$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: CkKCLa4WAPeST4xr5peQwVO/Qft3U6rq7WmmKZ7xElM= Subject key identifier: 5F:0E:7A:45:36:B2:C7:44:11:0B:71:DE:77:97:66:7B:89:AA:AA:9C Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0957 Signing time: Wed 22 Jul 2026 20:36:15 +0000 Manifest this update: Wed 22 Jul 2026 20:36:15 +0000 Manifest next update: Wed 29 Jul 2026 20:36:15 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 97aWIqYAHtCRkM5wpW8mkhCO5eUoeO+UPnln1XRg8gs=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: 00gQhpdm0DGJO/AQ/2cxeV1F7zOqgqX/nHAnGUfY5fk=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: OerNxvvq3phHMkXzM6uc+sc+f5PWAHWyBJri0cIQ79g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Jul 22 20:36:15 2026 GMT Not After : Jul 29 20:36:15 2026 GMT Subject: CN=6a6129bf-fa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:ee:e5:54:65:87:32:09:d9:d6:28:18:b0: 00:41:7a:4c:8a:61:7a:7e:ff:36:80:93:4d:e1:d4: f1:8c:23:07:a1:1f:bb:53:23:5d:93:cc:19:5c:1e: 93:55:03:8a:ac:22:11:39:a2:1f:53:7d:e4:70:b9: 89:f0:c4:18:a2:99:1a:05:4e:63:e1:ae:5c:71:01: 9b:50:8a:1c:b5:de:df:52:c6:9c:3f:cb:2d:16:e3: 35:25:77:69:47:4c:e8:0f:62:1b:66:43:84:68:39: a1:ab:b8:30:c7:a9:f7:9d:be:0a:53:0b:82:9d:a6: 64:45:b2:9b:25:82:bc:dd:31:f5:4f:d4:bd:31:a4: 90:ee:61:bb:7c:7f:56:84:45:7b:5a:3a:33:6c:ae: 98:bc:fc:90:f1:b7:71:54:a1:17:7d:eb:ce:70:5d: 4a:89:eb:54:a2:c1:45:cf:49:46:86:02:09:e7:51: 74:03:58:3b:52:05:31:ce:93:74:db:a7:8d:5d:f1: 61:2d:d2:31:b2:ca:c8:18:0a:49:13:13:09:2e:fe: 32:d8:22:ac:a6:4e:be:35:8d:87:65:2c:c1:8f:b8: 54:74:6f:1f:f6:74:a0:6b:25:2a:5f:7b:9a:ba:cc: 74:06:da:69:85:c4:7a:0f:cb:26:75:45:6c:9c:12: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:7A:45:36:B2:C7:44:11:0B:71:DE:77:97:66:7B:89:AA:AA:9C X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:06:d5:45:11:41:00:2c:42:b6:61:f2:14:07:55:8f:af:e6: e4:7d:2d:80:f4:3d:c7:64:2e:2a:69:34:aa:19:35:57:f7:93: a2:18:28:8f:b3:9e:55:4d:ea:11:b1:67:02:32:e8:e9:a0:a3: 31:b7:01:a1:2c:5a:73:bd:20:f3:eb:16:8f:35:7a:51:66:9b: 3d:88:86:b6:6e:b0:cd:5a:09:00:76:11:c3:0a:7d:96:2b:19: a4:ff:f3:71:aa:a5:82:e6:73:b2:7c:ea:26:7e:e1:a9:b5:2e: 92:41:e6:36:9c:89:c2:d2:87:80:33:42:ba:8d:cd:7b:df:65: 01:d9:f5:2f:60:ee:a0:c0:a9:17:42:ce:bd:ec:6d:b4:45:47: e7:59:1b:71:52:df:da:ea:a0:8c:02:9f:2c:fd:a1:6b:6b:4a: 32:91:15:be:f6:c6:22:58:5a:9e:c1:d3:e4:f2:07:99:35:57: ed:93:de:dd:00:cf:0b:c1:6b:36:bc:17:cb:07:d2:63:2a:06: 9b:2a:3c:5d:94:c9:9f:3b:20:80:f7:a6:35:41:37:55:47:72: 95:4e:33:62:2a:60:21:6e:c8:e2:d1:74:aa:05:13:2e:d1:9a: 8f:77:3a:8c:96:73:1c:30:37:89:08:d8:39:9b:5a:96:fe:81: 2f:cc:a0:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjYwNzIyMjAzNjE1WhcNMjYwNzI5MjAzNjE1WjAYMRYwFAYD VQQDEw02YTYxMjliZi1mYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxXu5VRlhzIJ2dYoGLAAQXpMimF6fv82gJNN4dTxjCMHoR+7UyNdk8wZXB6T VQOKrCIROaIfU33kcLmJ8MQYopkaBU5j4a5ccQGbUIoctd7fUsacP8stFuM1JXdp R0zoD2IbZkOEaDmhq7gwx6n3nb4KUwuCnaZkRbKbJYK83TH1T9S9MaSQ7mG7fH9W hEV7WjozbK6YvPyQ8bdxVKEXfevOcF1KietUosFFz0lGhgIJ51F0A1g7UgUxzpN0 26eNXfFhLdIxssrIGApJExMJLv4y2CKspk6+NY2HZSzBj7hUdG8f9nSgayUqX3ua usx0BtpphcR6D8smdUVsnBJ38QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8OekU2 ssdEEQtx3neXZnuJqqqcMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbAbVRRFBACxCtmHyFAdVj6/m5H0tgPQ9x2QuKmk0qhk1V/eTohgoj7OeVU3q EbFnAjLo6aCjMbcBoSxac70g8+sWjzV6UWabPYiGtm6wzVoJAHYRwwp9lisZpP/z caqlguZzsnzqJn7hqbUukkHmNpyJwtKHgDNCuo3Ne99lAdn1L2DuoMCpF0LOvext tEVH51kbcVLf2uqgjAKfLP2ha2tKMpEVvvbGIlhansHT5PIHmTVX7ZPe3QDPC8Fr NrwXywfSYyoGmyo8XZTJnzsggPemNUE3VUdylU4zYipgIW7I4tF0qgUTLtGaj3c6 jJZzHDA3iQjYOZtalv6BL8yglg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:42 2026 by rpki-client