$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: I38ppjmZIiBPE2TWlseyi8vP4o5exNNJXCQ1u41kiwQ= Subject key identifier: B8:88:4D:A0:53:58:CC:A8:6F:6D:74:55:52:0E:84:3B:74:69:5F:E6 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 08D0 Signing time: Tue 12 May 2026 20:27:30 +0000 Manifest this update: Tue 12 May 2026 20:27:30 +0000 Manifest next update: Tue 19 May 2026 20:27:30 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: P/m/JKBtNpyrl6Mn5yuBNsM3lrvVhLcsRKdtjfMZ89I=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: JbCPb2/G06LWsiRDNl/iJAib0NI/NVkqoq8wvubR2Qs=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: Cl5Iksm78xy4pdyZHSdPHHDj46EQ0DV5IDZjQy+nR+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: May 12 20:27:30 2026 GMT Not After : May 19 20:27:30 2026 GMT Subject: CN=6a038d32-b5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:e0:85:6c:f2:2f:01:23:75:1e:54:02:3f: 92:04:5b:24:5c:92:b2:91:3a:4b:6c:2e:c1:39:22: ae:73:e4:ef:18:29:ca:d1:3f:83:d6:17:1e:57:05: ad:99:4f:ed:9b:78:73:af:60:86:d0:7d:c0:c0:b4: 13:d2:3b:a8:52:a6:68:10:cd:53:70:50:0b:cb:5a: ca:28:e6:7c:b4:16:04:03:9b:25:bf:c1:6e:c0:8b: db:5f:fe:41:1d:01:e3:ea:54:29:bb:59:ad:8b:04: 21:03:eb:0f:89:53:33:37:1e:2d:b7:6b:90:95:a1: 08:75:4f:c2:a7:0b:95:a7:35:56:13:d6:a4:30:32: 20:7d:9f:42:59:9f:5f:14:5f:ae:1d:08:ee:51:03: 59:ee:bf:d2:5f:ee:d5:12:de:95:05:b8:4e:3f:10: 24:2b:f5:9e:8b:87:3e:bd:e8:5c:ba:14:99:3c:55: 46:93:5f:fd:bd:44:6f:36:e2:9e:ec:ec:c0:a4:81: d3:c1:dd:d8:ab:6b:47:f2:a3:45:c7:fa:4e:c4:9f: 64:1b:e6:d4:cf:9c:04:93:c4:91:d0:9f:59:e4:34: 36:61:bf:dd:10:76:0a:49:c5:e6:5e:1e:e0:a9:07: 96:1a:7f:5c:62:84:61:7a:12:fc:8c:64:13:20:b5: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:88:4D:A0:53:58:CC:A8:6F:6D:74:55:52:0E:84:3B:74:69:5F:E6 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:44:0f:1d:c4:f8:ce:5c:cf:23:b3:68:5e:10:5c:3c:f1:40: e4:68:3d:52:9b:7e:72:9e:13:fb:2f:0e:56:9e:cb:bb:3c:be: 71:99:2b:fa:31:f4:aa:1f:e6:6d:4b:a3:a8:8f:22:21:08:e5: 4c:00:bc:9e:98:30:f6:4e:b6:6f:eb:03:da:cd:cf:6d:91:3c: 2f:07:d3:20:a1:13:53:ec:0b:90:c1:5b:b9:8f:8b:5b:8c:12: a2:b9:51:44:ea:34:c5:bd:ef:b4:35:8a:cc:a2:ba:fd:42:8a: 74:8d:98:e2:26:34:59:cb:33:bd:e2:13:2d:a0:34:a4:b2:93: 6b:22:09:77:0e:ff:49:01:5b:8c:ef:53:e6:05:fe:8b:84:64: e7:22:9b:ed:65:ea:29:1c:30:58:c0:ec:7b:98:07:a8:9d:32: e4:f7:8f:c4:97:2e:d3:6a:c5:fd:8d:2a:81:3b:78:dd:43:da: c6:57:4b:1a:39:24:7b:09:09:bc:da:7e:2d:ad:7b:b0:26:ea: cb:11:5d:ec:04:85:0c:a1:62:c1:f8:54:5a:0b:f6:02:5b:c6: f3:4f:28:7b:7a:39:6a:70:bf:dd:4c:51:05:08:b6:d9:50:9e: 4c:07:26:6f:2f:a4:f0:e3:bf:92:4d:e9:25:e8:d5:c9:b6:91: 86:1c:df:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjYwNTEyMjAyNzMwWhcNMjYwNTE5MjAyNzMwWjAYMRYwFAYD VQQDEw02YTAzOGQzMi1iNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0PghWzyLwEjdR5UAj+SBFskXJKykTpLbC7BOSKuc+TvGCnK0T+D1hceVwWt mU/tm3hzr2CG0H3AwLQT0juoUqZoEM1TcFALy1rKKOZ8tBYEA5slv8FuwIvbX/5B HQHj6lQpu1mtiwQhA+sPiVMzNx4tt2uQlaEIdU/CpwuVpzVWE9akMDIgfZ9CWZ9f FF+uHQjuUQNZ7r/SX+7VEt6VBbhOPxAkK/Wei4c+vehcuhSZPFVGk1/9vURvNuKe 7OzApIHTwd3Yq2tH8qNFx/pOxJ9kG+bUz5wEk8SR0J9Z5DQ2Yb/dEHYKScXmXh7g qQeWGn9cYoRhehL8jGQTILUXawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiITaBT WMyob210VVIOhDt0aV/mMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvkQPHcT4zlzPI7NoXhBcPPFA5Gg9Upt+cp4T+y8OVp7Luzy+cZkr+jH0qh/m bUujqI8iIQjlTAC8npgw9k62b+sD2s3PbZE8LwfTIKETU+wLkMFbuY+LW4wSorlR ROo0xb3vtDWKzKK6/UKKdI2Y4iY0WcszveITLaA0pLKTayIJdw7/SQFbjO9T5gX+ i4Rk5yKb7WXqKRwwWMDse5gHqJ0y5PePxJcu02rF/Y0qgTt43UPaxldLGjkkewkJ vNp+La17sCbqyxFd7ASFDKFiwfhUWgv2AlvG808oe3o5anC/3UxRBQi22VCeTAcm by+k8OO/kk3pJejVybaRhhzfnA== -----END CERTIFICATE-----Generated at Wed May 13 09:06:54 2026 by rpki-client