$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: UeRDA9AciQAnEssbi23S8rjL4123Hnx1cu/YfEj6Apg= Subject key identifier: 3C:6C:C8:77:9C:DE:2D:CA:1D:92:EB:EB:47:87:8A:EA:4F:0E:29:A4 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0434 Signing time: Thu 23 Jul 2026 01:13:40 +0000 Manifest this update: Thu 23 Jul 2026 01:13:40 +0000 Manifest next update: Thu 30 Jul 2026 01:13:40 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: SF2xUfvmZDfKQNB60vn+Z38pFU0HGQ6qJPOQH1ATP9U=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Jul 23 01:13:40 2026 GMT Not After : Jul 30 01:13:40 2026 GMT Subject: CN=6a616ac4-a860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:7b:36:f4:e3:c9:2b:94:ae:d6:b9:4e:d2: df:2c:90:dc:04:35:cb:68:67:09:d2:90:9d:16:27: 27:fa:0a:9f:09:d2:78:98:f8:42:d0:61:98:3b:7f: 3b:8e:b9:13:bb:dd:12:c7:84:9a:a1:ae:4f:14:d8: b2:c8:1f:62:ff:ac:b2:31:c9:0b:30:ab:ef:35:1b: 0b:c3:b7:86:17:a5:51:8e:2b:ad:75:a7:a1:be:4e: 05:83:2f:c3:e5:41:97:60:62:aa:0a:ef:95:8a:b7: f8:0e:f5:ce:2a:bb:d3:83:c4:50:a2:58:48:7d:9e: a8:e2:f0:6d:93:70:72:14:29:2d:c1:00:7b:7f:9e: 8a:86:34:af:b3:a0:6c:88:27:46:44:f2:6d:a6:55: 49:84:09:17:64:36:2c:f9:ec:75:6f:22:67:7e:ef: dc:d2:61:2c:30:f2:3a:c0:a4:bd:8a:92:da:c1:24: 84:6c:71:ff:44:25:8b:65:89:4b:b7:3c:ac:1b:aa: 38:5d:43:1c:64:cf:cc:ee:30:0c:fb:03:16:82:7a: c8:94:ea:35:44:fc:bc:fd:1d:e5:49:dc:17:89:f4: dc:09:00:2d:41:27:94:36:38:c3:c3:bb:0f:69:12: 9e:d2:3c:ae:f8:bf:cd:14:9f:7e:52:95:9e:ff:47: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6C:C8:77:9C:DE:2D:CA:1D:92:EB:EB:47:87:8A:EA:4F:0E:29:A4 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:3e:92:d8:bd:6d:da:7b:90:84:91:83:08:24:54:79:a6:94: f2:01:1f:db:eb:96:61:6c:66:40:1c:e3:cc:d8:38:06:6e:ef: 16:19:63:ad:ff:61:97:72:4a:dd:3e:43:26:87:39:57:b5:0d: 37:57:61:9d:af:10:b9:31:b8:c6:2a:3c:8e:a0:d8:e4:0b:e6: 11:0c:7a:fe:24:1e:f1:85:b4:77:21:b1:fc:92:eb:11:fd:20: a9:9b:ba:5e:36:77:12:e1:6b:fa:67:92:f0:f6:ef:6f:7a:2d: 52:64:f5:ff:4c:bf:80:f5:ed:f1:a9:c0:cc:df:6b:7c:7e:50: 1c:15:59:cf:c9:a9:ae:8d:2a:0d:ce:59:2c:39:ee:ab:e3:e8: b1:82:57:bf:dc:4c:5e:32:20:68:eb:24:ef:79:c4:9d:53:2b: ee:a1:bc:1c:54:b5:af:d6:f0:c1:8e:cc:05:30:86:cd:50:81: a4:ce:d1:f2:3e:87:13:e7:5a:27:b9:a9:bb:3c:c4:16:17:67: b3:ab:1a:4a:bb:14:13:bf:54:69:70:50:f4:48:6a:8d:32:ed: d5:6b:f5:69:1e:f4:18:41:b9:e8:dc:7c:24:1e:63:3b:09:fe: 46:2b:bc:b5:b9:fa:08:f6:ec:df:cd:0b:43:97:41:83:9f:f2: 45:45:0e:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwNzIzMDExMzQwWhcNMjYwNzMwMDExMzQwWjAYMRYwFAYD VQQDEw02YTYxNmFjNC1hODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nR7NvTjySuUrta5TtLfLJDcBDXLaGcJ0pCdFicn+gqfCdJ4mPhC0GGYO387 jrkTu90Sx4Saoa5PFNiyyB9i/6yyMckLMKvvNRsLw7eGF6VRjiutdaehvk4Fgy/D 5UGXYGKqCu+Virf4DvXOKrvTg8RQolhIfZ6o4vBtk3ByFCktwQB7f56KhjSvs6Bs iCdGRPJtplVJhAkXZDYs+ex1byJnfu/c0mEsMPI6wKS9ipLawSSEbHH/RCWLZYlL tzysG6o4XUMcZM/M7jAM+wMWgnrIlOo1RPy8/R3lSdwXifTcCQAtQSeUNjjDw7sP aRKe0jyu+L/NFJ9+UpWe/0dZZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxsyHec 3i3KHZLr60eHiupPDimkMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFz6S2L1t2nuQhJGDCCRUeaaU8gEf2+uWYWxmQBzjzNg4Bm7vFhljrf9hl3JK 3T5DJoc5V7UNN1dhna8QuTG4xio8jqDY5AvmEQx6/iQe8YW0dyGx/JLrEf0gqZu6 XjZ3EuFr+meS8Pbvb3otUmT1/0y/gPXt8anAzN9rfH5QHBVZz8mpro0qDc5ZLDnu q+PosYJXv9xMXjIgaOsk73nEnVMr7qG8HFS1r9bwwY7MBTCGzVCBpM7R8j6HE+da J7mpuzzEFhdns6saSrsUE79UaXBQ9EhqjTLt1Wv1aR70GEG56Nx8JB5jOwn+Riu8 tbn6CPbs380LQ5dBg5/yRUUOyw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:37:56 2026 by rpki-client