$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json) Hash identifier: lEESWBdOhllLloty4KmJ02EolUjaq3Ixwp46VK2jZ4E= Subject key identifier: 3A:3C:B1:B3:FF:A7:3C:79:4F:03:83:81:B9:BE:8B:C0:86:23:AE:08 Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft Manifest number: 9E Signing time: Mon 11 May 2026 07:31:08 +0000 Manifest this update: Mon 11 May 2026 07:31:08 +0000 Manifest next update: Mon 18 May 2026 07:31:08 +0000 Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: /OgSf/09AsXsgs0eY8KJuirxGZWutWY4ZShZbY5fdR8=) 2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: May 11 07:31:08 2026 GMT Not After : May 18 07:31:08 2026 GMT Subject: CN=6a0185bc-b944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:14:05:c0:e3:1a:1b:28:a1:45:4a:25:86: d4:bd:2b:e3:a3:58:14:be:8b:77:d0:89:16:24:f7: 89:7f:23:d2:56:34:78:60:f2:4b:af:d1:18:73:d0: 93:bc:ce:9c:f3:22:56:47:dc:9a:8e:0c:ad:68:17: 19:2c:65:1d:ed:85:24:f5:4d:b9:96:fd:28:e4:53: e3:33:d2:c2:72:af:f6:a2:99:4a:74:c3:84:ca:f7: 03:a9:e1:81:aa:bc:c4:b2:97:2c:0a:d9:b2:81:74: 11:6b:60:f5:7b:03:42:53:68:02:c1:16:1f:27:77: a6:98:bd:cb:78:b2:c4:8e:72:1e:b9:ce:45:31:b1: 59:7a:98:f5:29:30:07:2a:e1:21:55:7a:3e:d6:28: f2:a1:b0:3c:f8:9f:6f:48:e9:9f:5a:2f:7a:20:22: d4:2a:8c:74:b7:0d:96:56:8a:5b:9f:27:3b:cc:13: 01:24:0d:f1:0c:cf:88:65:a3:d1:dc:79:1b:43:07: 37:9f:26:fa:75:c7:5d:bf:20:d0:af:c0:92:47:5f: 58:8f:7d:b7:9a:9e:68:d7:d4:90:89:bb:4d:be:3c: 60:3d:ed:bd:4e:77:a9:14:f6:8a:c9:0f:9f:b2:ec: eb:77:17:9d:c7:43:59:b4:17:3f:a8:eb:49:e1:a6: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3C:B1:B3:FF:A7:3C:79:4F:03:83:81:B9:BE:8B:C0:86:23:AE:08 X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:14:5e:46:7c:b2:66:19:3d:af:7f:8a:3b:0a:82:e8:a4:68: b7:7a:b7:1c:3c:e6:71:9e:47:70:9e:3e:66:a2:e3:2a:5a:37: fe:81:36:fd:d7:ba:fb:da:45:32:70:0b:8b:d5:d1:42:f5:d5: b4:e1:00:b8:f3:2c:85:2a:db:17:84:2a:94:77:bc:46:87:1e: 9f:00:fe:0a:1e:18:2a:44:8f:1f:7e:e4:74:e2:63:e7:38:69: 3f:bd:d8:8f:d3:e6:3f:ca:46:77:ca:61:53:26:b7:06:36:a9: 6f:d9:71:09:84:7a:c3:31:66:a7:d3:b7:6b:1f:fb:eb:36:31: 15:ba:23:57:1e:2d:aa:f3:96:44:50:4c:6e:73:b5:0a:74:9b: 8f:8b:8a:35:51:25:d3:77:96:4b:3d:44:d4:cc:78:63:b7:73: 08:27:dd:d0:49:e2:8f:59:7a:c9:d4:97:ea:da:be:85:52:89: e0:62:55:cf:60:49:91:39:4b:f4:f7:ae:0c:6d:37:37:03:37: d1:09:f2:09:a4:46:04:51:42:91:f7:d9:19:97:ab:8c:b2:04: e5:91:ef:9e:b0:50:db:a1:8b:7a:2a:28:0a:f7:e4:73:cd:6e: ec:22:c5:8d:c5:8f:0a:79:a5:9c:36:9b:eb:a8:5c:38:f6:98: f3:24:1d:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQzRjIxMTAvBgNVBAUTKDU1Nzg5QTM0MTZFN0VGNTE1Q0UwOEYwNUEzNkYxREVE ODM0NDRDMDkwHhcNMjYwNTExMDczMTA4WhcNMjYwNTE4MDczMTA4WjAYMRYwFAYD VQQDEw02YTAxODViYy1iOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneEUBcDjGhsooUVKJYbUvSvjo1gUvot30IkWJPeJfyPSVjR4YPJLr9EYc9CT vM6c8yJWR9yajgytaBcZLGUd7YUk9U25lv0o5FPjM9LCcq/2oplKdMOEyvcDqeGB qrzEspcsCtmygXQRa2D1ewNCU2gCwRYfJ3emmL3LeLLEjnIeuc5FMbFZepj1KTAH KuEhVXo+1ijyobA8+J9vSOmfWi96ICLUKox0tw2WVopbnyc7zBMBJA3xDM+IZaPR 3HkbQwc3nyb6dcddvyDQr8CSR19Yj323mp5o19SQibtNvjxgPe29TnepFPaKyQ+f suzrdxedx0NZtBc/qOtJ4aY8GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDo8sbP/ pzx5TwODgbm+i8CGI64IMB8GA1UdIwQYMBaAFFV4mjQW5+9RXOCPBaNvHe2DREwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80MTgwNTA5NDYw QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcxRmM0SThGbzI4ZDdZTkVU QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDNGMi80MTgwNTA5NDYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcx RmM0SThGbzI4ZDdZTkVUQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWhReRnyyZhk9r3+KOwqC6KRot3q3HDzmcZ5HcJ4+ZqLjKlo3/oE2/de6+9pF MnALi9XRQvXVtOEAuPMshSrbF4QqlHe8RocenwD+Ch4YKkSPH37kdOJj5zhpP73Y j9PmP8pGd8phUya3Bjapb9lxCYR6wzFmp9O3ax/76zYxFbojVx4tqvOWRFBMbnO1 CnSbj4uKNVEl03eWSz1E1Mx4Y7dzCCfd0Enij1l6ydSX6tq+hVKJ4GJVz2BJkTlL 9PeuDG03NwM30QnyCaRGBFFCkffZGZerjLIE5ZHvnrBQ26GLeiooCvfkc81u7CLF jcWPCnmlnDab66hcOPaY8yQdFA== -----END CERTIFICATE-----Generated at Wed May 13 02:09:17 2026 by rpki-client