$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: 2sbQ5S6sSczLEGwGe/UvT0sVJXcQLMRekLQ7QQ4dtPQ= Subject key identifier: D6:6C:A9:02:EE:BB:D3:C4:B3:AB:55:AE:E7:3D:05:7F:1B:D5:F8:14 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 016A Signing time: Mon 31 Aug 2026 05:19:55 +0000 Manifest this update: Mon 31 Aug 2026 05:19:54 +0000 Manifest next update: Mon 07 Sep 2026 05:19:54 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: 8nMjhrDFMfD0AYwks+57OGiPcqrzFuTcQL/drst+e3w=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 05:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Aug 31 05:19:54 2026 GMT Not After : Sep 7 05:19:54 2026 GMT Subject: CN=6a950efb-b8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:2f:51:d9:97:6a:57:e4:fd:8b:ec:ce:ad: ab:47:30:06:95:10:58:55:51:5d:3a:b7:9d:37:63: 97:c8:82:49:42:7b:34:10:dc:fe:73:a8:9e:c4:2b: 4f:9a:db:15:04:b0:1f:a2:5a:63:a4:cc:97:34:3c: 91:e0:ca:ba:07:ed:a7:35:c9:97:47:f3:38:9d:94: 8b:97:42:3f:57:df:72:38:d3:6d:74:46:44:91:7e: a1:df:e0:a3:cf:b2:18:e6:8b:f4:f0:3e:6a:dc:b8: b3:17:2a:64:fd:47:ba:58:c9:be:6e:72:41:96:ce: 9f:e9:8e:35:85:49:c3:7e:c9:40:79:06:a4:78:53: 12:62:e3:49:b2:e9:76:c6:b6:11:95:8b:b7:a0:6f: ea:56:06:d4:db:57:0c:5a:90:b4:dc:76:1a:1c:aa: 55:ce:14:23:7f:97:8a:ad:09:ef:59:3f:ff:be:8a: 50:87:fd:0e:85:eb:38:96:52:75:9d:e2:72:cd:7c: dc:99:48:0a:e2:05:39:e8:48:4a:cd:43:9c:85:bf: 9a:9e:67:8e:7b:3c:50:61:26:e0:4d:07:bf:a5:21: 92:3e:df:3e:4c:37:bc:d9:28:c4:d1:3b:66:c6:1d: 5d:43:d9:5b:c7:8e:8e:6f:17:27:ee:1b:e3:e1:c0: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6C:A9:02:EE:BB:D3:C4:B3:AB:55:AE:E7:3D:05:7F:1B:D5:F8:14 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:95:77:19:ab:12:14:df:71:06:31:76:92:3d:72:ff:54:1e: b1:b8:e4:e4:42:6a:bf:b7:d6:20:ab:b4:af:10:59:1b:fe:f3: e1:47:23:c2:6d:ae:b6:44:5d:51:7b:52:ac:57:c2:bc:20:1e: 19:fb:dc:d3:fb:18:3b:7a:99:7a:b3:72:cc:6c:72:06:8c:e4: 7d:48:8e:98:b7:87:9d:bb:ff:13:9b:67:39:2e:c1:be:fb:12: 3c:7d:63:c6:55:2e:53:32:7f:56:79:62:59:30:6a:de:d5:a1: f5:41:d1:05:e1:8f:cc:22:18:25:23:97:b3:bd:31:19:d7:60: bb:d7:19:c1:9b:38:6d:61:2b:c8:f7:0d:0a:ff:02:03:3a:ec: 1a:a4:05:fd:59:ff:d3:f1:4b:b9:ab:05:f9:f4:c9:65:ad:ca: 34:fe:9c:c1:53:7a:72:ea:82:1e:26:78:44:f4:ef:b5:5e:8f: 3e:8a:6b:c6:47:b1:82:8c:a5:01:20:7e:f8:06:0c:b2:fe:84: 5d:60:5d:bb:b1:83:1e:69:7d:7e:df:61:34:e8:eb:db:8e:41: 81:d1:d9:b6:ac:18:93:e9:16:74:52:f8:e5:93:5a:58:79:eb: d3:c7:d1:a0:69:8d:c4:8b:04:b4:1a:79:69:74:02:a2:9d:55: 30:4d:3d:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjYwODMxMDUxOTU0WhcNMjYwOTA3MDUxOTU0WjAYMRYwFAYD VQQDEw02YTk1MGVmYi1iOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJsvUdmXalfk/Yvszq2rRzAGlRBYVVFdOredN2OXyIJJQns0ENz+c6iexCtP mtsVBLAfolpjpMyXNDyR4Mq6B+2nNcmXR/M4nZSLl0I/V99yONNtdEZEkX6h3+Cj z7IY5ov08D5q3LizFypk/Ue6WMm+bnJBls6f6Y41hUnDfslAeQakeFMSYuNJsul2 xrYRlYu3oG/qVgbU21cMWpC03HYaHKpVzhQjf5eKrQnvWT//vopQh/0Ohes4llJ1 neJyzXzcmUgK4gU56EhKzUOchb+anmeOezxQYSbgTQe/pSGSPt8+TDe82SjE0Ttm xh1dQ9lbx46Obxcn7hvj4cBQTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZsqQLu u9PEs6tVruc9BX8b1fgUMB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArJV3GasSFN9xBjF2kj1y/1Qesbjk5EJqv7fWIKu0rxBZG/7z4Ucjwm2utkRd UXtSrFfCvCAeGfvc0/sYO3qZerNyzGxyBozkfUiOmLeHnbv/E5tnOS7BvvsSPH1j xlUuUzJ/VnliWTBq3tWh9UHRBeGPzCIYJSOXs70xGddgu9cZwZs4bWEryPcNCv8C AzrsGqQF/Vn/0/FLuasF+fTJZa3KNP6cwVN6cuqCHiZ4RPTvtV6PPoprxkexgoyl ASB++AYMsv6EXWBdu7GDHml9ft9hNOjr245BgdHZtqwYk+kWdFL45ZNaWHnr08fR oGmNxIsEtBp5aXQCop1VME09Nw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:45 2026 by rpki-client