$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json) Hash identifier: 7E/7D+N0Z5tl1XL3BYpSBOMB0ix0FL5iiOZx7AO+1G0= Subject key identifier: A0:65:06:06:E1:6D:8D:35:25:53:2F:0B:3A:AF:2E:7C:76:C5:BA:FC Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft Manifest number: 01A5 Signing time: Thu 23 Jul 2026 05:36:20 +0000 Manifest this update: Thu 23 Jul 2026 05:36:19 +0000 Manifest next update: Thu 30 Jul 2026 05:36:19 +0000 Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: E/Jwm+3sNi4njTO+NgjSlPzlug16xkYdZCD7le/Unco=) 2: 150427207ADC11F19849D5B474A30FBC.roa (hash: LPSfyrjFtmZd5dQ1E/AZ0uGCOSVP/h9k3xx6rrDu3bk=) 3: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: 80SnbVxPivXWHEwHHqV8hYnrOqhwI1EXSpGak/LvQw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D Validity Not Before: Jul 23 05:36:19 2026 GMT Not After : Jul 30 05:36:19 2026 GMT Subject: CN=6a61a854-cf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:bb:1c:6b:5e:da:c0:e8:1e:dd:6f:7a:8c: 40:dc:e7:89:88:41:fc:c5:ae:e8:1f:d5:79:ea:9f: 11:83:78:3b:76:ef:ed:e3:90:a0:a1:d5:20:7e:3f: 89:cc:46:07:fb:48:e4:df:cf:8c:4a:91:98:ff:b4: c5:18:01:69:5e:8d:51:a6:40:89:05:bb:5f:11:7b: 58:eb:7c:90:9a:de:c3:f7:67:a4:25:30:aa:bd:84: 17:c7:83:03:ba:de:29:35:8b:30:31:93:52:5e:97: be:78:58:fb:cb:1a:ea:f7:f8:b2:2b:d9:51:1e:e0: 56:63:73:36:9b:84:1e:d4:ad:48:e5:22:c4:c6:89: d8:c3:fe:c7:d6:5c:1c:24:82:a8:e1:20:0f:47:57: 38:d8:b0:c0:48:88:8c:8c:48:c0:13:87:28:e2:ba: c2:6f:e1:73:26:08:40:3c:df:f2:8f:a1:c2:4d:e3: 4f:c0:b2:39:11:6f:03:ae:89:49:d9:f9:25:83:7a: e1:01:81:a8:ff:7c:16:35:6a:7c:c5:fa:0f:16:5e: 8f:f0:bc:06:9f:ec:8c:4c:92:2c:da:b4:6a:4d:72: d5:e0:2f:c5:49:d8:a8:a7:bf:d7:5d:ef:63:37:9a: 4c:b4:5e:bf:b1:38:7d:96:1a:8f:b5:5b:4f:aa:72: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:65:06:06:E1:6D:8D:35:25:53:2F:0B:3A:AF:2E:7C:76:C5:BA:FC X509v3 Authority Key Identifier: keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:31:02:3d:f6:0e:5e:bb:53:df:05:85:cc:04:ee:fc:e9:16: aa:f8:a3:be:e9:88:3b:7f:72:3d:4f:f4:98:3c:0e:d9:5e:44: f1:34:51:f9:db:09:70:11:43:4e:bc:08:42:60:45:f8:8f:59: ad:a4:62:44:5e:ca:c5:f4:f1:6a:23:32:72:57:55:88:c1:16: 4c:39:0c:d3:ad:42:8f:fd:b8:7d:5b:15:68:b4:25:14:42:5a: 61:4f:41:f1:99:b5:97:c7:b9:30:bd:31:79:ab:83:47:bb:d8: eb:10:b7:69:8f:d1:6f:68:f6:8c:d5:a5:ff:2c:7e:4f:8a:40: 57:ac:a8:72:bb:6c:90:73:41:a9:a9:1b:04:36:6f:55:6b:d8: 54:c4:c2:2b:6a:95:75:36:85:ec:33:43:fa:72:f5:00:37:57: 30:0a:f8:0e:9e:88:75:78:bb:02:c9:41:e9:f4:fb:1e:c9:2d: a9:38:16:cf:ef:c4:68:b1:a4:85:a0:4b:a0:12:e9:50:40:c1: 7d:e2:3e:f9:74:ea:ba:6c:91:92:e8:76:d4:90:bc:0c:ae:e8: ea:1f:1e:38:50:4e:99:13:41:fb:49:e5:67:a9:60:a8:ce:37: 65:8a:48:f8:e0:11:d2:e9:3e:78:e1:6d:b0:f6:7d:aa:b5:39: 69:0a:bb:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5QjgxMTAvBgNVBAUTKDU2NzgyNjE2Mjc1NEI0NjBDQjU4NjZEQUMzMTQ4ODBD NzAzNTQ2MUQwHhcNMjYwNzIzMDUzNjE5WhcNMjYwNzMwMDUzNjE5WjAYMRYwFAYD VQQDEw02YTYxYTg1NC1jZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmR+7HGte2sDoHt1veoxA3OeJiEH8xa7oH9V56p8Rg3g7du/t45CgodUgfj+J zEYH+0jk38+MSpGY/7TFGAFpXo1RpkCJBbtfEXtY63yQmt7D92ekJTCqvYQXx4MD ut4pNYswMZNSXpe+eFj7yxrq9/iyK9lRHuBWY3M2m4Qe1K1I5SLExonYw/7H1lwc JIKo4SAPR1c42LDASIiMjEjAE4co4rrCb+FzJghAPN/yj6HCTeNPwLI5EW8DrolJ 2fklg3rhAYGo/3wWNWp8xfoPFl6P8LwGn+yMTJIs2rRqTXLV4C/FSdiop7/XXe9j N5pMtF6/sTh9lhqPtVtPqnKOIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBlBgbh bY01JVMvCzqvLnx2xbr8MB8GA1UdIwQYMBaAFFZ4JhYnVLRgy1hm2sMUiAxwNUYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlCOC9DOEIxRDQ0RTA3 QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRHRExXR2Jhd3hTSURIQTFS aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuZ21GaWRVdEdETFdHYmF3eFNJREhBMVJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlCOC9DOEIxRDQ0RTA3QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRH RExXR2Jhd3hTSURIQTFSaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwjECPfYOXrtT3wWFzATu/OkWqvijvumIO39yPU/0mDwO2V5E8TRR+dsJcBFD TrwIQmBF+I9ZraRiRF7KxfTxaiMycldViMEWTDkM061Cj/24fVsVaLQlFEJaYU9B 8Zm1l8e5ML0xeauDR7vY6xC3aY/Rb2j2jNWl/yx+T4pAV6yocrtskHNBqakbBDZv VWvYVMTCK2qVdTaF7DND+nL1ADdXMAr4Dp6IdXi7AslB6fT7HsktqTgWz+/EaLGk haBLoBLpUEDBfeI++XTqumyRkuh21JC8DK7o6h8eOFBOmRNB+0nlZ6lgqM43ZYpI +OAR0uk+eOFtsPZ9qrU5aQq7rA== -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:42 2026 by rpki-client