$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: DxIxT4OdxE+cDO2f7321MvcpIDlq9z9ozGHouBTY480= Subject key identifier: 77:56:50:6C:57:50:88:E9:27:74:6B:84:F5:B5:2B:F0:09:BE:99:9A Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 040F Signing time: Mon 11 May 2026 00:32:39 +0000 Manifest this update: Mon 11 May 2026 00:32:39 +0000 Manifest next update: Mon 18 May 2026 00:32:39 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: 0k92mKPRIRw633B1VW6nEBBYkcRe2to8l9s2kk82xBQ=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=) 3: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=) 4: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: May 11 00:32:39 2026 GMT Not After : May 18 00:32:39 2026 GMT Subject: CN=6a0123a7-e6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:1f:21:1c:fd:8a:54:65:f1:34:15:1a:02: 98:de:45:82:bd:07:c7:31:7e:a5:5b:c7:22:c7:08: 69:c6:92:5d:b7:46:dc:19:61:9f:7d:84:be:3c:bb: cd:82:d8:73:93:84:c9:c7:d8:db:23:cb:d1:1e:ce: d1:0d:e4:67:63:41:15:88:66:cd:3f:e5:8f:a3:ed: 48:db:be:d8:30:ff:82:08:0d:e0:65:0c:84:50:9a: c7:d0:57:43:9c:92:20:e3:e6:8e:7e:c9:d1:ce:4d: 1b:32:16:44:1c:7a:d2:5c:da:fd:d0:99:86:ec:a8: e8:6a:f9:6a:06:63:02:0b:80:08:b9:8e:25:65:71: b9:5a:6c:68:26:2e:41:29:7d:43:ae:5b:f2:ca:5c: 60:2c:8f:35:57:ea:ee:95:6c:c0:32:a4:f9:f0:0e: cf:2f:e3:21:e7:5f:98:ad:ce:c5:53:dc:eb:28:34: a9:97:b1:58:e9:57:58:bf:f3:a9:51:3a:5e:98:7b: 8d:53:5b:22:8a:cb:ea:4c:75:48:73:b7:6f:e0:51: 73:3a:89:16:91:a6:99:03:94:38:c7:07:53:77:dd: 08:fd:6e:bb:9e:07:a9:e0:e5:55:cb:a8:2a:c1:aa: 29:24:de:13:2f:93:a8:3f:e4:02:18:75:2d:61:7d: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:56:50:6C:57:50:88:E9:27:74:6B:84:F5:B5:2B:F0:09:BE:99:9A X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5f:1d:b5:71:23:5d:fa:fa:3b:6a:11:9a:d3:96:81:d7:4e: e9:60:7c:f3:fc:64:d0:1a:db:6f:d8:04:73:35:1b:ba:ef:ab: 7f:42:7f:e4:3a:27:8f:a7:cb:ef:76:f7:c0:44:0d:f9:14:89: 6e:e5:24:ea:57:58:93:ab:01:3b:d0:00:57:c2:c1:20:61:eb: dc:78:7a:e1:99:fe:59:5b:4e:39:4e:46:96:fc:6f:69:6a:69: 41:f8:7b:83:7d:56:8d:82:cd:ae:56:1c:00:23:b2:b1:c2:14: 3e:d1:5c:2c:cd:51:bd:03:11:7a:ea:5c:81:29:6a:c6:1f:1f: 1e:1c:2b:96:1c:a8:f1:98:a6:b9:98:65:29:3e:c3:d5:11:d4: 1b:ba:84:13:7d:a6:55:9e:5c:f6:35:ea:cf:0e:85:37:f7:3f: 07:cb:9a:bb:b1:c6:cd:be:b2:8c:49:25:1e:34:3d:40:ae:c2: 3a:3a:fd:77:c7:f8:84:73:03:70:20:17:16:5e:c4:74:89:fe: 1d:f2:d3:3e:18:19:dc:8c:33:15:82:5a:36:75:92:e7:c7:be: 5c:df:53:07:23:b8:0e:48:d6:5a:3f:b0:2e:82:2f:7e:93:4b: c7:b8:a7:cd:2a:01:42:be:e2:91:1b:79:50:85:7c:9c:d2:b6: 5f:0a:2d:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwNTExMDAzMjM5WhcNMjYwNTE4MDAzMjM5WjAYMRYwFAYD VQQDEw02YTAxMjNhNy1lNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcAfIRz9ilRl8TQVGgKY3kWCvQfHMX6lW8cixwhpxpJdt0bcGWGffYS+PLvN gthzk4TJx9jbI8vRHs7RDeRnY0EViGbNP+WPo+1I277YMP+CCA3gZQyEUJrH0FdD nJIg4+aOfsnRzk0bMhZEHHrSXNr90JmG7KjoavlqBmMCC4AIuY4lZXG5WmxoJi5B KX1DrlvyylxgLI81V+rulWzAMqT58A7PL+Mh51+Yrc7FU9zrKDSpl7FY6VdYv/Op UTpemHuNU1siisvqTHVIc7dv4FFzOokWkaaZA5Q4xwdTd90I/W67ngep4OVVy6gq waopJN4TL5OoP+QCGHUtYX1/AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdWUGxX UIjpJ3RrhPW1K/AJvpmaMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPF8dtXEjXfr6O2oRmtOWgddO6WB88/xk0Brbb9gEczUbuu+rf0J/5Donj6fL 73b3wEQN+RSJbuUk6ldYk6sBO9AAV8LBIGHr3Hh64Zn+WVtOOU5GlvxvaWppQfh7 g31WjYLNrlYcACOyscIUPtFcLM1RvQMReupcgSlqxh8fHhwrlhyo8ZimuZhlKT7D 1RHUG7qEE32mVZ5c9jXqzw6FN/c/B8uau7HGzb6yjEklHjQ9QK7COjr9d8f4hHMD cCAXFl7EdIn+HfLTPhgZ3IwzFYJaNnWS58e+XN9TByO4DkjWWj+wLoIvfpNLx7in zSoBQr7ikRt5UIV8nNK2XwotbQ== -----END CERTIFICATE-----Generated at Wed May 13 03:09:35 2026 by rpki-client