$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json) Hash identifier: qI2yVAj2PePFc0eYhE/S5/h7SZVN1fykQioJLkiabo0= Subject key identifier: E4:69:13:2C:35:29:6A:B4:44:96:02:68:79:04:C5:90:5A:2D:B7:AA Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft Manifest number: 01EF Signing time: Mon 11 May 2026 03:21:23 +0000 Manifest this update: Mon 11 May 2026 03:21:22 +0000 Manifest next update: Mon 18 May 2026 03:21:22 +0000 Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: ug9feT6w9ViB2RrM3dYM5jiYsBlB+TGmpJXkLaZ+tJM=) 2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: WP8HegPa5EokTKx706o1KpMqrQcLXlZh4ZkoerJ4FaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Validity Not Before: May 11 03:21:22 2026 GMT Not After : May 18 03:21:22 2026 GMT Subject: CN=6a014b32-fc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:c3:86:f1:40:71:55:f7:74:03:5a:b7:08: 16:f8:7e:e2:92:6b:0c:86:1b:65:36:11:95:5b:d9: a5:26:e7:47:04:f4:e5:85:97:ab:79:5f:5d:01:00: ea:74:2d:27:be:d2:7f:03:d7:2a:18:cb:26:2e:59: a1:78:e7:4d:5e:c1:85:8b:25:c1:e8:66:9c:95:f1: 5a:b1:ed:d3:4d:a6:ea:68:44:7f:a5:48:fd:57:74: 89:1c:9f:fb:f3:b3:42:69:5b:ba:ff:cf:a1:27:c7: ed:77:a3:73:e5:f3:ca:4c:02:0d:7a:66:cf:fa:6e: 9d:0e:d0:dc:88:72:33:91:44:24:37:33:d7:e6:bd: 45:32:b4:2f:c7:77:d0:76:74:40:b0:99:a2:e1:7b: b2:82:e2:42:eb:95:93:ae:1f:31:92:4d:18:e5:c5: 1c:f2:d0:ed:13:7c:92:6c:89:2e:6a:bb:bd:6e:13: 6c:32:cb:3f:e2:a9:a5:aa:ba:fe:8d:7f:76:37:1b: 14:52:af:83:03:b2:f9:b5:b6:19:3d:c0:f2:12:1c: b6:c3:6b:1c:a3:ca:e3:47:0d:2c:02:9f:cb:ae:1d: 12:8b:ee:ba:dc:32:db:ce:9f:ac:f0:37:2d:cc:15: e5:0f:00:5c:77:c8:33:e1:fc:d7:73:4d:c9:12:6e: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:69:13:2C:35:29:6A:B4:44:96:02:68:79:04:C5:90:5A:2D:B7:AA X509v3 Authority Key Identifier: keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ba:d7:7a:c6:59:1a:d1:94:07:32:eb:e6:01:cf:19:1a:cc: 35:8f:5c:50:d1:69:9c:c2:85:79:f4:3c:25:0e:63:e6:31:89: a7:ed:5c:50:4d:ba:d6:3b:f4:ee:6b:28:db:15:4f:f3:4d:91: 86:a6:81:eb:58:e2:d6:15:00:8b:d2:9a:5e:49:e1:4c:88:91: a8:a3:00:a2:9a:7f:14:35:5f:9f:8b:7d:04:2f:db:b7:35:f5: 82:3e:96:7a:03:47:8e:29:ed:61:7d:54:33:46:5f:f2:6f:14: 06:23:fc:d6:83:b6:61:78:ca:ea:15:d6:e1:02:21:d3:16:eb: 36:f0:6d:e8:c9:50:dc:5a:6c:31:aa:d2:15:a8:11:a4:1a:e9: 55:9c:18:94:12:41:ed:4a:01:77:b3:27:ff:f6:c1:a7:71:0c: a2:13:d9:76:da:59:ed:e6:4b:39:49:48:09:8e:42:3e:ac:7d: c7:54:98:9c:93:21:77:46:ba:62:eb:7a:ee:cd:96:a7:56:e7: 55:d7:c5:65:8d:ce:03:36:42:66:16:de:f9:7f:52:1f:a9:c6: 63:20:44:a9:22:8e:38:38:ae:6c:86:c1:65:9f:16:2a:ad:99: 0a:22:18:4d:0f:c5:b0:84:a2:b1:8b:52:0e:d5:0d:60:c0:1a: d9:cc:c1:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDU0NjRFNDlGNTYwRUMxMEQ0OTc2RjZFMjk2MTEzQkFG MjJBOENGNUYwHhcNMjYwNTExMDMyMTIyWhcNMjYwNTE4MDMyMTIyWjAYMRYwFAYD VQQDEw02YTAxNGIzMi1mYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgbDhvFAcVX3dANatwgW+H7ikmsMhhtlNhGVW9mlJudHBPTlhZereV9dAQDq dC0nvtJ/A9cqGMsmLlmheOdNXsGFiyXB6GaclfFase3TTabqaER/pUj9V3SJHJ/7 87NCaVu6/8+hJ8ftd6Nz5fPKTAINembP+m6dDtDciHIzkUQkNzPX5r1FMrQvx3fQ dnRAsJmi4XuyguJC65WTrh8xkk0Y5cUc8tDtE3ySbIkuaru9bhNsMss/4qmlqrr+ jX92NxsUUq+DA7L5tbYZPcDyEhy2w2sco8rjRw0sAp/Lrh0Si+663DLbzp+s8Dct zBXlDwBcd8gz4fzXc03JEm4vZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORpEyw1 KWq0RJYCaHkExZBaLbeqMB8GA1UdIwQYMBaAFFRk5J9WDsENSXb24pYRO68iqM9f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy85NTUxM0JBNjVE QzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dRMUpkdmJpbGhFN3J5S296 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3oxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy85NTUxM0JBNjVEQzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dR MUpkdmJpbGhFN3J5S296MTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlbrXesZZGtGUBzLr5gHPGRrMNY9cUNFpnMKFefQ8JQ5j5jGJp+1cUE261jv0 7mso2xVP802RhqaB61ji1hUAi9KaXknhTIiRqKMAopp/FDVfn4t9BC/btzX1gj6W egNHjintYX1UM0Zf8m8UBiP81oO2YXjK6hXW4QIh0xbrNvBt6MlQ3FpsMarSFagR pBrpVZwYlBJB7UoBd7Mn//bBp3EMohPZdtpZ7eZLOUlICY5CPqx9x1SYnJMhd0a6 Yut67s2Wp1bnVdfFZY3OAzZCZhbe+X9SH6nGYyBEqSKOODiubIbBZZ8WKq2ZCiIY TQ/FsISisYtSDtUNYMAa2czBRg== -----END CERTIFICATE-----Generated at Wed May 13 05:06:44 2026 by rpki-client