4C:1B:99:4F:D4:7D:A8 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 0895 Signing time: Tue 12 May 2026 20:37:07 +0000 Manifest this update: Tue 12 May 2026 20:37:06 +0000 Manifest next update: Tue 19 May 2026 20:37:06 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: PcTBuDbInPk2Sr/4cVMMO+L8XmqoDbh7Qc+VxSsMun8=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: vSMN7vA21QMy33UvTehc2BTEz+FGmUIUxczcI5GCg3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: May 12 20:37:06 2026 GMT Not After : May 19 20:37:06 2026 GMT Subject: CN=6a038f72-5fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6f:07:dd:3b:f9:67:a0:f5:84:a2:40:a7:9d: e8:60:d6:9f:ec:70:ad:4b:a1:f2:a8:46:f3:94:2a: e6:8a:1d:c4:e1:2c:3d:05:c8:c6:17:e2:cd:ea:62: a1:fa:78:1f:3d:00:cd:af:be:1e:e8:c7:28:e2:3b: 1f:d5:6e:0c:ac:5c:3b:ca:cd:ff:9d:30:54:89:b5: 32:06:30:d0:22:f0:a2:fa:bf:b1:3a:2b:3f:eb:01: bc:73:da:8e:be:bd:b7:ed:09:54:46:41:0f:22:80: 73:d9:78:66:fd:5c:9b:89:e4:a8:c3:bb:2d:a7:8c: ec:06:92:bf:c4:05:c4:69:d0:f9:60:6e:f1:92:7e: 0d:9a:15:d8:2f:1d:27:03:19:c7:5b:30:f1:a9:42: ef:43:40:eb:a7:b4:81:4b:5c:b8:6c:52:2b:dc:dc: 47:e5:44:16:3d:01:2f:27:b2:19:ca:d9:3c:ef:dc: e1:8a:11:ea:80:04:9e:52:30:92:7c:7a:37:5e:4b: a8:c7:dd:a8:a4:6f:72:89:e6:7c:55:91:fc:c0:43: 7b:f0:38:6a:6c:ef:10:ad:2a:a0:07:b5:39:0b:ed: a7:73:5d:30:2d:7d:2c:2b:bb:bb:2e:f4:3b:09:90: 71:42:06:e0:cc:46:56:c1:50:65:cb:2d:03:dd:0c: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A8:2C:39:FF:1A:35:EC:54:AA:0B:A5:11:4C:1B:99:4F:D4:7D:A8 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b4:11:cf:67:b8:c9:5c:a5:ef:e2:2a:d1:f5:bd:1b:91:f6: 3e:7d:f4:87:29:01:b1:d7:b3:cd:32:2c:34:ec:63:45:c5:89: 25:17:3b:7b:88:84:a6:5f:a3:78:f4:d3:d5:24:fa:02:c7:00: 8b:29:e2:0d:8f:f9:d0:31:f1:83:03:ce:d2:a7:6a:c3:5b:20: c3:ab:16:2b:a8:ea:c0:42:46:15:f4:2b:12:66:36:e0:72:70: 82:32:fa:5d:18:ab:b8:b7:38:7c:06:ab:4a:95:b0:4a:44:79: 7f:15:d3:01:92:49:64:e0:3b:9c:3d:6f:b8:48:fc:8c:07:17: 92:4c:f3:c9:65:35:2c:98:3f:15:ff:a6:57:3c:37:c9:42:70: e1:29:21:34:e0:53:13:5e:a3:97:d6:a9:05:72:9c:cd:da:1a: 3c:dd:07:2d:66:cf:36:77:c4:18:96:46:6f:47:5c:b0:f8:26: 6a:1f:c9:58:c5:d9:d4:69:76:5a:92:c5:64:af:36:0d:ca:83: 75:48:ed:d2:74:a2:01:4a:6f:ab:c4:66:4a:2c:ff:86:f6:ed: de:d3:ed:33:f5:74:a1:47:70:f2:7f:8c:22:eb:ba:f3:78:58: fd:8f:93:05:bd:70:ba:48:33:c4:84:0d:12:4d:5a:4c:81:56: be:3f:99:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjYwNTEyMjAzNzA2WhcNMjYwNTE5MjAzNzA2WjAYMRYwFAYD VQQDEw02YTAzOGY3Mi01ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7G8H3Tv5Z6D1hKJAp53oYNaf7HCtS6HyqEbzlCrmih3E4Sw9BcjGF+LN6mKh +ngfPQDNr74e6Mco4jsf1W4MrFw7ys3/nTBUibUyBjDQIvCi+r+xOis/6wG8c9qO vr237QlURkEPIoBz2Xhm/VybieSow7stp4zsBpK/xAXEadD5YG7xkn4NmhXYLx0n AxnHWzDxqULvQ0Drp7SBS1y4bFIr3NxH5UQWPQEvJ7IZytk879zhihHqgASeUjCS fHo3Xkuox92opG9yieZ8VZH8wEN78DhqbO8QrSqgB7U5C+2nc10wLX0sK7u7LvQ7 CZBxQgbgzEZWwVBlyy0D3QwzGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6oLDn/ GjXsVKoLpRFMG5lP1H2oMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAELQRz2e4yVyl7+Iq0fW9G5H2Pn30hykBsdezzTIsNOxjRcWJJRc7e4iEpl+j ePTT1ST6AscAiyniDY/50DHxgwPO0qdqw1sgw6sWK6jqwEJGFfQrEmY24HJwgjL6 XRiruLc4fAarSpWwSkR5fxXTAZJJZOA7nD1vuEj8jAcXkkzzyWU1LJg/Ff+mVzw3 yUJw4SkhNOBTE16jl9apBXKczdoaPN0HLWbPNnfEGJZGb0dcsPgmah/JWMXZ1Gl2 WpLFZK82DcqDdUjt0nSiAUpvq8RmSiz/hvbt3tPtM/V0oUdw8n+MIuu683hY/Y+T Bb1wukgzxIQNEk1aTIFWvj+ZDw== -----END CERTIFICATE-----Generated at Wed May 13 12:55:50 2026 by rpki-client