$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: 0NyQiS3oY3hNwTjRk4Td6T65xG4ScFLNSqQRnuDze88= Subject key identifier: 96:65:42:77:4F:4E:A6:72:DD:6D:83:E3:81:98:1A:95:92:E7:EF:BC Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 01AA Signing time: Thu 23 Jul 2026 05:29:19 +0000 Manifest this update: Thu 23 Jul 2026 05:29:18 +0000 Manifest next update: Thu 30 Jul 2026 05:29:18 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: eFl6oDnhPz+79fJovaH0+3i+Pyr4ycFAHJoqMdosprw=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: sBqGDzVDqdsPkrknp4C6rLHvQjOcX3zI0i8iLqmfuUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Jul 23 05:29:18 2026 GMT Not After : Jul 30 05:29:18 2026 GMT Subject: CN=6a61a6af-3872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:ac:96:27:84:32:b9:50:28:1b:c8:3c:ce: 5f:06:f3:be:83:66:91:fe:c2:83:91:d9:45:f3:14: f8:c8:33:d5:59:89:26:ad:e3:eb:a9:18:b5:ce:c3: b1:3c:90:9e:87:b6:09:a9:57:59:5d:64:41:df:b9: 98:7d:bc:fb:e6:ed:c0:62:f7:ad:06:6a:37:56:90: ac:7b:04:6d:04:bb:09:cd:ed:52:da:ea:0c:a0:2f: 67:e0:13:09:1d:c9:ec:12:7f:ae:1d:4e:4d:df:fd: 03:57:9b:b2:b2:9f:ae:80:a8:07:82:6a:34:3e:c3: c8:a4:73:e4:4f:23:55:c2:05:f3:67:6a:ac:e4:04: ac:bf:96:13:42:b1:96:7d:5d:af:b9:d2:2a:67:55: ae:1f:10:ea:ca:b4:7d:e6:ef:64:fe:4e:a1:87:d1: 24:c4:91:27:b3:e8:67:e3:3c:20:bc:07:88:9e:f0: 68:36:f2:eb:1c:61:f5:8c:e6:0d:da:e8:da:8e:ac: a6:97:65:28:6f:ac:51:0c:19:64:d9:8f:3a:0c:78: 82:00:06:f5:5e:aa:24:74:a9:2e:24:1a:93:85:47: 5a:40:f5:31:75:10:87:42:a6:65:f5:1e:7c:d6:2e: 82:94:7b:ef:84:95:bc:b8:9b:1b:c1:b3:89:36:df: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:42:77:4F:4E:A6:72:DD:6D:83:E3:81:98:1A:95:92:E7:EF:BC X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:29:43:52:b1:cd:31:18:86:60:b1:4b:70:83:88:06:81:89: d3:c1:98:87:f8:8b:83:49:db:cc:17:2a:3e:f1:ec:c1:bb:e6: d8:05:b0:6c:3b:ee:87:57:97:57:a1:ae:ec:08:0c:07:bd:a1: ce:68:d1:3a:9b:8c:b0:9d:b9:e3:2e:a6:49:cf:6d:5e:dd:ae: 5e:ce:27:c8:a4:ee:a6:27:26:49:5c:e3:9f:01:f5:56:dd:3e: ea:7a:ce:9c:96:80:ee:6a:8f:aa:1e:c9:71:84:cd:f4:23:66: ec:ae:6c:21:fa:bf:cb:26:93:f1:a0:8d:ac:ed:4c:2a:96:6f: 98:55:00:e6:38:dd:0a:8c:89:dd:39:8b:4b:95:b9:81:f1:a2: 12:9a:52:3a:f1:7c:b0:6e:1a:44:02:5b:11:29:57:34:98:7f: 99:e5:38:e2:eb:49:a8:97:ee:9b:5b:38:45:03:05:c3:72:31: 1f:17:ac:90:1c:72:63:96:8f:05:94:21:dc:e7:79:68:6d:09: 5b:16:df:94:9c:d5:8d:4e:ea:c7:7c:10:c8:56:38:a0:7e:18: 54:2a:74:28:d5:9d:30:ef:0a:e9:0d:00:41:3d:4f:97:3d:05: e5:80:ce:e1:a8:2b:77:3c:d3:b6:eb:55:05:f5:71:a4:f2:f1: 07:2b:79:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD MzA3Rjg5RTgwHhcNMjYwNzIzMDUyOTE4WhcNMjYwNzMwMDUyOTE4WjAYMRYwFAYD VQQDEw02YTYxYTZhZi0zODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DyslieEMrlQKBvIPM5fBvO+g2aR/sKDkdlF8xT4yDPVWYkmrePrqRi1zsOx PJCeh7YJqVdZXWRB37mYfbz75u3AYvetBmo3VpCsewRtBLsJze1S2uoMoC9n4BMJ HcnsEn+uHU5N3/0DV5uysp+ugKgHgmo0PsPIpHPkTyNVwgXzZ2qs5ASsv5YTQrGW fV2vudIqZ1WuHxDqyrR95u9k/k6hh9EkxJEns+hn4zwgvAeInvBoNvLrHGH1jOYN 2ujajqyml2Uob6xRDBlk2Y86DHiCAAb1XqokdKkuJBqThUdaQPUxdRCHQqZl9R58 1i6ClHvvhJW8uJsbwbOJNt/asQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZlQndP TqZy3W2D44GYGpWS5++8MB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4 YnhlMUlMUlZLSHZEQl9pZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALilDUrHNMRiGYLFLcIOIBoGJ08GYh/iLg0nbzBcqPvHswbvm2AWwbDvuh1eX V6Gu7AgMB72hzmjROpuMsJ254y6mSc9tXt2uXs4nyKTupicmSVzjnwH1Vt0+6nrO nJaA7mqPqh7JcYTN9CNm7K5sIfq/yyaT8aCNrO1MKpZvmFUA5jjdCoyJ3TmLS5W5 gfGiEppSOvF8sG4aRAJbESlXNJh/meU44utJqJfum1s4RQMFw3IxHxeskBxyY5aP BZQh3Od5aG0JWxbflJzVjU7qx3wQyFY4oH4YVCp0KNWdMO8K6Q0AQT1Plz0F5YDO 4agrdzzTtutVBfVxpPLxByt5bg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:50:42 2026 by rpki-client