$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft File: VArroLYHQFdp3kTXa34xC_VpIXI.mft (raw, json) Hash identifier: EZanjegb+pKcSkSTGrwfFetRSfM3LlMrU0cPCWftykI= Subject key identifier: F1:54:15:53:A0:02:15:7C:69:C2:1C:56:7E:E4:90:AB:9B:D1:FD:D6 Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 Certificate issuer: /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft Manifest number: 34 Signing time: Thu 23 Jul 2026 10:38:34 +0000 Manifest this update: Thu 23 Jul 2026 10:38:33 +0000 Manifest next update: Thu 30 Jul 2026 10:38:33 +0000 Files and hashes: 1: VArroLYHQFdp3kTXa34xC_VpIXI.crl (hash: hrON6Ut8baL9kiigiZP5VBfNJzBfbFfpb60/SlVo8h4=) 2: 74F89580380611F1BFB0A69592833773.roa (hash: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Validity Not Before: Jul 23 10:38:33 2026 GMT Not After : Jul 30 10:38:33 2026 GMT Subject: CN=6a61ef2a-7cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:e6:d3:67:20:47:71:89:48:8f:6d:a2:a8: 59:2d:ec:b6:22:4e:fb:1c:09:a0:ae:6a:44:aa:fe: 64:87:48:73:80:99:75:ee:34:3e:b7:c6:20:57:a0: 0b:f0:53:8b:7b:d6:d5:f4:d7:8e:5b:94:3c:cb:86: 43:80:5c:b5:fd:e0:4e:0b:c6:56:99:2e:7c:1d:35: c1:88:ae:8b:8a:a8:ea:7b:4d:e6:e5:68:a0:07:db: 55:76:f3:0c:34:56:5e:c2:54:36:cc:43:9f:74:78: 5e:44:ac:17:1a:0e:dd:11:23:2b:d8:ca:4c:70:7a: 8a:8d:1f:d7:7c:a8:20:e0:6d:b2:cf:fe:42:76:41: f4:84:95:cc:7a:fc:4d:5e:8f:0b:44:a5:ec:0e:5c: ba:19:7b:4d:a4:c4:a3:5a:e3:67:d1:f9:31:9c:1f: 0f:f2:f4:eb:6f:bb:e0:79:44:29:66:65:20:22:da: 9d:eb:56:3f:ba:a2:de:a2:6f:db:9a:e6:77:54:98: 8a:82:5a:05:73:fe:bc:1f:b1:08:ea:2a:2e:cb:d7: 32:6b:b8:04:d1:53:8d:ed:4e:49:b3:66:f4:66:80: 02:37:a1:8d:ae:f0:1f:f5:1c:c4:fc:bf:71:c4:f2: 2a:6b:41:dc:50:ce:e0:d6:bf:e8:46:f7:c4:83:ee: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:15:53:A0:02:15:7C:69:C2:1C:56:7E:E4:90:AB:9B:D1:FD:D6 X509v3 Authority Key Identifier: keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:89:e7:f6:cb:06:ac:fd:16:5e:e1:94:70:c4:b5:a5:10:5f: ee:96:78:14:ee:b6:5f:ad:a3:9c:25:4b:c8:f3:89:2e:9e:48: f4:a8:7e:87:39:26:03:0b:54:77:56:31:ad:f2:97:05:f6:e6: dc:06:fd:c9:63:66:be:3a:5e:cb:5b:9d:57:57:00:cb:bc:b0: d0:7c:53:60:fe:9a:3b:58:20:18:79:15:c5:c2:c4:27:46:f9: 7e:66:46:77:30:f1:1e:38:68:28:0d:3d:32:45:31:20:ff:58: a7:9f:7a:a2:bf:ac:45:93:6d:ed:5a:93:fc:c5:6b:f6:47:b6: 97:d4:a0:b3:f7:9d:31:1f:1a:f9:38:f6:6a:c4:ba:ca:28:f0: 2a:36:60:5f:f8:b1:67:b4:dc:59:81:53:20:fd:23:c1:cc:f4: 10:7c:47:d7:80:1c:f2:62:51:c3:94:b1:14:cf:f0:04:db:f5: 1c:06:56:44:93:0f:cb:7e:df:fa:30:d8:ee:fb:75:6f:9a:33: 62:a2:e1:43:92:45:28:0e:c3:35:df:bc:91:1a:20:48:1c:f0: 94:95:5e:e0:5c:14:f5:5c:31:33:45:a7:11:61:a4:ce:7e:58: 4b:f6:8c:bf:2f:41:79:3a:99:24:53:e8:33:a6:67:0d:b2:5b: a0:83:69:e9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0U5MjExMC8GA1UEBRMoNTQwQUVCQTBCNjA3NDA1NzY5REU0NEQ3NkI3RTMxMEJG NTY5MjE3MjAeFw0yNjA3MjMxMDM4MzNaFw0yNjA3MzAxMDM4MzNaMBgxFjAUBgNV BAMTDTZhNjFlZjJhLTdjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9t+bTZyBHcYlIj22iqFkt7LYiTvscCaCuakSq/mSHSHOAmXXuND63xiBXoAvw U4t71tX0145blDzLhkOAXLX94E4LxlaZLnwdNcGIrouKqOp7TeblaKAH21V28ww0 Vl7CVDbMQ590eF5ErBcaDt0RIyvYykxweoqNH9d8qCDgbbLP/kJ2QfSElcx6/E1e jwtEpewOXLoZe02kxKNa42fR+TGcHw/y9Otvu+B5RClmZSAi2p3rVj+6ot6ib9ua 5ndUmIqCWgVz/rwfsQjqKi7L1zJruATRU43tTkmzZvRmgAI3oY2u8B/1HMT8v3HE 8iprQdxQzuDWv+hG98SD7nonAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8VQVU6AC FXxpwhxWfuSQq5vR/dYwHwYDVR0jBBgwFoAUVArroLYHQFdp3kTXa34xC/VpIXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDRTkyLzgwQjlDMTZBMzgw NTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZkcDNrVFhhMzR4Q19WcElY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkFycm9MWUhRRmRwM2tUWGEzNHhDX1ZwSVhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD RTkyLzgwQjlDMTZBMzgwNTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZk cDNrVFhhMzR4Q19WcElYSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmief2ywas/RZe4ZRwxLWlEF/ulngU7rZfraOcJUvI84kunkj0qH6HOSYDC1R3 VjGt8pcF9ubcBv3JY2a+Ol7LW51XVwDLvLDQfFNg/po7WCAYeRXFwsQnRvl+ZkZ3 MPEeOGgoDT0yRTEg/1inn3qiv6xFk23tWpP8xWv2R7aX1KCz950xHxr5OPZqxLrK KPAqNmBf+LFntNxZgVMg/SPBzPQQfEfXgBzyYlHDlLEUz/AE2/UcBlZEkw/Lft/6 MNju+3VvmjNiouFDkkUoDsM137yRGiBIHPCUlV7gXBT1XDEzRacRYaTOflhL9oy/ L0F5OpkkU+gzpmcNslugg2np -----END CERTIFICATE-----Generated at Thu Jul 23 23:58:05 2026 by rpki-client