$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: 3ZNepCTi6oOJfepP2MiFTZIPAPUz6IORXs5gvHnj3XA= Subject key identifier: 6F:DD:25:6D:46:D6:84:33:FA:AC:5B:C9:8C:42:DA:55:71:D0:C3:23 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 02B8 Signing time: Thu 23 Jul 2026 03:20:27 +0000 Manifest this update: Thu 23 Jul 2026 03:20:26 +0000 Manifest next update: Thu 30 Jul 2026 03:20:26 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: qa7yqyg6Ww5IVEGljjrnjipIEScFuOzq4M+5StBKxzQ=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: fZlLSWyhk+jtQ34uhpkIw+sRdlD+d7ZiPx48gzF1SuI=) 3: 020607A2498711EFBB260663C4F9AE02.roa (hash: TsRQV86ABpakyFtq/EQ6oWMagaNXmmZwXudJvyvhgkQ=) 4: 23852F72273711F1B6AB5B98AD833773.roa (hash: ektQBShXJ5BEKzyA8visW0s0Qg76mbW8+8RclzWr6k4=) 5: 05F505961AA311F0A475D464C4F9AE02.roa (hash: oQQPkdpT5DDBLU1PWyqZU8Cg3jPky7F7z6ow8HBZGoM=) 6: 232F9552F80D11F0AED4E007706F56BC.roa (hash: eD9gDioCM5S2wQWIRX8fMwbM0baYsT5u8C/4wCogM+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Jul 23 03:20:26 2026 GMT Not After : Jul 30 03:20:26 2026 GMT Subject: CN=6a61887b-66ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:c1:04:dd:d9:a8:6f:90:cb:5b:ce:22:a4: 09:0d:70:db:70:47:34:fe:6e:c6:0a:40:3b:71:12: 94:53:3a:70:de:fa:5b:f0:60:17:86:0d:ff:be:27: bd:4f:c3:69:49:d4:9b:95:c2:71:7d:ba:cd:07:36: bf:d7:74:35:24:63:1e:44:f6:ba:59:53:72:61:db: 4a:10:1d:97:56:0f:4f:6c:6a:e9:04:39:d0:5d:8c: 06:d9:75:4f:39:14:5d:fb:63:68:ae:d5:f2:a8:06: 20:ca:09:42:25:f5:d5:52:2c:22:7d:5d:30:7a:b9: 17:d9:fd:2f:3b:18:fb:2a:87:45:0c:df:74:43:c8: d3:b3:1a:b4:1f:0c:64:85:1a:f1:fe:1a:67:2b:5e: 02:74:da:ae:af:94:e2:a0:1e:33:ef:8f:f2:49:1b: 14:39:82:04:dc:36:11:45:c6:44:3d:5c:8d:bf:cc: d8:02:38:a3:b9:95:ed:30:ee:13:c1:d6:2b:57:11: 8b:b8:a2:8b:83:d6:3b:58:28:c5:5c:04:9d:0f:55: da:93:22:6f:7c:3e:17:70:d1:fc:08:8d:a9:96:c5: 7a:6b:6a:7c:0a:17:b2:11:d0:44:31:0e:bf:a9:cb: 8b:94:03:28:5d:3f:fe:48:bb:cc:8b:f8:95:75:28: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DD:25:6D:46:D6:84:33:FA:AC:5B:C9:8C:42:DA:55:71:D0:C3:23 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:84:0b:6a:04:b6:1a:68:dd:4e:90:5b:b8:05:e9:6d:20:09: 9e:de:79:d3:fb:cd:74:38:02:72:a0:d3:5d:70:ef:43:21:d6: 98:68:ac:75:8a:a9:30:2d:7a:33:c8:b8:0c:20:af:47:e1:58: 38:f0:b9:d2:3f:f8:1d:31:01:4b:31:d4:b8:fb:d1:32:7d:e4: 23:02:69:04:73:8e:52:fa:0a:74:94:66:37:e2:0b:7f:43:7d: 94:c6:f0:02:42:3f:e1:f3:61:8d:34:ea:79:7b:61:bd:2d:dd: 39:af:da:01:12:1a:11:64:39:d0:e3:47:60:99:51:90:7b:61: b6:3e:da:a0:b6:c5:81:81:fd:d2:8f:16:98:05:2a:d7:83:a1: 76:4d:a1:d5:f6:9b:c1:70:45:17:df:92:94:11:66:f2:8a:f7: db:ad:1f:97:59:02:82:a8:7c:61:cf:88:e1:ea:28:8a:f3:e4: 8b:85:2f:88:06:ea:8c:13:8e:bc:2a:68:d2:9f:5d:ef:c4:0b: 4d:08:6e:2b:9a:5e:a8:b0:e6:19:02:1e:c5:6f:30:f9:d9:7e: a5:08:67:39:9d:3d:6a:74:b6:0c:d8:ce:cd:16:cd:97:7f:25: 48:17:40:cc:24:fd:de:5e:98:eb:6d:b1:22:f3:58:b2:01:55: bc:96:34:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwNzIzMDMyMDI2WhcNMjYwNzMwMDMyMDI2WjAYMRYwFAYD VQQDEw02YTYxODg3Yi02NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYTBBN3ZqG+Qy1vOIqQJDXDbcEc0/m7GCkA7cRKUUzpw3vpb8GAXhg3/vie9 T8NpSdSblcJxfbrNBza/13Q1JGMeRPa6WVNyYdtKEB2XVg9PbGrpBDnQXYwG2XVP ORRd+2NortXyqAYgyglCJfXVUiwifV0werkX2f0vOxj7KodFDN90Q8jTsxq0Hwxk hRrx/hpnK14CdNqur5TioB4z74/ySRsUOYIE3DYRRcZEPVyNv8zYAjijuZXtMO4T wdYrVxGLuKKLg9Y7WCjFXASdD1XakyJvfD4XcNH8CI2plsV6a2p8CheyEdBEMQ6/ qcuLlAMoXT/+SLvMi/iVdSjZjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/dJW1G 1oQz+qxbyYxC2lVx0MMjMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHYQLagS2GmjdTpBbuAXpbSAJnt550/vNdDgCcqDTXXDvQyHWmGisdYqpMC16 M8i4DCCvR+FYOPC50j/4HTEBSzHUuPvRMn3kIwJpBHOOUvoKdJRmN+ILf0N9lMbw AkI/4fNhjTTqeXthvS3dOa/aARIaEWQ50ONHYJlRkHthtj7aoLbFgYH90o8WmAUq 14Ohdk2h1fabwXBFF9+SlBFm8or3260fl1kCgqh8Yc+I4eooivPki4UviAbqjBOO vCpo0p9d78QLTQhuK5peqLDmGQIexW8w+dl+pQhnOZ09anS2DNjOzRbNl38lSBdA zCT93l6Y622xIvNYsgFVvJY0Fw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:48:21 2026 by rpki-client