$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: b2Zhe0ljK+VW/cSIzWKelQB/LJ7eiTAJjKr9GD3CPpw= Subject key identifier: 5C:2B:91:6F:20:3E:AB:A1:2C:05:AB:73:28:17:F0:7B:43:A3:06:FD Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 35A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 3572 Signing time: Tue 12 May 2026 14:38:42 +0000 Manifest this update: Tue 12 May 2026 14:38:42 +0000 Manifest next update: Tue 19 May 2026 14:38:42 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: OGi6lnXp3i5DTdIotBQEIoQTee+NjyfcJCvz5CTrFkE=) 2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=) 3: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=) 4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13737 (0x35a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: May 12 14:38:42 2026 GMT Not After : May 19 14:38:42 2026 GMT Subject: CN=6a033b72-8a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:87:23:fa:f8:9c:44:ff:1b:f0:27:96:48: 5c:74:16:b0:3f:f3:5d:ec:a0:bc:41:ed:d4:cb:b1: e7:6c:66:a8:9e:89:9f:88:21:22:ab:1a:f4:5a:99: 92:54:8c:b2:22:17:2f:00:fd:1f:23:7d:09:59:8c: 9c:15:23:cd:fc:ec:86:ed:89:c4:ee:75:9e:f2:a7: 1b:9a:bd:75:9c:27:49:09:0f:37:68:3b:54:63:60: 5a:39:20:12:6c:d1:a5:15:4b:d2:53:2d:5b:ec:c1: cf:11:11:88:c3:f5:d1:cb:59:4f:fc:15:aa:6e:a1: 1d:ef:e4:e8:77:01:6a:00:d6:89:2d:fc:8a:17:4f: b7:c3:f0:0d:1c:2b:fb:58:78:a3:53:50:7b:58:5c: 9e:e2:8b:81:24:03:29:32:05:b9:74:aa:b8:10:6d: 54:b5:ca:75:40:1b:9b:5f:29:6d:80:5d:5e:9e:21: 55:b2:1a:a5:11:63:6c:6e:d4:66:dd:36:aa:2d:84: 2f:5a:43:2b:2f:f3:86:44:ed:cd:bb:bc:d0:16:50: 5e:bd:09:49:c9:60:0e:4e:5b:6f:d1:e9:f3:ce:3c: d5:ba:71:ef:5c:ff:d3:11:bf:ed:e8:b0:4d:b4:0d: 7f:eb:f3:5a:15:35:13:53:50:9f:fa:37:bd:aa:6a: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2B:91:6F:20:3E:AB:A1:2C:05:AB:73:28:17:F0:7B:43:A3:06:FD X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:83:ab:8c:6d:8e:e9:b2:23:18:cd:69:e7:a4:1e:23:c8:59: 56:cd:d3:76:3c:59:d3:da:20:d6:64:a4:04:c1:02:6d:f9:34: 02:b1:4d:9e:54:42:74:75:7f:57:4a:9e:fd:88:5d:57:6c:d3: f8:d0:55:c4:7a:27:f2:27:7d:ad:26:e9:24:81:f0:c3:8e:bd: 56:e6:37:75:58:00:bc:ca:6e:86:ad:3d:29:50:58:75:0d:7e: 1e:53:5d:6a:04:e1:75:8b:37:cb:fe:e6:66:be:37:07:f4:81: 0d:08:d7:d3:54:74:a1:fd:55:d4:c2:e3:8c:fe:9d:f3:e9:61: 33:9b:22:3f:fc:a0:90:ba:1d:b6:24:e9:ff:e1:0a:dc:97:05: 8a:d5:18:bb:72:3c:3a:d7:63:e3:28:5f:c7:34:23:9a:fc:c8: c9:d3:be:92:8f:11:67:a5:cf:8c:de:ef:a5:7c:31:e0:87:9a: fd:ab:53:a5:c7:95:7e:f6:af:be:49:df:e8:f2:c9:f3:9d:af: 90:91:8d:ae:06:47:f6:36:72:55:7f:7d:78:22:f5:0e:6a:7a: 99:1a:25:e0:40:7d:32:5d:3c:92:3e:e2:dc:9f:34:2e:a8:a9: ba:4b:23:db:b4:9d:49:12:25:d0:62:d9:eb:30:a8:32:94:a4: 7b:70:fa:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwNTEyMTQzODQyWhcNMjYwNTE5MTQzODQyWjAYMRYwFAYD VQQDEw02YTAzM2I3Mi04YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+OHI/r4nET/G/AnlkhcdBawP/Nd7KC8Qe3Uy7HnbGaonomfiCEiqxr0WpmS VIyyIhcvAP0fI30JWYycFSPN/OyG7YnE7nWe8qcbmr11nCdJCQ83aDtUY2BaOSAS bNGlFUvSUy1b7MHPERGIw/XRy1lP/BWqbqEd7+TodwFqANaJLfyKF0+3w/ANHCv7 WHijU1B7WFye4ouBJAMpMgW5dKq4EG1Utcp1QBubXyltgF1eniFVshqlEWNsbtRm 3TaqLYQvWkMrL/OGRO3Nu7zQFlBevQlJyWAOTltv0enzzjzVunHvXP/TEb/t6LBN tA1/6/NaFTUTU1Cf+je9qmrwnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwrkW8g PquhLAWrcygX8HtDowb9MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFIOrjG2O6bIjGM1p56QeI8hZVs3TdjxZ09og1mSkBMECbfk0ArFNnlRCdHV/ V0qe/YhdV2zT+NBVxHon8id9rSbpJIHww469VuY3dVgAvMpuhq09KVBYdQ1+HlNd agThdYs3y/7mZr43B/SBDQjX01R0of1V1MLjjP6d8+lhM5siP/ygkLodtiTp/+EK 3JcFitUYu3I8Otdj4yhfxzQjmvzIydO+ko8RZ6XPjN7vpXwx4Iea/atTpceVfvav vknf6PLJ852vkJGNrgZH9jZyVX99eCL1Dmp6mRol4EB9Ml08kj7i3J80Lqipuksj 27SdSRIl0GLZ6zCoMpSke3D6Uw== -----END CERTIFICATE-----Generated at Wed May 13 15:33:47 2026 by rpki-client