$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: JyoH8KHf5fqR18SoVdz3KGATI6ww3BVyUYgze65Awu0= Subject key identifier: 83:B7:20:1E:79:F0:1B:7E:E5:A7:71:F8:39:5B:52:73:03:76:12:28 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0CC7 Signing time: Wed 20 May 2026 18:28:47 +0000 Manifest this update: Wed 20 May 2026 18:28:46 +0000 Manifest next update: Wed 27 May 2026 18:28:46 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: fmTz67hFSOJuDWph+XT48fdNb4janTlzP2ojtTA4rkw=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Fc0EoN7FBo1h+1UnkvkkpWbLnVe4ZgVu2lP55njdUjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: May 20 18:28:46 2026 GMT Not After : May 27 18:28:46 2026 GMT Subject: CN=6a0dfd5f-65f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:49:2c:33:4c:6b:ee:d3:51:31:73:2b:01: eb:36:c8:78:3f:80:54:06:b8:4f:ac:d5:3d:f2:47: cf:4a:29:40:32:4b:e2:04:01:5c:20:37:74:1a:c6: da:d6:d5:76:a3:cc:0e:a6:f5:42:e2:57:d9:26:b9: 3b:84:37:2d:08:44:0d:7c:50:30:19:5b:0d:b8:f0: 47:2d:05:3a:9e:a8:4f:c0:91:88:72:21:03:89:7c: bd:8e:27:85:9d:60:05:01:d0:15:73:49:8d:fb:82: 1a:f6:c5:f8:96:5b:69:71:80:c2:de:f7:6d:54:9a: aa:9d:51:fb:67:35:f9:fe:83:d3:2e:8a:55:85:29: 48:8c:09:50:78:e2:25:54:9d:6d:73:10:14:84:dd: 95:d7:96:de:68:75:8e:14:03:15:d8:76:e3:d9:ea: ae:e8:33:02:06:43:6b:cf:80:f6:a3:63:93:49:ee: 31:dd:ee:f9:9a:96:fd:24:de:58:30:ab:67:5d:d2: 8c:3a:55:30:6c:c2:e8:b0:27:1f:f9:b6:27:f9:62: 67:bb:88:86:90:bc:a3:33:e4:82:01:78:4f:e6:07: 49:4b:13:78:95:d4:82:63:3d:e1:52:50:cd:65:ba: 65:a8:4f:d7:d7:04:82:2a:e4:77:2f:e5:04:bf:fc: ca:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B7:20:1E:79:F0:1B:7E:E5:A7:71:F8:39:5B:52:73:03:76:12:28 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:74:14:32:0a:c2:95:df:db:75:47:70:aa:af:47:d8:0b:3a: 94:78:73:a4:d1:28:c3:9d:93:a7:85:17:b5:02:24:10:f7:11: 49:bc:a9:42:af:52:a8:53:9e:09:8d:ae:20:3e:89:4a:c2:08: 15:5f:e8:0b:f2:1d:e6:43:ca:e6:ed:25:f3:4f:bf:c1:e8:27: b4:59:15:88:ee:fa:e3:ae:d7:1f:99:2b:77:77:85:6f:ae:b6: 15:bd:e9:cb:07:28:ec:00:20:cf:2d:0c:58:64:c7:e9:5e:50: 72:7f:7c:d8:a4:9b:34:ee:5e:b6:c0:dd:21:5d:c6:f6:12:ac: f8:b8:61:25:2e:9e:57:4c:d3:0c:d0:f6:22:96:ca:cc:92:a9: 1f:12:55:7b:ea:d3:f3:18:e9:03:76:81:d7:9f:3b:62:63:93: 30:cf:1a:35:94:ff:d6:9d:1b:e4:f7:41:13:9f:e3:1f:e0:01: 20:5a:f7:f7:91:5d:22:78:da:c2:cd:6f:c8:1f:f2:fd:08:4f: 8c:cf:7f:32:d0:15:02:99:0d:59:a3:fe:dd:c9:b3:a8:ca:f7: f9:e4:f2:85:8c:fa:bb:71:53:b4:af:22:99:f2:06:6a:15:f3: d1:d9:fb:97:a6:42:d1:82:14:82:14:d5:72:43:52:ee:54:fb: 7a:59:f1:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjYwNTIwMTgyODQ2WhcNMjYwNTI3MTgyODQ2WjAYMRYwFAYD VQQDEw02YTBkZmQ1Zi02NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZdJLDNMa+7TUTFzKwHrNsh4P4BUBrhPrNU98kfPSilAMkviBAFcIDd0Gsba 1tV2o8wOpvVC4lfZJrk7hDctCEQNfFAwGVsNuPBHLQU6nqhPwJGIciEDiXy9jieF nWAFAdAVc0mN+4Ia9sX4lltpcYDC3vdtVJqqnVH7ZzX5/oPTLopVhSlIjAlQeOIl VJ1tcxAUhN2V15beaHWOFAMV2Hbj2equ6DMCBkNrz4D2o2OTSe4x3e75mpb9JN5Y MKtnXdKMOlUwbMLosCcf+bYn+WJnu4iGkLyjM+SCAXhP5gdJSxN4ldSCYz3hUlDN ZbplqE/X1wSCKuR3L+UEv/zK4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIO3IB55 8Bt+5adx+DlbUnMDdhIoMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHQUMgrCld/bdUdwqq9H2As6lHhzpNEow52Tp4UXtQIkEPcRSbypQq9SqFOe CY2uID6JSsIIFV/oC/Id5kPK5u0l80+/wegntFkViO76467XH5krd3eFb662Fb3p ywco7AAgzy0MWGTH6V5Qcn982KSbNO5etsDdIV3G9hKs+LhhJS6eV0zTDND2IpbK zJKpHxJVe+rT8xjpA3aB1587YmOTMM8aNZT/1p0b5PdBE5/jH+ABIFr395FdInja ws1vyB/y/QhPjM9/MtAVApkNWaP+3cmzqMr3+eTyhYz6u3FTtK8imfIGahXz0dn7 l6ZC0YIUghTVckNS7lT7elnx6g== -----END CERTIFICATE-----Generated at Thu May 21 09:31:08 2026 by rpki-client