$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: aGch7ZN8XnZUN6dqBOywe3N8Rcudp6t/6rEzGQcLqVk= Subject key identifier: A4:7D:07:A1:05:6F:1A:9A:0E:C8:BB:3C:AF:D4:25:56:20:A3:AE:3A Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 35D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 359A Signing time: Wed 22 Jul 2026 14:39:35 +0000 Manifest this update: Wed 22 Jul 2026 14:39:35 +0000 Manifest next update: Wed 29 Jul 2026 14:39:35 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: 8/kw35l9h/xi7YRhxe12J/a3yuY2EmB//DR/z46kSDA=) 2: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: M2tZaZY+VtTJR4ttrGMuLbgoQBKpx51lR8nHOr7SfHc=) 4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: N32OeeZ0M0QwJZR+gONpAMWKoMVtOv5ROglEC/3vkfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13779 (0x35d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Jul 22 14:39:35 2026 GMT Not After : Jul 29 14:39:35 2026 GMT Subject: CN=6a60d627-2fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:db:9a:aa:46:a9:bb:76:e6:29:1e:e8:79: e6:16:d2:53:fa:d3:d6:f3:89:11:38:d0:1d:7b:1e: 7f:0a:aa:c6:46:51:e8:3d:f1:cb:c0:d5:7e:96:ac: 88:4a:eb:e4:49:8e:8b:e6:7a:42:c0:7d:37:7b:63: 40:f6:70:62:9f:9e:f2:3f:cb:d7:78:dd:cf:85:01: bb:f4:fc:14:72:a4:e5:f2:a2:62:04:24:2d:87:21: f2:c2:a4:ec:c3:5e:2e:4a:f1:60:21:95:60:8b:92: f9:39:34:77:d5:cd:78:fc:ff:91:d3:c6:99:ce:d2: 23:7e:0e:63:58:1d:88:1f:69:a6:04:e8:ee:d1:f6: e2:4d:57:64:95:90:26:83:e7:90:98:40:a5:ed:5b: a8:49:dc:b1:1f:74:e0:c9:e0:05:eb:18:64:2c:0a: 0b:51:33:6d:f5:aa:12:3f:c3:39:20:ec:91:b3:59: a7:78:60:5d:81:22:ea:ee:86:3b:97:74:45:ea:41: 7a:fc:79:20:12:98:41:40:86:39:1f:54:3b:51:19: 85:dd:a1:a5:1e:df:c3:3f:d4:f0:a2:24:e1:05:d9: c3:95:2d:df:73:ce:fb:70:50:a0:09:e2:0b:0f:5b: 82:66:86:0f:c3:26:c5:97:39:9d:b7:2b:87:d9:c6: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:07:A1:05:6F:1A:9A:0E:C8:BB:3C:AF:D4:25:56:20:A3:AE:3A X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5d:0a:a1:3f:b7:d5:75:81:1d:c4:6e:f9:05:45:ec:07:00: d7:88:e2:69:51:84:b7:a6:78:74:85:e8:35:aa:df:41:5b:b2: b6:89:45:88:e0:a6:1f:65:39:94:0e:25:1c:c2:97:82:f5:5b: 4d:62:6f:64:e0:d7:67:f0:98:13:eb:db:e8:96:31:4b:df:c7: 18:3d:33:81:7e:55:71:c0:06:56:73:12:c2:8a:33:c7:c7:9a: da:a2:fd:ba:eb:a3:d1:ce:b2:df:1e:a5:1f:84:fe:95:9e:bc: fa:31:d3:6b:dc:5b:31:4f:c7:d7:da:04:cd:63:30:53:a6:d5: 1c:ef:9c:0a:83:8f:d4:09:c0:64:1f:4c:e7:b5:5e:dd:a0:6b: 2c:c9:22:6a:0e:a3:f1:6a:86:e1:a6:53:3e:09:34:fe:d6:c3: 98:b4:57:01:91:26:19:83:d9:24:3d:e3:8a:57:46:e0:46:aa: ad:0b:ad:7d:b5:e3:55:1c:40:19:20:a6:2e:e2:13:80:bb:aa: fd:65:fb:f1:8b:d7:05:fc:3d:85:66:0e:7c:47:e3:2b:13:0e: 82:c3:dd:5a:3b:b1:4f:63:05:cb:74:04:cc:d6:c7:8c:52:0c: fc:02:4c:49:92:32:a6:08:94:3d:e9:86:c5:46:b8:90:5f:8b: 18:fc:12:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwNzIyMTQzOTM1WhcNMjYwNzI5MTQzOTM1WjAYMRYwFAYD VQQDEw02YTYwZDYyNy0yZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFrbmqpGqbt25ike6HnmFtJT+tPW84kRONAdex5/CqrGRlHoPfHLwNV+lqyI SuvkSY6L5npCwH03e2NA9nBin57yP8vXeN3PhQG79PwUcqTl8qJiBCQthyHywqTs w14uSvFgIZVgi5L5OTR31c14/P+R08aZztIjfg5jWB2IH2mmBOju0fbiTVdklZAm g+eQmECl7VuoSdyxH3TgyeAF6xhkLAoLUTNt9aoSP8M5IOyRs1mneGBdgSLq7oY7 l3RF6kF6/HkgEphBQIY5H1Q7URmF3aGlHt/DP9TwoiThBdnDlS3fc877cFCgCeIL D1uCZoYPwybFlzmdtyuH2caYewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKR9B6EF bxqaDsi7PK/UJVYgo646MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJF0KoT+31XWBHcRu+QVF7AcA14jiaVGEt6Z4dIXoNarfQVuytolFiOCmH2U5 lA4lHMKXgvVbTWJvZODXZ/CYE+vb6JYxS9/HGD0zgX5VccAGVnMSwoozx8ea2qL9 uuuj0c6y3x6lH4T+lZ68+jHTa9xbMU/H19oEzWMwU6bVHO+cCoOP1AnAZB9M57Ve 3aBrLMkiag6j8WqG4aZTPgk0/tbDmLRXAZEmGYPZJD3jildG4EaqrQutfbXjVRxA GSCmLuITgLuq/WX78YvXBfw9hWYOfEfjKxMOgsPdWjuxT2MFy3QEzNbHjFIM/AJM SZIypgiUPemGxUa4kF+LGPwS4g== -----END CERTIFICATE-----Generated at Fri Jul 24 16:00:37 2026 by rpki-client