$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: fIPrR5JpveJr6HGAmDGry6PGG+v9d0xp/KvpH/HWFos= Subject key identifier: 71:90:C8:B8:0B:2F:F5:5A:14:84:B3:F1:31:EC:56:42:2C:24:90:0A Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1417 Signing time: Wed 22 Jul 2026 17:18:22 +0000 Manifest this update: Wed 22 Jul 2026 17:18:21 +0000 Manifest next update: Wed 29 Jul 2026 17:18:21 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: 2f0P1H6g0GEUFaao71YYEK2sIfpCqqxA9kl2RqiQZfg=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: vzjzm42ih0JuLqajby6+Lr3dFdD3i/kb+bMCNKPWSA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5154 (0x1422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Jul 22 17:18:21 2026 GMT Not After : Jul 29 17:18:21 2026 GMT Subject: CN=6a60fb5e-adf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:2d:a1:bc:0c:e8:80:c7:07:57:18:1b:c5: ee:55:7b:bb:1d:fe:e5:67:cb:8b:7f:03:03:c0:3d: 6a:94:f8:4d:93:a3:13:b0:38:65:7d:59:d9:c4:5c: 85:d4:16:42:39:29:ff:c9:9c:9f:69:a2:23:9e:fa: bb:f5:d1:f3:54:27:7d:6c:93:e6:d1:0d:69:de:e2: 5f:30:65:7f:cc:c7:89:c4:aa:b4:f3:65:e5:f7:cc: e1:76:d7:d9:6a:50:19:44:29:52:06:e8:29:a4:fe: e0:c3:05:4c:4f:55:ae:1c:d8:91:5c:af:5c:b8:45: b5:40:ee:ad:5f:ef:81:f0:c0:7b:79:7f:5b:0f:ae: 56:25:16:dd:13:3d:56:09:f7:82:55:30:8a:6e:72: f1:03:5f:6a:8a:14:a1:44:a1:0f:92:b6:6f:f6:6f: 0f:16:27:64:a2:f4:4a:6f:cc:c1:89:3a:2f:ef:51: 5f:50:ae:98:5a:ec:c7:d7:81:6c:d9:9d:e0:87:15: ca:54:32:22:aa:75:15:22:49:d5:f8:72:13:37:7a: 1d:5c:c9:47:05:49:c1:ce:10:1b:53:3d:a8:b8:d9: a1:26:49:c5:1a:2e:fb:ee:f3:27:28:69:a3:82:d7: b6:af:c5:55:44:01:3f:d0:75:5a:13:77:f6:46:24: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:C8:B8:0B:2F:F5:5A:14:84:B3:F1:31:EC:56:42:2C:24:90:0A X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:4f:7a:02:d8:e8:74:59:03:e6:e1:9d:37:bc:9a:14:2a: fe:81:ac:b8:b4:c3:d4:bd:55:96:8e:34:e0:51:5a:25:77:f9: 45:25:50:64:c9:ee:df:41:7d:81:f6:c3:2b:8d:f9:e8:81:a2: 34:13:ee:d5:d1:fb:63:e3:90:0d:1a:25:99:6b:f6:82:30:c5: 5a:23:8d:f8:78:27:8a:05:de:39:fd:29:fc:5f:de:00:ac:d3: 8e:3d:02:13:db:54:ab:31:c6:31:86:40:20:f3:43:72:35:8a: 6f:d7:7f:c9:f0:cc:3d:1d:aa:25:30:60:65:17:08:54:44:9b: 6b:9b:11:49:78:84:89:8e:c1:ef:60:88:c3:c1:3e:3d:be:f2: 25:fb:b7:74:d0:55:45:cf:a3:0c:f9:d3:8e:b5:1e:df:bb:ec: 30:aa:d9:72:f9:ee:fa:2a:6c:63:7d:59:9c:58:38:d6:6c:c5: 4c:b9:3f:a7:30:a7:a9:48:f3:a7:6e:a1:59:76:4e:fd:35:a5: 9f:0a:24:41:1e:4b:87:33:67:7c:b5:a8:6d:92:8a:c3:d1:75: 16:d2:79:57:dd:cf:5f:2f:01:61:df:fe:10:96:f1:66:67:55: 9a:69:d8:d3:05:5e:05:2a:5c:a2:07:e7:b9:ac:54:f6:80:69: 01:25:9c:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYwNzIyMTcxODIxWhcNMjYwNzI5MTcxODIxWjAYMRYwFAYD VQQDEw02YTYwZmI1ZS1hZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkBctobwM6IDHB1cYG8XuVXu7Hf7lZ8uLfwMDwD1qlPhNk6MTsDhlfVnZxFyF 1BZCOSn/yZyfaaIjnvq79dHzVCd9bJPm0Q1p3uJfMGV/zMeJxKq082Xl98zhdtfZ alAZRClSBugppP7gwwVMT1WuHNiRXK9cuEW1QO6tX++B8MB7eX9bD65WJRbdEz1W CfeCVTCKbnLxA19qihShRKEPkrZv9m8PFidkovRKb8zBiTov71FfUK6YWuzH14Fs 2Z3ghxXKVDIiqnUVIknV+HITN3odXMlHBUnBzhAbUz2ouNmhJknFGi777vMnKGmj gte2r8VVRAE/0HVaE3f2RiT0iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGQyLgL L/VaFISz8THsVkIsJJAKMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3JPegLY6HRZA+bhnTe8mhQq/oGsuLTD1L1Vlo404FFaJXf5RSVQZMnu30F9 gfbDK4356IGiNBPu1dH7Y+OQDRolmWv2gjDFWiON+HgnigXeOf0p/F/eAKzTjj0C E9tUqzHGMYZAIPNDcjWKb9d/yfDMPR2qJTBgZRcIVESba5sRSXiEiY7B72CIw8E+ Pb7yJfu3dNBVRc+jDPnTjrUe37vsMKrZcvnu+ipsY31ZnFg41mzFTLk/pzCnqUjz p26hWXZO/TWlnwokQR5LhzNnfLWobZKKw9F1FtJ5V93PXy8BYd/+EJbxZmdVmmnY 0wVeBSpcogfnuaxU9oBpASWcMQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:17 2026 by rpki-client