$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: Xwa185PjsIpu/eZ6iQbaYhTxKTWVI+cNvDcksAZcO20= Subject key identifier: 72:00:14:C2:17:35:51:8B:09:40:18:70:F1:B6:29:C0:76:BD:12:64 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0CE1 Signing time: Tue 12 May 2026 18:24:35 +0000 Manifest this update: Tue 12 May 2026 18:24:35 +0000 Manifest next update: Tue 19 May 2026 18:24:35 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: yfTBZwMl8rnTuvX81yDFqrBHqp5+vlO+GgnySy1m6LQ=) 2: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: OtV6b8befwkPsOuYarHGh5SRZOjkzLz1qANk490i9b8=) 3: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: PLVzOLnz/S3yAyLEYTQXk6jeemE0Coa5Zb4ZLWaW+pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: May 12 18:24:35 2026 GMT Not After : May 19 18:24:35 2026 GMT Subject: CN=6a037063-7b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:b8:ab:35:97:38:36:ad:d4:45:82:6a:7e: 79:23:c1:2d:1f:d7:de:9d:69:ca:2c:76:ec:2f:79: 0f:ef:fa:08:73:61:19:26:79:61:a8:59:11:59:e0: b2:75:3b:51:e5:94:cf:2a:79:e9:d0:67:b6:8b:70: f6:b8:9f:18:34:0d:5c:de:f4:c5:99:64:81:87:73: 45:de:01:e2:6a:34:14:8c:86:4d:20:cb:69:92:46: 48:a2:98:a6:b2:d4:61:31:a2:1b:96:b0:22:3b:5f: 2c:0b:50:2a:ce:e1:b9:92:9f:b4:f1:57:49:5c:96: bf:df:95:7e:52:5f:57:8d:b8:5f:43:6f:05:bc:cc: 19:1e:15:97:26:70:a6:ab:84:62:ae:1f:32:58:b5: 3f:9e:66:a4:01:80:b0:c2:77:a2:64:b8:d9:7f:b6: 5b:d5:a3:47:7c:ce:9c:fb:16:79:8e:db:f2:62:a6: d0:ea:1c:16:43:d8:dd:2f:78:19:ce:a7:69:11:71: 7f:5e:7c:27:d8:9c:fc:8e:8f:9c:49:2d:87:2e:fd: 32:dd:b0:9a:60:9e:01:0e:23:4f:68:95:0a:42:a0: ea:8a:2a:e6:d1:e0:4f:fa:05:7e:06:41:81:a9:63: 67:09:1e:32:fd:ab:af:c0:dd:d9:90:5f:78:10:52: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:14:C2:17:35:51:8B:09:40:18:70:F1:B6:29:C0:76:BD:12:64 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6b:7e:c9:db:84:ab:71:07:f3:34:f3:e7:1c:4e:28:41:99: b3:cf:3d:43:84:b7:b1:06:1b:3a:4e:28:4e:e7:99:cb:fd:31: d5:09:dc:2a:c5:09:18:6d:84:76:c9:4b:ee:87:1a:11:94:22: 08:d5:18:b7:6f:db:4e:83:20:81:4e:75:5f:b6:79:47:c5:73: 09:0d:26:23:9e:0f:d6:4e:9b:85:3f:c8:eb:7c:d4:70:28:6b: 9f:e4:de:c6:3a:b5:b2:cc:fc:de:c8:32:52:53:08:47:9a:dd: 71:f2:4f:05:17:e2:d3:0a:d4:7c:3b:ce:a0:03:83:fa:55:d5: 41:0f:b2:52:32:04:dc:e5:dc:25:f8:a5:fc:49:4d:86:91:6d: e6:5c:de:8b:7b:4d:b5:0f:64:72:28:23:a7:a4:1d:3c:0b:f8: 7a:22:c1:63:13:66:4b:35:b8:51:46:ed:5e:bc:02:38:0a:42: 6a:d7:87:95:04:e8:cc:28:cc:d7:e0:83:6e:5d:6b:f5:70:d6: d0:0c:11:ea:1c:a5:a5:9d:b0:5c:c2:f4:7c:4b:8e:16:5a:51: fc:6a:0b:30:51:2d:cc:7b:af:31:a4:7a:bd:30:bf:95:92:dc: 8e:4f:e7:56:f4:7e:f7:0b:89:22:0a:f7:69:54:74:c5:96:36: 94:72:74:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYwNTEyMTgyNDM1WhcNMjYwNTE5MTgyNDM1WjAYMRYwFAYD VQQDEw02YTAzNzA2My03YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOS4qzWXODat1EWCan55I8EtH9fenWnKLHbsL3kP7/oIc2EZJnlhqFkRWeCy dTtR5ZTPKnnp0Ge2i3D2uJ8YNA1c3vTFmWSBh3NF3gHiajQUjIZNIMtpkkZIopim stRhMaIblrAiO18sC1AqzuG5kp+08VdJXJa/35V+Ul9XjbhfQ28FvMwZHhWXJnCm q4Rirh8yWLU/nmakAYCwwneiZLjZf7Zb1aNHfM6c+xZ5jtvyYqbQ6hwWQ9jdL3gZ zqdpEXF/Xnwn2Jz8jo+cSS2HLv0y3bCaYJ4BDiNPaJUKQqDqiirm0eBP+gV+BkGB qWNnCR4y/auvwN3ZkF94EFISOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIAFMIX NVGLCUAYcPG2KcB2vRJkMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWt+yduEq3EH8zTz5xxOKEGZs889Q4S3sQYbOk4oTueZy/0x1QncKsUJGG2E dslL7ocaEZQiCNUYt2/bToMggU51X7Z5R8VzCQ0mI54P1k6bhT/I63zUcChrn+Te xjq1ssz83sgyUlMIR5rdcfJPBRfi0wrUfDvOoAOD+lXVQQ+yUjIE3OXcJfil/ElN hpFt5lzei3tNtQ9kcigjp6QdPAv4eiLBYxNmSzW4UUbtXrwCOApCateHlQTozCjM 1+CDbl1r9XDW0AwR6hylpZ2wXML0fEuOFlpR/GoLMFEtzHuvMaR6vTC/lZLcjk/n VvR+9wuJIgr3aVR0xZY2lHJ0XA== -----END CERTIFICATE-----Generated at Wed May 13 06:29:32 2026 by rpki-client