$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: OnDqDc139kkCd57knA1DyS/Qu2u9DUOtoOkZSLdNqQM= Subject key identifier: CE:09:8D:38:0C:1A:B8:9A:60:76:EF:80:15:88:FA:AC:79:D1:90:10 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 0371 Signing time: Thu 23 Jul 2026 01:43:40 +0000 Manifest this update: Thu 23 Jul 2026 01:43:39 +0000 Manifest next update: Thu 30 Jul 2026 01:43:39 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: k4J2PTyG4GHjGGAL/5M9ksBy0r5DU+UhZnzuwt6iG9o=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: NnBviFT4TY6Qwr2zsDo63Z5Jckcd6G9/6LCOasbnkg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Jul 23 01:43:39 2026 GMT Not After : Jul 30 01:43:39 2026 GMT Subject: CN=6a6171cc-5b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:7d:4f:64:43:8e:6b:2c:78:6b:6d:82:b9: cd:f8:44:df:c9:1c:90:a5:55:07:a0:8f:e6:7d:4c: 3e:fd:e9:f5:f3:3e:da:d7:3c:78:79:1b:21:bf:67: 62:51:8d:bf:54:b0:23:0f:7e:2c:09:fa:ec:b9:b2: fd:28:a2:ed:71:1e:79:bf:73:cb:4b:55:f5:b6:f6: eb:10:46:e1:3d:e3:75:09:7d:2b:88:d4:bb:e1:17: a8:6e:9c:99:11:b1:6b:8b:b6:40:0d:c3:ae:c6:4e: 95:99:f1:39:d1:ba:96:88:9a:de:72:e3:c3:a7:be: 1d:e6:5c:4e:23:3b:3c:75:c4:e7:95:48:b2:1b:08: 59:84:44:66:ec:29:96:73:cd:4e:d4:f5:c2:7c:50: 54:56:f4:4e:5b:73:31:30:c2:b0:f2:97:26:8f:9a: 8a:d0:36:02:77:d2:87:ff:a7:42:49:e3:76:06:59: 5d:c5:c0:1d:94:79:d5:fa:24:e2:b8:97:bb:b7:64: f2:6c:88:2d:34:de:38:b8:f1:e3:34:6a:7a:20:28: ec:ce:84:c2:23:ca:96:5c:af:81:0a:1a:27:48:5d: e4:84:be:3e:8f:e7:4e:de:5c:16:00:dd:02:9c:6c: bf:70:b4:b0:d7:9a:b8:9b:74:36:fd:c0:ed:54:f2: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:09:8D:38:0C:1A:B8:9A:60:76:EF:80:15:88:FA:AC:79:D1:90:10 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0b:c3:7d:8a:ca:32:ef:e8:c6:31:54:fd:ec:1f:d1:a5:5d: ca:e8:b0:d2:f4:1d:c9:df:38:d3:5d:a4:5f:08:f8:98:8e:8e: e9:7d:91:0a:14:bb:35:b5:44:b1:7d:47:54:c3:f1:6f:c3:ea: b9:8f:ce:b8:66:3d:4b:47:63:e5:fc:5c:2a:93:01:b9:66:b8: 37:22:7d:41:19:49:8f:01:9b:b2:37:b4:57:bc:40:28:92:3a: 74:89:ad:0b:b8:5b:87:af:c7:a5:74:94:50:fa:79:d9:a2:db: ee:ff:4e:04:1d:bb:71:cf:c1:b1:30:89:cf:ea:8f:82:bd:37: 13:06:29:aa:8b:6f:e2:1f:95:16:8b:45:3d:04:a1:6d:af:86: 5a:4b:1f:d3:b3:85:8a:19:0b:3f:39:7b:67:f5:b4:e8:05:1f: 43:d4:bf:40:9f:73:75:35:b3:28:a1:1c:46:25:f3:2f:65:21: 55:14:d1:75:54:37:68:06:b0:eb:c4:7a:f3:11:bc:c3:6c:25: 2f:6a:11:b6:9b:b9:e7:05:71:cf:21:61:a5:0a:2e:86:20:fa: ef:b2:fc:ac:51:1f:79:15:1a:15:bb:57:dd:4e:cc:79:94:cc: 5a:f6:db:83:b7:7c:75:33:cd:f5:af:3a:ea:e1:a2:08:4f:4a: b8:34:2a:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjYwNzIzMDE0MzM5WhcNMjYwNzMwMDE0MzM5WjAYMRYwFAYD VQQDEw02YTYxNzFjYy01YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLN9T2RDjmsseGttgrnN+ETfyRyQpVUHoI/mfUw+/en18z7a1zx4eRshv2di UY2/VLAjD34sCfrsubL9KKLtcR55v3PLS1X1tvbrEEbhPeN1CX0riNS74ReobpyZ EbFri7ZADcOuxk6VmfE50bqWiJrecuPDp74d5lxOIzs8dcTnlUiyGwhZhERm7CmW c81O1PXCfFBUVvROW3MxMMKw8pcmj5qK0DYCd9KH/6dCSeN2BlldxcAdlHnV+iTi uJe7t2TybIgtNN44uPHjNGp6ICjszoTCI8qWXK+BChonSF3khL4+j+dO3lwWAN0C nGy/cLSw15q4m3Q2/cDtVPI9vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4JjTgM GriaYHbvgBWI+qx50ZAQMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMwvDfYrKMu/oxjFU/ewf0aVdyuiw0vQdyd84012kXwj4mI6O6X2RChS7NbVE sX1HVMPxb8PquY/OuGY9S0dj5fxcKpMBuWa4NyJ9QRlJjwGbsje0V7xAKJI6dImt C7hbh6/HpXSUUPp52aLb7v9OBB27cc/BsTCJz+qPgr03EwYpqotv4h+VFotFPQSh ba+GWksf07OFihkLPzl7Z/W06AUfQ9S/QJ9zdTWzKKEcRiXzL2UhVRTRdVQ3aAaw 68R68xG8w2wlL2oRtpu55wVxzyFhpQouhiD677L8rFEfeRUaFbtX3U7MeZTMWvbb g7d8dTPN9a866uGiCE9KuDQqZw== -----END CERTIFICATE-----Generated at Fri Jul 24 12:28:12 2026 by rpki-client